Win32.HLLW.Dervise
Description Win32.HLLW.Dervise
Dervice is not a dangerous Win32 worm virus. The virus itself is a Windows PE EXE file about 20Kb in size and written in Delphi. The virus copies itself to the Windows directory under the name "DWServise.exe", and to the A: floppy disk under the name "DW.exe". The virus spreads from floppy disks to hard drives (only in the event that a user runs the infected file on the floppy disk), and from hard drives to floppy disks. The virus also registers a copy of itself "DWServise.exe" in the system registry auto-run key:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
ServiceInternet = %WindowsDir%DWService.exe
While spreading the virus send out 'beeps' via the PC speaker.
Device also creates the file WINSTART.BAT in the Windows directory and writes an "echo" command there that displays the following text upon Windows boot up:
You are welcomed by the manager of the disk drive of windows
Check other viruses! Be aware! Use Antiviral Software
AP.NightCity
Description AP.NightCity
This is harmless stealth boot virus. It hooks INT 13h and hits boot sectors of floppy disks and MBR of hard drive the same way as Stoned viruses do. AP viruses contains ID-word "AP".
This virus contains an error. It corrupts its own code instead of increasing of its internal counter. Depending on this counter value the virus displays:
Night City. Visit the Forgotten Realms. AD&D ICE-T [KF]
Apadana.1500
Description Apadana.1500
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files that are accessed by the FindNext FCB DOS function. On the 30th of any month or depending on the system timer the virus beeps, moves data on the screen, decrypts and displays the message:
My name is APADANA
I am a virus
version 1.3
|