Virus Database

AD.132

Description AD.132

This is harmless nonmemory resident parasitic virus. It searches for COM files in the current directory, then writes itself to the end of the file. The virus contains the ID-byte ADh.

Check other viruses! Be aware! Use Antiviral Software

DiskBoomer.576

Description DiskBoomer.576

It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the beginning of the file. After infecting, the virus deletes the anti-virus data files ANTI-VIR.DAT and CHKLIST.MS. On the 17th of any month the virus erases data on the C: drive and displays the message:
DISKBOOMER (C) 1995 RP Virus Lab Bucharest

DiskFiller

Description DiskFiller

This is a very dangerous stealth virus that hits Boot-sectors of floppy disks and the MBR of hard disks during access. This virus formats an additional track on the floppy disk (the 40th on 360K size and 80th on 1.2M) and then puts its code there. After that, the virus mounts its head part into the boot sector of the floppy, its original contents is practically unchanged. On a hard disk infection, the virus places its body just after the MBR. Inside the MBR, it changes the active boot sector address only and sets this address to the sector containing the beginning of the virus code.
When COMMAND.COM is started, the virus moves itself into the low address memory area. According to the system time it encrypts and displays the message: Haha,vírus van a gépben!! Ez egy eddig még nem közismert vírus. De hamarosan az lesz. A neve egyszerüen töltögetö Ezt a nevét onnan kapta, hogy feltöltögeti a FAT-táblát kölönbözö alakzatokkal. Ez már meg is történt !!!

and then "draws" in the FAT sectors the following picture:
****** ******
* ** *
* * * ** * * *
* ** *
* **** ** **** *
* * * *
**** ****

The virus also contains the string "command.com", hooks INT 13h,1Ch,21h.

Home