Win32.Saynob.2406
Description Win32.Saynob.2406
Saynob is a very dangerous parasitic Win32 virus. The virus is per-process memory resident, and is active untill the infected application exits. The virus searches for Win32 EXE applications (PE EXE files) on local and network drives and writes itself to the end of these files.
On the 1st of each month the virus displays a message box containing the text displayed below and deletes all the files on all local drives:
My Baby Do you Love me ? Do not Say No !
Check other viruses! Be aware! Use Antiviral Software
M.534
Description M.534
It is a dangerous memory resident parasitic virus. It does work only under old DOS versions (DOS 3.30 and other), but does not check the DOS version. When an infected file is executed, the virus hooks INT 21h and then writes itself to the end of EXE files that are opened.
The virus corrupts the files with the length greater than 64K. In some cases the virus also corrupts the EXE header fields. While infecting a file the virus patches the INT 24h handler and does not restores it after infection. When infecting a file the virus also displays the 'M' letter to the left top corner on the screen.
M_Five.844
Description M_Five.844
This is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus also searches and infects COM and EXE files upon selecting a new directory. On Fridays, the virus decrypts and displays the following message:
This program has been infected by M-FIVE virus
On Tuesdays at 5:00 and 17:00, it erases the hard drive sectors.
|