Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Arianna

Arianna is a multipartite, encrypted EXE infector with implemented stealth technology. When the infected file is run the virus attacks MBR of the hard disk. The virus hooks interrupts INT 13h and INT 21h. It infects files at the access to them by attaching itself to their end and modifying the heading. When an infected file is opened the virus leaves it, when the file is closed it infects it again. Depending on system date the virus displays a text string “ARIANNA VIRUS” and deletes MBR. In bodies of specific variants of the virus there are various coded texts.

Arianna .2864: "ARIANNA VIRUS" HAS DONE A RECOVERABLE DAMAGE GOOD LUCK FRIEND !!

In a frame there is the following text:

ARIANNA is changing your computer activity
If you wish no damage do not turn it off
ThanX for diffusion

And under the frame this text:

Coded in BARI thanX 2 DOS UNDOCUMENTED
Arianna.3375: Coded in BARI thanX to DOS UNDOCUMENTED See you for a new virus release. Bye !
Arianna.3426: Coded in BARI thanX to DOS UNDOCUMENTED Check the code to discover the virus name It is very easy ! Bye !!

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.