Win32.Intar
Description Win32.Intar
It is not a dangerous nonmemory resident parasitic encrypted Win32 virus. It searches for PE EXE files in subdirectories on current drive, then writes itself to the end of the file.
The virus does not manifest itself in any way except "log" records in WIN.INI file: the virus creates [Temp] section in there and writes to there "Saved=" key with the name of latest infected file, for example:
[Temp]
Saved=C:WINDOWSNOTEPAD.EXE
The virus contains the text string:
[Win9x.Integrator] by Gobleen Warrior//SMF
People can flyall Everything can happen...
Check other viruses! Be aware! Use Antiviral Software
LV.477
Description LV.477
This is a dangerous memory resident parasitic virus. It copies itself into the system memory at the address 99C2:xxxx, and does not fix MCB list, that might halt PC. Then the virus hooks INT 8, 21h and stays memory resident.
The virus infects only COMMAND.COM files when an infected files is executed, and from its TSR-copy when the files are opened. While infecting, the virus uses "Lehigh" method, and the length of the file does not grow.
Under infected system conditions the system speaker plays beeps (INT 10h, ax=0E07h).
Lviv.600
Description Lviv.600
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus has a bug while installing memory resident - it does not leaves its copy in separated memory block, but in block of free memory. As a result, when any other program occupies this block, the system halts. The virus contains the ID-string:
Lviv
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
S.a.t.s. Karlskrona Ab
Ulf Eriksson Entreprenadarbeten
Crawford Sverige Ab
Byggakuten I Stuvsta Handelsbolag
Wallentins Bilverkstad
|