Virus Database

Win32.Score.3072.a

Description Win32.Score.3072.a

It is a harmless nonmemory resident parasitic Win32 virus. It searches for PE EXE files (Windows executable files), then writes itself to the end of the file by increasing last file section size. To get access to Windows functions the virus adds its own Import tables to the host file Import section.
The virus runs its infection routines only in case current time minutes are zero, or 20, or 40. The virus does not manifest itself in any way.

Check other viruses! Be aware! Use Antiviral Software

Illusion.1330

Description Illusion.1330

These are very dangerous memory resident parasitic viruses. They hook INT 21h, and write themselves to the end of COM files that are executed or when a file's attributes are read or set. The viruses have bugs, and replicate themselves only under limited system environment variants, and in other cases, the viruses halt the system. The viruses delete the anti-virus data files:
ANTI-VIR.DAT CHKLIST.MS SMARTCHK.CPS AVP.CRC IVB.NTZ CHKLIST.TAV

On July 4th and Fridays that fall on the 2nd, the viruses erase hard drive sectors, the CMOS and display the following message:
-- IlluSioN viRus coded by ThE_WiZArD in Spain (1997) --
When you know that your time is close at hand
Maybe then you will begin to understand
Life down there is just a strange Illusion all

The viruses also contain the text:
->#ThE_WiZArD

IM-Worm.Win32.Bropia.ad

Description IM-Worm.Win32.Bropia.ad
This worm is written in Visual Basic and normally has two components: the IM-Worm itself, and a variant of Backdoor.Win32.Rbot which is embedded in the file. The backdoor is usually packed with UPX and Morphine. It will be detected as Backdoor.Win32.Rbot.gen. The worm is 188,416 bytes in size. Theall

Home