Virus Database

Amstrad Family

Description Amstrad Family

This family comprises not memory resident dangerous parasitic viruses. Common features are as follows:
all .COM-files in the current directory are infected;
virus writes itself at the beginning of the file;
reinfection is possible;
files of large length may be deleted;
the string "*.COM" present in the virus body.
Some versions of the viruses show themselves up soon: from the fifth "generation" of the viruses, as an infected program is started, with the probability of 1/2 the following message appears on the screen: "Program sick error: Call doctor or buy PIXEL for cure description". Some versions of the viruses display the texts:
"Amstrad.257,275": Fucking hell:You wet pussy
"Amstrad.283": What a stupid you are !!!!!!!!
"Amstrad.296": En tu PC hay un virus RV1, y esta es su quinta generacion
"Amstrad.299.b": Software Failure. Task Held. Guru Meditation
#456789:#34567?????
"Amstrad.837": I love you so much!!! -- Francis
"Amstrad.847.b": Buy AMSTRAD it is THE CHEAPEST COMPUTER thatyou can buy
THE END IS NEAR!! THE SIGNS OF THE BEAST ARE EVERYWHERE!!
Hello, John Mcafee,please uprade me.Bests regards,Jean Lu
"Amstrad.847.c": En tu PC hay un virus RV1, ésta es su quinta generación
"Amstrad.877": Sector not found error fucking defoult drive! Please
buy me a new disk drive!
"Amstrad.899": COMMAND.COM Fucking Hell: What a smelly ass hole!!Do you
want to fuck it!!!

"Amstrad.936" (this message is displayed on April, 1st):
Fucking Hell: What a smelly ass hole!!Do you want to fuck it!!! HaHaHaall
What a Good Friday!!

Some of the versions display a political slogan in Bulgarian.
"Amstrad.761" contains the internal text: "LiquidCode<tm>".
"Amstrad.1268,1271" display the message "ENTER THE PASSWORD:" and wait for input "Ken Sent Me". If the input is not correct, the viruses type "YOU HAVE ENTERED THE WRONG PASSWORD!!" and return to DOS. They contain the internal text also: "PreComFileRunSyndrome 1993".

Check other viruses! Be aware! Use Antiviral Software

Mul.443

Description Mul.443

It is a harmless memory resident multipartite virus. When an infected file is executed, the virus writes itself to the MBR of the hard drive. While loading from infected disk the virus hooks INT 1Ch, waits for DOS loading, hooks INT 21h and then writes itself to the end of COM and EXE files that are executed. The virus does not manifest itself in any way.

Multi.2560 Family

Description Multi.2560 Family

These are harmless memory resident stealth viruses. They hook INT 21h write themselves to the end of COM, EXE, SYS and OVL files. The date of infected files grows by 100 years. The viruses do not infect the files with Read-Only attribute, remove themselves from the infected files that are executed or traced.
While installing they scan the INT 21h handlers in DOS kernel area and patch DOS internal INT 2Ah call (MOV AH,82h; INT 2Ah) with the instruction that jump to virus body.
These viruses contain in their bodies the code of the viruses:
"Multi.2560.a": "Small.123,131"
"Multi.2560.b": "Small.104,110"

and sometimes launch one of them. The viruses contain the text:
MultiVirus(R), Release 1.0, Copyright (c) 1990-91 by Ç¡ñ___¬á

Home