Virus Database

Aga.3000

Description Aga.3000

It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for COM and EXE files, then writes itself to the middle of the file. The virus uses anti-debug tricks. In some cases the virus hooks INT 13h and disables writing to the disks, manifests itself by some video effect, displays and prints the messages. The virus contains the text string:
Hello! You're already doomed!
WARNING!
It's AGA-v2 from MONGOLIA!
The file size was changed
[Q]uit or continue?
Try againall
DiRVeRWiNA: B: D: TiMeHeLpCaLcPaUsEWrItESeTuPDiR A:DiR B:Md
wArNiNg!FoRmAt A:/sDeL AuTo*.*DeL CoNf*.*Md ClEarHDMd
FoRmAtItscantiaidsdrweb.lkitf-pradinshercpav$$mon_k_pURAA!!!
Don't think about it!!!!!
Real-time error at 0x9207.
(*AGAv2.1,super stealth virus from MONGOLIA,UB -*)

Check other viruses! Be aware! Use Antiviral Software

Olgi.480

Description Olgi.480

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus does not manifest itself in any way.

Olivia.2152

Description Olivia.2152

This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. Duplicate infection is possible. In some cases, the virus writes the "jump-to-virus" instruction to the middle of COM files. The virus checks the names and do not infect the following files:
4DOS, COMMAND, WIN, EMM386
The virus uses anti-debugging tricks and disables several anti-virus resident monitors. On April 10th it launches its trigger routine. This routine checks the CD-ROM installed and displays the following message:
please put a love music CD into your CD-ROM
and pass any key to continueall
Then it summons several system CD-ROM access functions (plays CD-ROM?). Then the virus displays some text (possibly in Chinese) including the text:
By André '97/1/30
The virus then erases the CMOS and hard drive sectors.

Home