Virus Database

HFR.702

Description HFR.702

It a very dangerous nonmemory resident overwriting virus. It searches for .COM and .EXE files, then overwrites them. The virus displays the message:
Could not find HFR-register (156-2565/PW)

The virus also searches for DOC and WP* files and overwrites them with the text:
To Chat With HFR Contact: S-D-T
THE HFR-VIRUS, DO NOT DISTRIBUTE!!!

Check other viruses! Be aware! Use Antiviral Software

Peace.2064

Description Peace.2064

This is a benign memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. In some cases, the virus removes itself from memory and infected files. The infected files contain the word "GG". Since December 6, 1993, the viurs has displayed a picture and the following message:
peace man, peace !!!!
leuk hé

PeaceKeeper

Description PeaceKeeper

It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed. While infecting a COM file the virus inserts into the file several parts of junk code that pass control from first part till the virus body decryptor (see "Bomber" virus). By hooking INT 13h the virus randomly disables writing to disk (the data can be lost). It randomly overwrites the disk sectors with the program which displays:
Peace-Keeper Virus V2.10 Written by Doctor Revenge 18-May-1994 , Italy

It contains the text strings:
EXECOMSCCLVIVSMSCPF-IMVHTB
[MCG v0.31ß]

The first string is used when the virus infects the files, it checks the file name extension with COMEXE string, and does not infect the files with the names from rest of string (two letters per name - SC*.*, CL*.* and so on).

Home