Virus Database

F1.337

Description F1.337

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of the .COM-files (except COMMAND.COM) that are executed, opened ot renamed. On execution it checks the previously loaded TSR copy by INT 21h, AX=F1h call ('Are you here?'). It does not manifest itself.

Check other viruses! Be aware! Use Antiviral Software

Badguy Family

Description Badguy Family

These are dangerous non-memory resident viruses. They overwrite the beginnings of .COM-files of the current directory without storing the old contents of these files. They contain the text: "*.COM".
On Monday, "Badguy.265" creates something with CGA monitor ports, and then hangs-up the computer. It also contains the text "BadGuy Virus (c) by Cracker Jack 1991 (IVRL) Italian Virus Research Laboratory (C) 1990,1991 IVRL Head Quarter, Milan Italy".
On Monday, "Badguy.208" decrypts and types: "New BadGuy Virus - (c) By Cracker Jack 1991 IVRL Head Quarter Milan, Italy".

BadSectors.3150

Description BadSectors.3150

These are dangerous memory resident parasitic viruses. They hook INT 8, 16h, 21h, 25h, 26h. On DOS calls FindFirst/FindNext FCB/ASCII they search for COM and EXE files and write themselves to the end of the file. They also infect the files that are opened, executed or renamed. The viruses do not infect the SCAN.* files. Sometimes they mark the disk clusters as bad ones by manipulation with FAT sectors. By hooking INT 16h these viruses joke with keyboard. These viruses contain the internal text strings:
COMEXE
SCAN

and:
"BadSectors.3150": BadSectors 1.0
"BadSectors.3422": BadSectors 1.1
"BadSectors.3428": BadSectors 1.2
"BadSectors.3627:: BadSectors 1.3

Home