Details
LAVI.789

These are not dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM-files that are executed or opened. They contain the internal text string:
[LAVI 1.0] (c)1994 FaTHer MaC

and/or:
“FatherMac.1445″: [LASNEEZE SNEEZE SNEEZE SNEEZE
“FatherMac.1495″: [LABARF BARF BARF BARF BARF HI
“FatherMac.1536″: TE GUSTA TU NUEVO BOOT RECORD??, CORTESIA DE ANTI-RA
c:\RA\RA*.*

Depending on the system date and time some of “FatherMac” viruses beep with PC speaker or/and display the messages:
“FatherMac.789,836″: Poner aca el texto deseado
“FatherMac.838″: I feel a sickness coming on!
“FatherMac.1445,1495″: Cough Cough Cough Cough Ch
“FatherMac.1470″: Poner aca el texto deseado

“FatherMac.789″ depending on the system date and time prints the screen (INT 5).
“FatherMac.1496″ manifests itself with a sound effect.
“FatherMac.1536″ erases disk sectors.

Related Posts

This entry was posted on Monday, January 29th, 2007 at 10:00 pm and is filed under Virus Threats.

Details
LAVI.789

These are not dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed or opened. The viruses contain the text string:
[LAVI 1.0] (c)1994 FaTHer MaC

and/or:
“LAVI.1445″: [LASNEEZE SNEEZE SNEEZE SNEEZE
"LAVI.1495": [LABARF BARF BARF BARF BARF HI
"LAVI.1536": TE GUSTA TU NUEVO BOOT RECORD??, CORTESIA DE ANTI-RA
c:\RA\RA*.*
"LAVI.F5": SaLuDoS a KaLo!
?___k|-_|_Ü$ ?5 _1.0ß (-)?_ß1994 [_?_$TÇ]
C:\AUTOEXEC.BAT C:\CONFIG.SYS
“LAVI.USA”: [USA 94] (c)1994 ANuBiS
-USA 94-

Depending on the system date and time some of “LAVI” viruses beep with PC speaker or/and display the messages:
“LAVI.789,836″: Poner aca el texto deseado
“LAVI.838″: I feel a sickness coming on!
“LAVI.1445,1495″: Cough Cough Cough Cough Ch
“LAVI.1470″: Poner aca el texto deseado

“LAVI.789″ depending on the system date and time prints the screen (INT 5).
“LAVI.1496″ manifests itself with a sound effect.
“LAVI.1536″ erases disk sectors.
“LAVI.F5″ deletes the C:\AUTOEXEC.BAT and C:\CONFIG.SYS files.

Related Posts

This entry was posted on Monday, January 29th, 2007 at 8:00 pm and is filed under Virus Threats.