Virus Database

Costin.703

Description Costin.703

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus also hooks INT 9, 28h, 2Fh but does not use these hooks in any way, except INT 2Fh. The only intercepted function in INT 2Fh virus handler is virus' "Are you here?" call to detect its resident copy.
The virus contains the text strings:
COSTIN
Hi hacker !
If you change this code your system will crash and burn !
Bye hacker !

Despite on this text the virus does not perform any action if its code it modified. The only one hack may cause system crash: the text "COSTIN" is used as a part of virus code, so if this text is changed the system may halt.

Check other viruses! Be aware! Use Antiviral Software

Net-Worm.Win32.Mytob.dc

Description Net-Worm.Win32.Mytob.dc
This network worm infects computers running under Windows. It spreads as an attachment to infected emails, sending itself to email addresses harvested from the victim machine. The worm itself is a Windows PE EXE file 48640 bytes in size. It includes a backdoor, which receives commands via IRCall

Net-Worm.Win32.Mytob.r

Description Net-Worm.Win32.Mytob.r
This network work infects computers running Windows. The worm itself is a Windows PE EXE file, approximately 63KB in size, packed using UPX. The unpacked file is approximately 164KB in size; however, there are several modifications of this version of Mytob, some of which use different packersall.

Home