This is a benign non-memory resident parasitic virus infecting Win95 EXE files (PE). When an infected files is executed, the virus searches for all PE-EXE files in the current directory and infects them. While infecting a file the virus writes itsel... [More]

It is a harmless memory resident parasitic Win9x virus. It stays in Windows memory as VxD (system) driver, hooks Windows file open function (by intercepting IFS API chain), then writes itself to the end of PE EXE files that are opened. The virus doe... [More]

This is a harmless, non-memory resident polymorphic parasitic Win9x virus. It searches for PE EXE files in the current directory only, then writes itself to the end of the file. The virus does not manifest itself in any way. It contains the text st... [More]

This is a Windows 95 memory resident parasitic virus. When an infected file is executed, it copies itself to the cave in Windows kernel (VMM data), hooks IFS API and infects PE executable files that are opened. While infecting the virus creates new ... [More]

This is a relatively harmless memory resident polymorphic parasitic Win9x virus. It stays in the Windows memory as a device driver (VxD) by switching from application mode to Windows kernel (Ring3->Ring0), hooks disk-file access functions, and infec... [More]

this text was written with the help of Peter Szor, Data FellowsThis is a direct action (nonmemory resident) Windows95 polymorphic virus. It affects PE EXE (Portable Executable) files which it searches in current, Windows and System directories. Becau... [More]

This is a dangerous memory resident polymorphic parasitic Windows virus. It replicates under Win95/98 only, and infects PE EXE files (Windows executables) that are opened or executed.While infecting, the virus increases the size of the last file sec... [More]

It is not a dangerous nonmemory resident encrypted parasitic virus written in Russia. It infects the Windows95 executable files (PE EXE files). It is the first known Windows95 virus that encrypts its code. The virus has no side effects - it does neit... [More]

This virus uses a sophisticated method of infection: while infecting a file the virus scans it for executable section, moves all other sections down to allocate a "cave" of necessary size, writes itself to there and fixes parameters of all modifie... [More]

This virus uses a sophisticated method of infection: while infecting a file the virus scans it for executable section, moves all other sections down to allocate a "cave" of necessary size, writes itself to there and fixes parameters of all modifie... [More]