|
1605 VIRUS
The 1605 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program and then affects the computer's
runtime operation, corrupts program or overlay
files and data files.
1605 Virus
1661 VIRUS
The 1661 Virus is a computer virus which infects
.COM files including COMMAND.COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
1661 Virus
1677 VIRUS
The 1677 Virus is a computer virus which infects
.COM files including COMMAND.COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
1677 Virus
1689 VIRUS
The 1689 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program and corrupts program or overlay
files.
1689 Virus
1701 VARIANT VIRUS
The 1701 variant Virus is a computer virus which
infects .COM files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program and then affects the computer's
runtime operation and corrupts program or overlay
files.
1701 variant Virus
1704 VIRUS
The 1704 Virus (Blackjack Virus) is an encrypted
computer virus which infects .COM files including
COMMAND.COM. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation and corrupts program
files. The code for the 1704 virus is identical to
the 1701 Virus except for a single instruction.
The only differences are the removal of a
conditional jump from the 1701 (which would never
have been taken), and some necessary segment
overrides on the BIOS tests missing in the
previous version. The virus was designed to not
infect micros manufactured by IBM, but errors in
coding enable it to infect any PC, regardless of
origin. The virus tests the BIOS for the string
'COPR. IBM', and contains code to not infect if it
finds this - however there are errors in the code
which prevent it from working. As with the 1701
Virus, the
1704 Virus can recognize if it has previously
infected a file. However, because recognition
depends on the length of the virus, it will infect
programs already infected by variants with
different lengths. (1701 will infect COM files
infected with 1704, and vice versa.) The
encryption of this virus is different in each
instance of the virus, being dependent on the size
of the host file. The hard disk is formatted when
the virus activates. The 1704 Virus infects only
COM-files which are at least 3 bytes long, and it
does so only once for any given file. It
overwrites the first three bytes with a JMP to the
beginning of the viral code, which is appended to
the file. The 2 byte address of this JMP
instruction is probably the reason why only COM
files are susceptible to infection. The 1704 Virus
retains the file's time stamp. It even infects
read-only files; on write- protected floppy disks,
it attempts writing 5 times per file, thereby
revealing its activity. In the infected file, the
viral code is cryptographically encoded, using a
simple Vigenere code depending on the length of
the file; only the instructions for decoding the
encrypted part of the code are in plain machine-
language. This is obviously intended as a
impediment against disassembling. Hence, every
copy of the virus looks different (depending on
the length of the file). On invocation of an
infected program, the virus installs itself in RAM
(if no copy is already installed), then replaces
the JMP instruction with its former contents and
resumes normal program operation. The storage map
shows that the virus has tinkered with the free
storage pointer-chain to hide the fact that it has
hooked interrupt 21. Hence, only a minor part of
the virus is visible in the storage map. In every
year, from October to December, the virus will
interfere with CGA or EGA operated screens, moving
randomly chosen characters down, like falling
leaves in autumn. After a while, you'll have a big
heap of characters at the bottom of your screen,
and as you cannot see anymore what the computer is
trying to display, you'll probably have to restart
the system. This behaviour has been predicted by
two people, who have disassembled the virus, and
has later been observed on many EGA-equipped ATs.
1704 Virus
1720 VIRUS
The 1720 Virus (PSQR Virus) is a computer virus
derived from the Jerusalem Virus, which infects
.COM, .EXE and overlay files. The virus is loaded
into memory by executing an infected program and
then affects the computer' s runtime operation,
corrupts program or overlay files.
1720 Virus
1757 VIRUS
The 1757 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program. The virus corrupts program or
overlay files.
1757 Virus
1803 VIRUS
The 1803 Virus is an encrypted computer virus
which uses stealth techniques to avoid detection
and which infects .EXE files. The virus is loaded
into memory by executing an infected program and
then affects the computer's runtime operation and
corrupts program or overlay files.
1803 Virus
1804 VIRUS
The 1804 Virus is a computer virus which infects
.EXE files. The virus is loaded into memory by
executing an infected program. The virus corrupts
program or overlay files.
1804 Virus
1835 VIRUS
The 1835 Virus is a computer virus which infects
.EXE files. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation and corrupts program
or overlay files.
1835 Virus
1840 VIRUS
The 1840 Virus is a computer virus which infects
.EXE files. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation, corrupts program or
overlay files and data files.
1840 Virus
191 VIRUS
The 191 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
191 Virus
196 VIRUS
The 196 Virus is a non-overwriting version of the
97 Virus written by Fred Deakin. It is a computer
virus which infects .COM files including COMMAND.
COM. The virus is loaded into memory by executing
an infected program and then affects the
computer's runtime operation and corrupts program
files.
196 Virus
1963 VIRUS
The 1963 Virus is a computer virus which uses
stealth techniques to avoid detection and which
infects .COM, . EXE and overlay files including
COMMAND. COM. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation, corrupts program or
overlay files and data files.
1963 Virus
1971/8 TUNES VIRUS
The 1971/8 Tunes Virus is a computer virus which
infects .COM, .EXE and overlay files. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation and corrupts program or overlay files.
