ANTICMOS VIRUS

Information about the AntiCMOS virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

AntiCMOS does not keep the original copy of the boot sector, it adds its code to the existing boot sector code. AntiCMOS contains some code to modify the CMOS setup information.

AntiCMOS virus first appeared in 1994 and it is in the wild.

Other names of AntiCMOS virus:
This worm is also known as Lixi, Lenart and Anti-cmos.

BOOT -- 437 VIRUS

Information about the Boot-437:

This virus infects the boot sector of floppy disks and the hard disks. The virus infects the computer when booted with an infected disk. The spreads itself to other floppies on access in the infected machine.

Boot-437 virus first appeared in March 1994.

Other names of Boot-437:
This virus is also known as Bath

DODGY VIRUS

Information about the Dodgy Virus:

It is a bootsector virus. This virus infects the boot sector of floppy disks and the hard disks. The virus infects the computer when booted from an infected disk. This can spread under DOS as well as Windows environment. When virus is active in memory, it displays a message
RAVage is wiping data! RP&muRPhy

Dodgy virus first appeared in July 1997.

Other names of Dodgy:
This virus is also known as Ravage.

FORM VIRUS

Information about the Form virus:

This virus infects the boot sector of floppy disks and DOS boot sector of hard disks. Unlike most other hard disk infecting bot viruses, Form does not infect the partition table of the hard disk. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

If Form virus is active in memory on the 18th day of every month it makes a click sound for every key press.

Form virus first appeared in 1994 and it is in the wild.

Other names of Form virus:
This worm is also known as Form.a and Form18

JUMPER.B VIRUS

Information about the Jumper.B Virus:

This virus infects the Master Boot Record on hard disks and Boot sector under floppies. The virus infects the computer when booted with an infected disk. This virus hooks interrupts INT 21h and INT 1Ch. Due to this it is capable of spreading under the Windows 95 environment also. Sometimes this virus hangs the system during the boot up and displays graphic objects.

Jumper.B virus first appeared in December 1993

Other names of Jumper.B:
This virus is also known as Jumper, Jumper.A, Frenchboot.

KAMPANA VIRUS

Information about the Kampana virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed. After 250 boot-up it virus will display

Anti-TELEFONICA (Barcelona)

Kampana virus first appeared in 1993 and it is in the wild.

Other names of Kampana virus:
This worm is also known as Telefonica and Campana.

MONKEY VIRUS

Information about the Monkey virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

One of the unique characteristics of Monkey virus is that it encrypts the original contents of the partition table data. Because of this when the computer is booted from a clean floppy disk the hard disk will not be recognizable. When the computer is booted from the infected hard disk, the virus decrypts the partition table data and the hard disk contents will be accessible. When the virus is removed without decrypting the data all data on the hard disk will be lost. Protector Plus Anti-virus Software can decrypt the data and remove Monkey virus safely.

Monkey virus uses stealth techniques to hide its presence when it is in active in the memory.
Monkey virus first appeared in 1994 and it is in the wild.

Other names of Monkey virus:
This worm is also known as Stoned.Monkey and Empire.Monkey

PARITY VIRUS

Information about the Parity virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks if write protect notch is open. Since this is a stealth virus, changes made to floppy will not be noticed when it is in memory.
Parity virus first appeared in 1994 and it is in the wild.

Other names of Parity virus:
This worm is also known as Parity.B, Parity_Boot.b.

WELCOME VIRUS

Information about the Welcome virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

Welcome does not keep the original copy of the partition table, it adds its code to the existing partition table code. Welcome virus code contains the string:

Welcome to BUPT 9146,Beijing!

Welcome virus first appeared in 1995 and it is in the wild.

Other names of Welcome virus:
This worm is also known as Bupt, Welcomeb, Buptboot and Beijing.

AntiEXE virus.

