Virus Database

Easy.200.a

Description Easy.200.a

It's a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM-files that are executed. It contains the internal text string: "Easy!".

Check other viruses! Be aware! Use Antiviral Software

Koder.1024

Description Koder.1024

This is a dangerous memory resident partly encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. While opening an infected file, or while accessing to an infected file with FindFirst/Next DOS functions, the virus decreases the file length. Starting in September, the virus corrupts the CMOS check-sum field. The virus contains the text string:
KODER(96) WROCLAW

KOH.a

Description KOH.a

It's a memory resident boot virus. It hooks INT 09h (keyboard) and INT 13h. On loading from infected floppy it asks user for permission to infect hard drive:
KOH-Encrypt your HARD DISK now (please backup first)?

and infects HD on 'Y' answer, in another case it returns control to normal booting. On infection of hard drive this virus encrypts its sectors, the virus asks passwords before infection:
Now, enter 2 passwords, 1 for HD, 1 for FD. FD PW can be changed anytime
with Ctrl/Alt-K, C/A-O stops FD infect, C/A-H uninstalls on HD. Enter HD
PW at power up. WRITE THIS DOWN!
CASUAL encryption=fast but breakable--keeps out snoops.
STRONG encryption=good but slow--keeps out all. Use disk cache.
Do you want STRONG encryption?

On loading from infected HD the virus asks for password and lets booting on true answer only. This virus infects/encrypts floppy disks also. It can decrypt disks and uninstall itself on Ctrl-Alt-K,O,H keyboard keys. This virus contains and displays other strings also:
Initial load failedall aborting.
Load successful. A: now infected with KOH.
Sure you want to uninstall?
Should change be permanent?
Enter FLOPPY PW now.
Now enter HD PW.
Enter
Password:
Verify Password:
Verify failed!
KOHv1.00

Home