Win32.InvictusDLL.101.a
Description Win32.InvictusDLL.101.a
This is a Win32 application that is detected by this name, and is infected with virus using a special INVICTUS library. This library (Win32 DLL file) is intended to minimize a virus writer's work when creating Win32 viruses and worms.
The INVICTUS library contains several standard routines for infecting files, enumerating network resources (for further infection), using polymorphic encryption, and sending infected e-mail messages, etc.
The only thing the virus writer has to do is to use library functions correctly, and to add some special routines (like payload routines), because most of the viral functions are already implemented in the INVICTUS library.
These versions of the library contain several new functions:
pack and depack routines
MIME encoding and decoding routines (which may be used to generate e-mail attachments).
Check other viruses! Be aware! Use Antiviral Software
Pandora
Description Pandora
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. Sometimes it displays a message in Chinese or in English:
Hello! How is it?
This is ----Pandora III.
Soochow University Business Administration Dep.
Writen By Blood Mary 1994.10.08
Panic.398
Description Panic.398
It is a dangerous nonmemory resident parasitic virus. It searches for .COM files of the current directory and writes itself to the end of the file. It there are no files for infection, the virus erases randomly selected disk sectors. The virus contains the text string:
Don't panic it ! It is just a virus exist in your system !
|