Virus Database

Albania.429

Description Albania.429

This is a harmless non memory-resident virus which finds and infects COM files of the current directory. Some of these viruses analyze the COMSPEC string and hit the file COMMAND.COM. It contains one of the strings: "ALBANIA" or "albania".

Check other viruses! Be aware! Use Antiviral Software

Leech.1024

Description Leech.1024

These are memory resident encrypted viruses. They hook INT 21h and write themselves into COM files that are executed or closed. If the first instruction of the file is a JMP (E9h or EBh), then the virus inserts itself into the file middle at the address to where JMP instruction points, else the virus writes itself to the beginning of the file. While infecting the virus uses undocumented System File Table.
Depending on the current time "Leech.1024", "Glist.1014" and "Tazta.1008" display the messages and erase the sectors of the root directory of the current drive:
"Leech.1024": The leech liveall
"Leech.Tazta.1008": Super, Super! ... March 1993, Tazta.
"Leech.Glist.1014": Mr.Tapeworm May 1996 The GLIST

"Leech.Warrier.768" is a harmless virus. It contains the text:
The WARRIER!

Legion.3274

Description Legion.3274

This is a benign non-memory resident encrypted parasitic virus. It searches for .COM files, then writes itself to the end of the file. The virus does not infect files with names that begin with two-letter variants from the string: "COSODETSANIB-D-UWIPU" (COMMAND.COM, SO*.*, all).
If the date and month correspond in number(January 1, February 2, ...), the virus displays the following message:
ATTENTION !!! PERM RESEARCH CENTER
OF AUTO-TRANSFERRING SOFTWARE PRESENT:
+++ ++---++++---+++-+++-+++--++++-+ ++
||| |+-- || --++ ||| || |||| ++||
+++-++++---++++---+++-+++-+++--++++ +++ Version 5.00
(C) TEAM O'SHEEN DA 12-Feb-1997
PRESS TO EXECUTE PROGRAM

Home