Information about the Antiexe virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

AntiExe virus uses stealth techniques to hide its presence when it is in active in the memory. When AntiExe virus is in memory, it will be checking for a particular EXE file. When the virus detects the user accessing that file, it will corrupt that file.

AntiExe virus first appeared in 1994 and it is in the wild.

Other names of Antiexe virus:
This worm is also known as D3, Newbug and Anti-Exe.

BURGLAR.1150.A Virus

Information about the Burglar.1150.A:

Burglar.1150.A virus is a memory resident virus. This virus infects the executable files containing .EXE extension. It infects the files, which are being accessed directly or by some other application. The most important characteristic is that it does not infect file names containing letters "V" and "S". When executed this virus display the following messages respectively.

Burglar/H At the grave of Grandma

Burglur.1150.A virus first appeared in November 1998.

Other names of Burglar.1150.A:
This virus is also known as Burglur, Gangerve.

EXE_Bug.A Virus

Information about the EXE_Bug.A virus:

This virus infects the Master Boot Record on hard disks and Boot sector under floppies. The virus infects the computer when booted with an infected disk. This virus makes changes in CMOS settings. This virus moves the information from Side 0, Cylinder 0 , Sector1 to the last sector of Side 0 under hard disks. Due to its stealth capability it simulates original MBR, when it is in memory causing the user to feel everything is normal.

EXE_BUG.A virus first appeared in Oct 1992.

Other names of EXE_Bug.A Virus:
This virus is also known as Exebug, EXE_bug.B, CMOS Killer.

J&M.A Virus

Information about the J&M.A Virus:

This virus infects the Master Boot Record on hard disks and Boot sector under floppies. The virus infects the computer when booted with an infected disk. This virus activates on 15th of November. On execution this virus goes into an infinite loop and format the first track of the first hard disk.

&M.A virus first appeared in November 1998

Other names of J&M.A:
This virus is also known as Jimi, Hasita

JUNKIE.MP VIRUS

Information about the Junkie.mp Virus:

This is a multi-partite virus infects COM files, hard disks and floppy disks. This is a variant of the Junkie Boot sector virus. Once infected file is executed it alters sector 4 and 5 of the hard disk Side 0. During the next boot up it automatically becomes memory resident and it hooks the Interrupt 12h. After this it starts infecting COM files and sometimes it corrupts COM files. It also infects disk boot sectors, whenever it is accessed.

Junkie.mp virus first appeared in July 1994

Other names of Junkie.mp:
This virus is also known as Dr.White.1027.

MICHELANGELO VIRUS

Information about the Michelangelo Virus:

This virus infects the Master Boot Record on hard disks and Boot sector under floppies. The virus infects the computer when booted with an infected disk. Michelangelo carries a payload, which is triggered on March 6th. The payload on this day is to delete the files present on the infected system.

Michelangelo virus first appeared in April 1991.

Other names of Michelangelo:
This virus is also known as Stoned.Michelangelo, Michelangelo.A.

NYB VIRUS

Information about the NYB virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed.

NYB uses stealth techniques to hide its presence when it is in active in the memory. NYB virus randomly tries to move the floppy drive head to an invalid track and sector number.

NYB virus first appeared in 1994 and it is in the wild.

Other names of NYB virus:
This worm is also known as B1, Stoned.i and New York Beauty.

RIPPER VIRUS

Information about the Ripper virus:

This virus infects the boot sector of floppy disks and the partition table (MBR) of the hard disks. The virus infects the computer when booted with an infected disk. The virus infects the hard disk the first time it infects the computer. When the virus is active in the memory, it will be infecting the boot sector of all the floppy disks accessed. The virus encrypts its code while infecting.

Ripper virus uses stealth techniques to hide its presence when it is in active in the memory. Ripper will alter the data written randomly. This could result in data corruption.

Ripper virus first appeared in 1993 and it is in the wild.

Other names of Ripper virus:
This worm is also known as Jack Ripper,Jack the Ripper.