Virus Database

2up.6000

Description 2up.6000

This is a dangerous memory resident parasitic encrypted stealth virus. It hooks INT 21h, and writes itself to the beginning of COM files and into the middle of EXE files that are executed or created. It compares the file names with the strings:
AID COMMAND ANTI AV HOOK SOS TSAFE -V SCAN NC VC TNT ADINF AID

and does not infect these files. While infecting, the virus creates the file OBJXCREF.COM, writes itself into there, appends the file body, and then renames to the name of the file that it is infecting.
The virus copies, into a reserved system area of directory entries, the string:
2UP(C)1994

The virus also displays the text:
Hello BOBBY ! (BOBBY-Trash Soft & Hardware)

In some cases it overwrites the files with the message:
+------------------------------------------------+
ƒ Attention all No smoking ! Stop Talking ! ƒ
+------------------------------------------------------------------+
ƒ 2(Two) Unlimited Programists presents: 2UP Virus Version 1.0 ƒ
+------------------------------------------------------------------+
ƒ +-------+ --- --- +---------+ ƒ
ƒ ƒ ƒ ƒ ƒ ƒ ƒ ƒ
ƒ ƒ ƒ ƒ ƒ ƒ 2UP ƒ ƒ
ƒ ƒ ƒ ƒ ƒ ƒ ƒ ƒ
ƒ ƒ -- ƒ ƒ ƒ---------+ ƒ
ƒ +-------+ ƒ ƒ ƒ ƒ
ƒ ƒ ƒ ƒ ƒ ƒ
ƒ +-------- +-------+ --- ƒ
ƒ ƒ
ƒ We'll turn your life into nightmare ƒ
+------------------------------------------------+

This virus also manifests itself with a video-effect, and contains the internal text strings:
Hullo ! Welcome to 2UP virus. Don`t try so hard!
Hallo Mr.Virusolog,now you decod me !
It's about fucking time.What do you think about 2UP Virus ?
This Virus Was Designed in 1992-1994 .It Dedicated For Nobody..
I Want To BreakFree ! Right Now
.com.COMobjxcref.com
2UP(C)1994
.EXE.COM

Check other viruses! Be aware! Use Antiviral Software

Cantando.857

Description Cantando.857

It is a not dangerous not memory resident encrypted parasitic virus. It searches for COM-files (except COMMAND.COM) and writes itself at their ends. It deletes the CHKLIST.MS files, displays the message:
* CaN_TaN_Do_v01 : "Onkos täällä kilttejä lapsia?-)" *

Caos.716

Description Caos.716

It's a harmless memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of .COM-files that are accessed with DOS functions FindFirst and FindNext (on DIR command execution). The virus contains the internal text strings:
CAOS virii by WMÆ
Hoy en Dia, cualquier sentido que le puedas dar a la a vida no vale tanto
como para que esta merezca ser vivida.Virii Experimental, no es práctico ;)

Home