Virus Database

Win32.Vulcano

Description Win32.Vulcano

It is a memory resident parasitic Win32 virus. The virus stays in Windows memory as an application, hooks file searching and access functions, then infects PE EXE files that are intercepted.
The virus uses polymorphic engine to encrypt its body in infected files, as well as "entry-point-obscuring" (EPO) trick to hide its entry routine (to avoid trivial detection).
The virus uses anti-debugging and anti-antivirus tricks.
The virus contains "copyright" text string:
Win32.Vulcano by Benny/29A

Check other viruses! Be aware! Use Antiviral Software

MIPT.602

Description MIPT.602

MIPT.602
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. The virus does not allow to open the LOGO.PIC, HERETIC.WAD, KB2.DAT files, it returns error code on such calls. The virus contains the text strings:
logo.pic heretic.wad kb2.dat
COM
MIPT(75),1995(C),TERMINATOR

MIPT.748
It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed, opened, renamed or accessed by Get/Set File Attribute DOS call. The virus has a bug and in some cases halts the computer. The virus contains the text string:
(C)Terminator,MIPT(75)

MIPT.2000
It is not a dangerous memory resident parasitic virus. It hooks INT 9, 13h, 21h, 28h, 2Fh and writes itself to the end of COM files that are executed. While installing memory resident the virus creates the D:DOSCOUNT.SYS file, and then writes to that files the scan-codes of the keys that are pressed. The virus contains the text strings:
MIPT (72) (C) EliteSoft February 1996
****** 50 YEAR PhysTech ******

Mirage.1309

Description Mirage.1309

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files (except COMMAND.COM) that are executed. After 30th infection during the same seance they display the message:
icine yazilacak bir seybulunamamis pencere
Version 1.0
Copyright (c) 2000, space
press any key

The viruses also contain the text strings:
Mirage
COMMAND.COM

Home