Virus Database

Aga.3000

Description Aga.3000

It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for COM and EXE files, then writes itself to the middle of the file. The virus uses anti-debug tricks. In some cases the virus hooks INT 13h and disables writing to the disks, manifests itself by some video effect, displays and prints the messages. The virus contains the text string:
Hello! You're already doomed!
WARNING!
It's AGA-v2 from MONGOLIA!
The file size was changed
[Q]uit or continue?
Try againall
DiRVeRWiNA: B: D: TiMeHeLpCaLcPaUsEWrItESeTuPDiR A:DiR B:Md
wArNiNg!FoRmAt A:/sDeL AuTo*.*DeL CoNf*.*Md ClEarHDMd
FoRmAtItscantiaidsdrweb.lkitf-pradinshercpav$$mon_k_pURAA!!!
Don't think about it!!!!!
Real-time error at 0x9207.
(*AGAv2.1,super stealth virus from MONGOLIA,UB -*)

Check other viruses! Be aware! Use Antiviral Software

OS2.MyName

Description OS2.MyName

This is a very dangerous, non-memory resident overwriting OS/2 virus. It is the first known virus infecting OS/2 executable files. Upon execution, it obtains the name of the host file, reads its code from there, then searches for NewEXE (LX) files and overwrites them. While infecting a file, the virus uses OS/2 calls:
DosExit DosClose DosFindFirst DosFindNext DosOpen DosGetEnv DosRead
DosWrite

and displays the messages:

My name is
--> infected

The virus also contains the text string:
VIRUS
DOSCALLS
*.EXE

Osiris.299

Description Osiris.299

It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files and writes itself to the beginning of the file. On September 30th it decrypts and displays the message:
Osiris Presents " The Trish Virus " Luv and Hugs OSiRiS

Home