Virus Database

Flagyll.369.a

Description Flagyll.369.a

This is a dangerous memory resident virus. It hooks INT 21h and overwrites EXE files that are executed. It contains the internal text string:
-=[Crypt Newsletter 13]=-
EXE COM
Flagyll-Z

Check other viruses! Be aware! Use Antiviral Software

Gift.553

Description Gift.553

These are not dangerous memory resident parasitic viruses. "Gift.724" is encrypted. They hook INT 21h and write themselves to the beginning of COM files that are searched. While installing memory resident the viruses allocate a 64Kb block of DOS memory that may decrease the system performance.
The most interesting feature of these viruses is their structure: it follows the standard ZIP archives binary format. The beginning of virus code is very similar to ZIP header, and to the end of infected files a block of data is written that is similar to ZIP "end-of-archive" data. Despite on this, when infected files are run, these data are executed as a sequence of legal assembler instructions that pass control to the main virus code. As a result, the infected files can be not only executed as DOS programs, but also can be accessed as ZIP archives. These "archives" contains just one file named "SMF_Gift.com". Being "extracted" this file is the same as original contents of infected file.

Gigi.1283

Description Gigi.1283

These are dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are executed. The viruses do not infect the files: VSAFE.COM, COMMAND.COM, WIN.COM. They have bugs and install themselves two and more times in the system memory, as a result in some time the system halts.
The viruses contain the text strings:
SUCKER
.COM VSAFE COMMAND WIN

"Gigi.1449" contains the texts:
Gigi Euristicu' v1.0 * RoMaNiA
Only COM infector but a new generation is comeing all
Copyright [C] 1996-97 Elecktronick RAT & Pink Phanter
Special thanks to GikuABS (Ps!ko)
Who's General Failure and what's he doing on your HD ?

Home