Virus Database

Eliza.1194

Description Eliza.1194

This is a very dangerous not memory-resident overwriting virus. It searches for COM files, then writes itself to the file beginning.
On Friday, 13th the virus searches for EXE files and erases their headers. Depending on the system timer this virus formats the disk sectors, and displays:
++ Hi! I am Eliza. Good Luck! ++

Check other viruses! Be aware! Use Antiviral Software

Devices.2000

Description Devices.2000

It is a harmless memory resident parasitic polymorphic virus. It writes itself to beginning of SYS and to the end of EXE files. While executing an infected EXE file the virus opens the C:CONFIG.SYS file, scans it for the names of device drivers, infects them and returns to the host program. While infecting a SYS file the virus creates the temporary file DEVICES.$$$, writes its code to that file, appends the code of the SYS file, then deletes the SYS file and renames DEVICES.$$$ to the original name of infected SYS file.
While loading an infected SYS file the virus installs itself into the system memory as device driver, hooks INT 1Ch, waits for some time, then hooks INT 21h and while accessing to floppy disks searches and infects EXE files.
The virus contains the text strings:
XMSXXXX0
:devices.$$$ config.sys *.exe

Devil.941

Description Devil.941

This is very dangerous memory-resident virus which by standard way affects .COM-files in the current directory (as infected files are activated) or as soon as they are started (from TSR-copy of the virus). From time to time the virus changes the color of some characters on the screen. Depending on its internal counters this infector deciphers and displays the following text: "Have you ever danced with the devil under the weak light of the moon? Pray for your disk!". It contains the strings: "Drk", "*.com", hooks INT 9, 21h.

Home