Virus Database

Yanush.934

Description Yanush.934

This is a harmless non memory-resident encrypted parasitic virus. It is related to the "VCL" viruses. It searches for COM files, then writes itself to the end of the file. On April 1st, June 2nd, September 3rd the virus displays one of the messages:
Thanks to Yana Diagileva for their songs
Thanks to Shunya for their love and hate
And Thanks You Stupid User for using our virus
Relax man all relax ...
[VivatNadym] v.2.0 [1998]
Hello, Welcome to the Psychiatric Hotline.
The virus also contains the text:
[Yanush Milovski] and [GloomyTanat]

Check other viruses! Be aware! Use Antiviral Software

Mail

Description Mail

It's a not dangerous memory resident boot virus. It hooks INT 8, 9, 13h and writes itself into MBR of hard drive and floppy boot sectors. Depending on its internal counters it disables keyboard, overwrites CMOS, displays the picture:
+------------------- Help for users E-Mail ----------------------+
¦ Send/Receive Mail Manual page 137 ¦
+----------------------------------------------------------------+
¦ This command starts Commander Mail and sends any messages in ¦
¦ the OUT directory via MCI Mail. It also copies any new ¦
¦ messages from MCI Mail to the IN directory. ¦
¦ ¦
¦ Use the commander maiL command if you just want to browse ¦
¦ through messages in your IN directory, or if you want to ¦
¦ create new messages. ¦
¦ ¦
¦ Use the Send files item in the Files menu if you want to send ¦
¦ files to someone via MCI Mail. ¦
¦ ¦
¦ Note: This function is provided by the MCI.EXE and ¦
¦ MCIDRIVR.EXE programs, which must be in the same ¦
¦ directory as the Norton Commander (NC.EXE). ¦
+----------------------------------------------------------------+

Majkl Family

Description Majkl Family

These are harmless memory resident encrypted multipartite viruses. While executing of the infected file the virus writes itself to MBR of the hard drive, hooks INT 13h, 21h and then writes itself to the end of COM- and EXE-files that are executed or opened. While booting from infected MBR the virus hooks INT 8, 13h, waits for DOS loading procedure, then hooks INT 21h and hits the files.
The viruses use anti-debugger tricks bases on the features of i386+ processors. The "Majkl.1438" virus contains the text string:
Majkl

Home