Virus Database

Amber

Description Amber
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are closed. This virus is stealth on FindFist/Next calls. When several anti-viruses or file compressing utilities are run (ADINF, WEB, AIDSTEST, SCAN, ARJ, ZIP, LHA, RAR), the virus disables its stealth branches. The virus contains the text strings:
NFEBSTANRJIPHAAR
[·This is only ForeWord·]

Check other viruses! Be aware! Use Antiviral Software

Dream.2000

Description Dream.2000

These are not dangerous memory resident parasitic polymorphic viruses. They hook INT 13h, 21h and write themselves to the end of .COM- and .EXE-files that are accessed with INT 21h function 12h (FindNext FCB). The viruses contain the internal string "SCCLF-VIMSVSWI", and do not infect the files with the names from that string (two bytes per name): SC*.*, CL*.*, F-*.*, VI*.*, MS*.*, VS*.*, WI*.*. Depending on the internal counter the viruses return the error flag on INT 13h (Disk Services) calls. The viruses also contain the internal string:
[ Dream Man / Doctor Revenge ] 12-02-94 Italy

Dreamer.4808

Description Dreamer.4808

These are not dangerous memory resident parasitic viruses. They hook INT 1Ch, 21h and write themselves to the end of COM files that are executed. Sometimes these viruses try to speak several words by the internal speaker. The viruses contain the text strings:
"Dreamer.4808": Hitler Virus by Dreamer/DY
"Dreamer.8869": [Dar Mandra] by Simpson #1

Home