Virus Database

Alien.1976

Description Alien.1976

This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself at the end of COM and EXE files that are accessed. It contains the internal text string:
COM EXE com exe OVL
Depending of system time it overwrites the files by strings:
ALIEN 1.3 - The Next Generation written by P.K. on August 93
The virus displays the following:
Look, following file is just eliminated.
There must be ALIEN inside !?

Check other viruses! Be aware! Use Antiviral Software

Devastator_II.a

Description Devastator_II.a

These are very dangerous memory resident stealth parasitic viruses. They copy themselves to the DOS data area (address 0000:0500) or to Interrupt Vectors Table (address 0000:0200), hook INT 13h, 21h and write themselves to the beginning of .COM files that are accessed by DOS functions FindFirst/Next ASCII. While executing a file DOS also calls FindFirst, so the viruses also affect the files that are executed.
The viruses uses way of infection similar to the "Int13" virus. While infecting a file the viruses move its beginning (512 bytes) to the end of the file, intercept (by hooking INT 13h) absolute disk address while writing to the end of the file and store that address. Then the viruses overwrite the file beginning with their own code and do not increase the file length. To read original file beginning the viruses use absolute disk address - they read it by INT 13h DiskRead call. As a result the files are lost while copying them - the stored absolute addresses are incorrect for newly created copies.
The viruses contain the text:
Devastator

Deviant.429

Description Deviant.429

Deviant.429,526
These are very dangerous nonmemory resident parasitic viruses. They search for .COM files, then overwrite them. "Deviant.526" displays the message:
Program too big to fit in memory
ComKiller has rectified your .com file overpopulation crisis!
*DeViANT MiND

Deviant.448,547,721
These are not dangerous nonmemory resident parasitic viruses. They search for .COM files, then write themselves to the end of the file. On 1st of any month "Deviant.721" decrypts and displays the strings:
*******
Ever wished there was something more to your life?
A bit of serendipity, spontenaety, randomness..
Maybe even a tiny bit of demented chaos?
Well buddy, if you want demented chaos, you've got it.
Welcome to Henon2 - The Edge of Chaos
DeViANT MiND
*******
Punch a key to continueall

Home