Virus Database

GV Family

Description GV Family

These are not dangerous memory resident parasitic viruses. They hook INT 9, 16h, 21h, 28h and write themselves to the end of COM-files that are executed. On pressing of Alt-Ctrl-V keys they display the messages:
"GV.2856":
+--------------------------------+
¦ Good Virus #1 Alpha Model ¦
¦ [GV1] ¦
¦ (c) 1994 by Stormbringer [P/S] ¦
¦ ¦
¦ Infection Mode: ¦
¦ [N]one ¦
¦ [I]nfect Files ¦
¦ [D]isinfect Files ¦
¦ ¦
¦ Encryption Commands: ¦
¦ [E]ncrypt File ¦
¦ De[C]rypt File ¦
¦ ¦
¦ Press [ESC] To Exit Menu ¦
+--------------------------------+

"GV.2865":
+--------------------------------+
¦ Good Virus #1 1.01 ¦
¦ [GV1] ¦
¦ (c) 1994 by Stormbringer [P/S] ¦
¦ ¦
¦ Infection Mode: ¦
¦ [N]one ¦
¦ [I]nfect Files ¦
¦ [D]isinfect Files ¦
¦ ¦
¦ Encryption Commands: ¦
¦ [E]ncrypt File ¦
¦ De[C]rypt File ¦
¦ ¦
¦ Press [ESC] To Exit Menu ¦
+--------------------------------+

When the 'D' key is pressed they disinfect the infected files on their execution. When the 'E' or 'C' keys are pressed they encrypt/decrypt the file which is selected by the user. The viruses display the messages before encryption:
+-[Enter Filename Below]-+
¦ > ¦
+------------------------+
+----[Please Enter 16 Byte Password (Extra Chars Ignored)]----+
¦ > ¦
+-------------------------------------------------------------+

They also contain/display the internal strings:
"GV.2856":
Good Virus #1 Alpha (c) 1994 Stormbringer [P/S] Now Loaded.
Press CTRL-ALT-V For User Menu. Infection Set To NONE.
Error Opening File!
GV1
GoodVir1

"GV.2865":
Error Opening File!
GV1 v101

Check other viruses! Be aware! Use Antiviral Software

DSME-based Viruses

Description DSME-based Viruses

DSME (Dark Slayer's Mutating Engine) is a polymorphic generator like the MtE or TPE generators. It creates the decryption routine and encrypts the virus body, then the virus saves this part of code in file on infection. This generator contains the internal string: "DSME v1.0".
DSME.Apex
It's a not dangerous not memory resident parasitic virus. It searches for .COM-files and writes itself to their ends. In September it manifests itself with sound and video effects. Tt displays the text string:
My name is APEX v1.0_ Congratulations! PS:I wouldn't hurt your data.Be relax!.Ha

DSME.Connie
These are harmless memory resident parasitic polymorphic viruses. They are not linked with DSME generator but they contain DSME related polymorphic code. They look like "rough copies" of DSME generator.
These viruses hook INT 21h and write themselves at the end of COM-files are accessed. They contain the internal text strings "C:COMMAND.COM" and:
"DSME.Connie.1746": This is
Written by Dark Slayer in Keelung TAIWAN
"DSME.Connie.2708": This is Connie v2.0
Written by Dark Slayer in Keelung, Taiwan

DSME.DemoVirus
It's a harmless not memory resident parasitic DSME-based virus. It searches for .COM-files and writes itself to their ends. It contains the internal text:
This is a DemoVirus for DSME v1.0, Written by Dark Slayer in Keelung,Taiwan

DSME.Teacher
It's a harmless memory resident parasitic DSME-based virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed. It contains the internal text string:
Teacher virus ( A demo virus for DSME to all teacher )

DSME.Apex.2685

Description DSME.Apex.2685

This is a relatively harmless, non-memory resident parasitic virus. It searches for COM files, and writes itself to the end of the file. In September, it manifests itself in the form of sound and video effects, and it displays the following text string:
My name is APEX v1.0_ Congratulations! PS:I wouldn't hurt your data.Be relax!.Ha

Home