1971/8 Tunes Virus
1992 VIRUS
The 1992 Virus is a harmless memory resident
parasitic virus written by Skism. It hooks INT 21h
and writes itself to the end of COM- and EXE-files
that are executed or opened. It contains the
internal text string: 1992. On the last Friday of
the month the virus will display a full colour,
full screen message.
1992 Virus
1992B VIRUS
The 1992B Virus is an encrypted computer virus
which infects .EXE files. The virus is loaded into
memory by executing an infected program.
1992B Virus
2014 VIRUS
The 2014 Virus is a computer virus which infects
the fixed disk and diskette boot sectors. The
virus is loaded into memory by booting from an
infected disk and then affects the computer's
runtime operation and corrupts program or overlay
files.
2014 Virus
203 VIRUS
The 203 Virus is a computer virus written by
Solomon, which infects .COM files including
COMMAND.COM. The virus is loaded into memory by
executing an infected program. The virus corrupts
program files.
203 Virus
205 VIRUS
The 205 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program. The virus corrupts program or overlay
files.
205 Virus
2062 VIRUS
The 2062 Virus is an encrypted computer virus
which uses stealth techniques to avoid detection
and which infects .COM and .EXE files including
COMMAND. COM. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation and corrupts program
or overlay files.
2062 Virus
2153 VIRUS
The 2153 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program. The virus corrupts program or
overlay files and data files.
2153 Virus
2330 VIRUS
The 2330 Virus is a computer virus which infects
.COM, .EXE and overlay files including
COMMAND.COM. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation, corrupts program or
overlay files.
2330 Virus
2470 VIRUS
The 2470 Virus is a computer virus which infects
.COM and .EXE files. The virus is loaded into
memory by executing an infected program and then
affects the computer's runtime operation and
corrupts program or overlay files.
2470 Virus
2559 VIRUS
The 2559 Virus is a computer virus which infects
.EXE files. The virus is loaded into memory by
executing an infected program and then affects the
computer's runtime operation, corrupts program or
overlay files.
2559 Virus
2560 VIRUS
The 2560 Virus is a computer virus which uses
stealth techniques to avoid detection and which
infects .COM and .EXE files. The virus is loaded
into memory by executing an infected program and
then affects the computer's runtime operation and
corrupts program or overlay files.
2560 Virus
262 VIRUS
The 262 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
262 Virus
2622 VIRUS
The 2622 Virus is a computer virus which infects
the fixed disk partition table. The virus is
loaded into memory by booting from an infected
disk and then affects the computer's runtime
operation, corrupts program or overlay files and
data files.
2622 Virus
2803 VIRUS
The 2803 Virus is an encrypted computer virus
which uses stealth techniques to avoid detection
and which infects .EXE files. The virus is loaded
into memory by executing an infected program and
then affects the computer's runtime operation and
corrupts program or overlay files.
2803 Virus
2930 VIRUS
The 2930 Virus (Traceback II Virus) is a computer
virus which infects .COM and .EXE files,
increasing their size by 2930 bytes. The virus is
loaded into memory by executing an infected
program. The virus corrupts program or overlay
files.
2930 Virus
2936 VIRUS
The 2936 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program and then affects the computer's
runtime operation and corrupts program or overlay
files.
2936 Virus
302 VIRUS
The 302 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation and corrupts program or overlay files.
302 Virus
3040 VIRUS
The 3040 Virus is a computer virus which uses
stealth techniques to avoid detection and which
infects .COM and .EXE files. The virus is loaded
into memory by executing an infected program and
then affects the computer's runtime operation and
corrupts program or overlay files and data files.
3040 Virus
3066 VIRUS
See "Traceback Virus"
310 VIRUS
The 310 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
310 Virus
337 VIRUS
The 337 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation.
337 Virus
344 VIRUS
The 344 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program. The virus corrupts program or overlay
files.
344 Virus
3445 VIRUS
The 3445 Virus is an encrypted computer virus
which uses stealth techniques to avoid detection
and which infects .COM and .EXE files. The virus
is loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files and
data files.
3445 Virus
355 VIRUS
The 355 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program. The virus corrupts program or overlay
files and data files.
355 Virus
3551 VIRUS
See "Syslock/3551 Virus"
365 VIRUS
The 365 Virus is a computer virus which infects
.COM files including COMMAND. COM. The virus is
loaded into memory by executing an infected
program and then affects the computer's runtime
operation, corrupts program or overlay files.
365 Virus
370-B VIRUS
The 370-B Virus is a computer virus which infects
.COM files. The virus is loaded into memory by
executing an infected program and corrupts program
or overlay files.
370-B Virus
382 VIRUS
The 382 Virus is a computer virus (also known as
the Family Q Virus) which infects .COM files
including COMMAND.COM. The virus is loaded into
memory by executing an infected program and then
affects the computer's runtime operation and
corrupts program files.
382 Virus
384 VIRUS
The 384 Virus is a computer virus which infects
.COM and .EXE files including COMMAND.COM. The
virus is loaded into memory by executing an
infected program and corrupts program or overlay
files and data files.
384 Virus |