Win95.Ylang.1536.a
Description Win95.Ylang.1536.a
This is a dangerous, non memory-resident encrypted parasitic virus. It searches for PE EXE files in the subdirectory tree on the C: drive, then writes itself to the end of the file to the last file section, overwrites vthe ery end of the code section with a JMP_Virus routine, and sets a PE entry address to there. This infection method has a bug and corrupts some files while infecting them.
The virus contains the following text string:
Win9x.Ylang.1536/v.19/DrL/Dec99
Check other viruses! Be aware! Use Antiviral Software
BDay.512
Description BDay.512
It is a very dangerous nonmemory resident encrypted parasitic virus. It searches for .COM-, then writes itself to the beginning of the file. While infecting the virus uses FCB-calls. Depending on the system date and time the virus erases the files. The virus contains the internal text strings:
Happy Birthday!!
????????COM
Beaches.1091
Description Beaches.1091
Beaches.1091 is a dangerous not memory resident parasitic polymorphic virus. It searches for .EXE-files and writes itself at their ends. After infection it disinfects host file. Depending on its generation it overwrites the files with the program which displays while execution:
sandy beaches
bridges sinking into the sea
beautiful confusion
you're a fading memory
|