daemaen famil
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Daemaen Family
These are memory resident encrypted multipartite viruses. They write themselves at the end of COM-, EXE- and SYS-files, the files SC*.*, CL*.*. VS*.*, F-*.* are not infected. On execution of infected program these viruses try to infect MBR sector of hard drive, they save the original MBR sector and its body at the 9/10/11/12 physical sectors of hard drive and then write new infected MBR. These viruses hook INT 13h and infect boot sectors of floppy disks also, the original boot sector and the virus body are stored at the last sectors of floppy. The viruses hook INT 21h also, they hit the files on accessing to them. These viruses look like a harmless ones but during one of experiments one of them erased the FAT of test computer. They contain the internal text strings:
"Daemaen.1894":
COMEXEBINOVLSYSSCCLVSF-
Cowboys From Hell/Vulgar Display of Power [Pantera]
The best Power Metal band in the world.
tHiS k0oL ViRUZ WaReZ bY [TLN<=>NK_] '93!
"Daemaen.2041,2048":
[DeMn] by TLN-{{NK_}
Hugs to Sara Gordon
Hey John! If this is bad, wait for [VCL20]!
For Dudley
[VCL20]/TLN_
COMEXEBINOVLSYS
Copyright @2006 daemaen famil