Virus Database

Gondor.3072

Description Gondor.3072

It is a not dangerous memory resident encrypted parasitic virus. It hooks INT 12h, 21h and on DOS calls FindFirst ASCII it searches for EXE-files and writes itself to their ends. It deletes the CHKLIST files. Depending on the system date and time it disables several DOS functions such as file deleting and creating, changing the directory and so on. On June, 9th it displays:
HAPPY BIRTHDAY ,HONEY.

It contains other internal text strings:
GONDOR=WARRIOR
*.exe .EXE
chklist?.???

Check other viruses! Be aware! Use Antiviral Software

Changsha

Description Changsha

It's a memory resident dangerous multipartite virus. It writes itself at the and of .COM- and .EXE-files and into MBR of hard drive. The hard drive is infected as the infected file is executed. Then the virus hooks INT 08h, 13h, 21h and infects the executable files except CO*.* and IB*.* files. On May, 4th it erased the files instead of infection, then it decrypts and types the message:
XqR:
Wherever, I love you Forever and ever !
The beautiful memory for ours in that
summer time has been recorded in the Com-
puter history.
Bon voyage, My dear XqR !
Yours 05121991 in our Home.

It also contains the internal text strings:
Welcome!
Auto-Copy Deluxe R3.00
(C)Copyright 1991. Mr. YaQi. Changsha China
No one can Beyond me!
New Century of Computer Now!

Chaos Family

Description Chaos Family

These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of .COM- and .EXE-files that are executed. "Chaos.1181" also hooks INT 9, 13h. They erase disk sectors and display:
"Chaos.1181": CHAOS!!! Another Masterpiece of Faustall
"Chaos.1241": I see, I come, I conquer... Trojan horse-CHAOS v2.0 by Faust

Home