Virus Database

Email-Worm.Win32.Sober.p

Description Email-Worm.Win32.Sober.p
This worm spreads via the Internet as an attachment to infected messages. It sends itself to email addresses harvested from the victim computer. The worm itself is a Windows PE EXE file, written in Visual Basic and packed using UPX. The packed file is approximately 53KB in size, and the unpackedall

Check other viruses! Be aware! Use Antiviral Software

DJIFX.2372

Description DJIFX.2372

This is a very dangerous memory resident parasitic virus. It hooks INT 5, 9, 17, 1Ch, and 21h, and writes itself to the end of COM and EXE files that are executed, opened, renamed or accessed by a Get/Set File Attribute DOS call. Before and after infecting a file, the virus writes the data of a random size to the end of the file. The virus checks the file name, and does not infect these files:
DRWEB.EXE AIDSTEST.EXE COMMAND.COM

On Fridays, when Alt-Ctrl-Del keys are pressed, the virus displays the following message, and the text starting from "Phone:" is encrypted:
+------------------------------------------------+
¦ DJ[I]-FX, Ver. 0.53., (c) 1996 by ___ ¦
¦ Just call my name and I'll be backall ¦
¦ Password: (D&I) Enigma: (Phone: 1.6687.746498) ¦
+------------------------------------------------+

Depending on the system timer, the virus overwrites the files with a program instead of infecting them. That program displays the same message.
On Mondays, depending on the system timer, the virus plays the Yankee Doodle tune, the same as the "Yankee" viruses do.
While printing digits, the virus inverses them (0<->9, 1<->8,...). When the INT 5 (print screen) call is performed, the virus reboots the computer. The virus has bugs and may halt the system.

DKiller Family

Description DKiller Family

These are not dangerous not memory resident parasitic viruses. It searches for executable files and writes themselves at their ends. They contain (and some viruses display) the internal text strings:
"DKiller.Clouds.588":
This is [Clouds] Virus, Written By Dark Killer.
¦o¼O [Clouds] ¼r, º@¬¦¼O Dark Killer.

"DKiller.Clouds.657":
This is [Clouds II] Virus, Written By Dark Killer.
¦o¼O [Clouds II] ¼r, º@¬¦¼O Dark Killer.

"DKiller.Clouds.718":
This is [Clouds v3.1] Virus, Written By Dark Killer.
(1994/10/23)

"DKiller.DK.693":
This is Virus
Written by Dark Killer

"DKiller.DK2.269":
I'm , Written By Dark Killer.

"DKiller.DK2.269" writes itself at the files beginnings, and encrypts the file body. "DKiller.DK.693" is written with PS-MPC virus generator, it hits COM- and EXE-files.

Home