Virus Database

Mity.1982

Description Mity.1982

It is not a dangerous memory resident multipartite virus. When an infected file is executed, the virus writes its code to the last sectors of C: drive and modifies the disk partition table in such way, that active boot sector address points to the virus code (see "Starship" virus). The virus then returns to the host program.
While booting from infected disk the virus hooks INT 13h, waits for DOS loading process, hooks INT 21h and then infects COM and EXE files that are executed. The virus writes itself to the beginning of COM file and to the middle of EXE files.
Depending on its counters the virus displays the text:
XXXX XXXX XXXXXXXX XXXXXXXXXX XXX XXX
XXXXXX XXXXXX XXXXXXXX XXXXXXXXXX XXXXX XXXXX
XXXXXXXXXXXXXXX XXXX XXXX XXXXXXXXX
XXXX XXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXXX
XXXX XXXX XXXX XXXX XXXXX

Mix.2280

Description Mix.2280

This is a dangerous encrypted memory-resident parasitic virus. It hooks INT 8, 9, 14h, 17h, 21h and writes itself to the end of COM files that are loaded into the memory.
The virus contains the text:
Strike the pauseVogue, you got to Let your body move with the music
I can leave you , say goodbye , i can love u if i try all...
Left to my own devices i probely could.
The virus manifests itself by changing some characters as they are sent to COM or LPT ports. It changes background color when Ctrl-Alt-Del are pressed, causes "characters falling", or launches a ball, bouncing around the screen frame. An infected file contains the text "Mix1" or "Mix2" at its end.

Mix.664

Description Mix.664

This is a dangerous memory-resident parasitic virus. It hooks INT 8, 9, 14h, 17h, 21h and writes itself to the end of EXE files that are loaded into the memory.
The virus manifests itself by changing some characters as they are sent to COM or LPT ports. It changes background color when Ctrl-Alt-Del are pressed, causes "characters falling", or launches a ball, bouncing around the screen frame. An infected file contains the text "Mix1" or "Mix2" at its end.

Mixx.570

Description Mixx.570

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. On February 28th the virus formats the hard drive sectors. It contains the text:
MiXx

MJ.1513.a

Description MJ.1513.a

This is a very dangerous memory-resident virus which writes itself into the MBR of the hard disk as soon as an file is started and into .COM- files whenever they are started. The old contents of the MBR is saved at the location 0/0/2 (head/track/sector). COM-files are affected by standard way.
Whenever an infected .COM-file is started the virus installs its TSR copy into the memory, displays the message "Bad command or file name" and returns to DOS. On the 100th reboot from the infected hard disk the first 16 sectors of it are wiped out. On every 256th read operation from an infected disk (INT 13h) the virus placed the word 'mj' into the block that has been read at the location C8h. The virus hooks INT 13h, 1Ch, 21h.

Home