Virus Database

Win32.InvictusDLL.200.a

Description Win32.InvictusDLL.200.a

This is a Win32 application that is detected by this name, and is infected with virus using a special INVICTUS library. This library (Win32 DLL file) is intended to minimize a virus writer's work when creating Win32 viruses and worms.
The INVICTUS library contains several standard routines for infecting files, enumerating network resources (for further infection), using polymorphic encryption, and sending infected e-mail messages, etc.
The only thing the virus writer has to do is to use library functions correctly, and to add some special routines (like payload routines), because most of the viral functions are already implemented in the INVICTUS library.
This version of the library are able to use the KME polymorphic library and "Entry Point Obscuring" technology when infecting files. This means the virus does not infect a file at its entry code, but places a "Jump Virus" instruction somewhere in the middle of the file-code section to make detection and disinfection procedures more complex. As a result, the virus is activated only when a corresponding infected-program branch receives control.

Check other viruses! Be aware! Use Antiviral Software

Penetrator.984

Description Penetrator.984

It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. On 77th infection the virus erases the disk sectors and displays the message:
Cat scratch fever.(CSF)
by Penetrator (IRI).Special thanks to Dr.Armageddon.
Writing such funny things is not a crime!

Pentagon

Description Pentagon

This is a dangerous virus. It infects Boot sectors of floppy disks in a "Brain" way. If the floppy disk is already infected by the "Brain virus, "Pentagon" will "cure" the Boot sector of this disk, change its label and infect the disk by itself. The file PENTAGON.TXT will be created on the infected disk. The virus survives "warm" rebooting. Some part of the virus is encrypted. The virus hooks INT 9, 13h. The virus contains the text: "(c) 1987 The Pentagon, Zorell Group", "first sector in segment".

Home