Virus Database

Eupm.1731

Description Eupm.1731

It's a very dangerous memory resident encrypted virus which hooks INT 21h and infects by a standard manner COM- and EXE-files (except COMMAND.COM) when they are executed. It contains the text: "-- E.U.P.M. 1991 -- COMMAND". On the 1st of every month it erases the disk sectors.

Check other viruses! Be aware! Use Antiviral Software

Ada.2600

Description Ada.2600

This is a very dangerous memory resident virus. It hooks INT 8, 13h, 21h and writes itself into the beginning of .COM-files that are started. The virus makes a "cracking" sound through the PC's speaker. This virus searches for the file PCCILLIN.COM and if this file exists the virus can erase the contents of the Boot-sectors and the FATs of the first HD. While deleting the files this virus sets their file-attributes as HIDDEN. The virus also contains the texts:
COMMAND.COM
PCCILLIN.COM
PCCILLIN.IMG
PCCILLIN.COM
HATI-HATI !! ADA VIRUS DISINI !!
Delete

ADI.1431

Description ADI.1431

These are dangerous memory resident encrypted parasitic viruses. They write themselves to the end of COM files. While infecting a file the viruses encrypt not only its code, but whole contents of the file. The viruses have bugs and may halt the system while infecting a file.
When an infected file is executed, the virus decrypts itself, hooks INT 22h (DOS Terminate call), returns control to the host program, waits for termination call, then hooks INT 8, 1Ch, 21h, 24h. Timer interrupts (INT 8, 1Ch) are used by the virus to disable tracing and debugging. INT 21h is used to intercept access to COM files.
The viruses use several levels of anti-debugging tricks, they also contain the text string:
(c) Beast. Advanced Disk Infector. [ADinf v1.5]

Home