Win95.Bumble.1736
Description Win95.Bumble.1736
It is a harmless nonmemory resident encrypted parasitic Windows virus. It searches for PE EXE files (Win32 executables), then writes itself to the end of the file to the last file section by increasing its size. The virus searches for PE files in the current and Windows directories.
The virus is Win95/98 specific. To access Windows functions is scans Windows kernel data addresses that are valid only under Win9x, not WinNT.
The virus contains the text strings:
[Becoming]
[Coded by Bumblebee]
Check other viruses! Be aware! Use Antiviral Software
AntiWin_III.465
Description AntiWin_III.465
This is a dangerous nonmemory resident parasitic virus. It searches for COM files in a current and parent directories, then writes itself to the end of the file. If a file WIN*.COM is found, the virus overwrites it with a program that displays the message and returns to DOS:
This program requires Microsoft Windows
The virus contains the text string:
->AntiWindows<-
Anxiety.1358
Description Anxiety.1358
This is a dangerous memory resident (as VxD drivers) parasitic virus. It's 90% similar to Win95.Harry virus. Like Harry, Anxiety infects NewEXE PE files (Win95). When an infected file is executed, the virus scans the Win95 kernel for free space (in VMM driver), copies itself to there and hooks IFS API. When NewEXE files are opened, the virus infects them. While infecting the virus writes itself to the end of the file and modifies the NewEXE header to take control when the infected file is executed.
This virus contains the text strings:
Anxiety.Poppy.95 by VicodinES
|