Virus Database

HLLC.Dope.4870

Description HLLC.Dope.4870

These are companion viruses written in the C language and compiled with Borland C++ ver 3.0. The viruses were also packed by virus author with PKLite executable file compressor to decrease the virus size.
When an infected file is executed, the virus gets PATH environment variable, randomly selects one of directories listed there, and infects one EXE file in selected directory. While infecting the virus creates the companion .COM file with archive and hidden attributes set, and writes its code to there. The virus then runs the host .EXE file to return control to the host program.
The "Dope.4879" virus is harmless one and does not manifest itself in any way.
The "Dope.5219" is a dangerous virus. Depending on the random counter it overwrites the EXE files with a program that displays the message, when overwritten file is executed:
General failure reading drive
Abort, Retry, Fail?

This virus also contains the text "DOPE By KiLLeRbYtE". The virus checks this string, and in case it is modified (replaced with another text string), it displays the word "Fuk" and immediately exits (with no infection and no host file execution).

Check other viruses! Be aware! Use Antiviral Software

Piz.2025

Description Piz.2025

It is a dangerous memory resident parasitic encrypted virus. It hooks INT 1Ch, 21h, and writes itself to the end of COM and EXE files that are accessed. Under debugger the virus erases the CMOS. Sometimes it displays the message:
+---++ + +-+ ++ +--+ + +
| || ++ -++ ++| +-- | |
+ ++--+++---+++-+++---++---++
npuxogum He3aMemHo all. >-E

Pizelun.3599

Description Pizelun.3599

It is not a dangerous memory resident parasitic encrypted virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. On DOS calls GetDir it searches for the files and infects them. On May, 1995 it hooks INT 8, 10h, 15h also and manifests itself in different ways: blinks with Num/Caps/ScrollLock indicators, changes the video palette, lower-cases the strings are displayed, intercepts Alt-Ctrl-Del and halts the system with video and sound noise, displays the message:
PIZELUN attivato, attivatissimo!
Premere un tasto per continuare . . .

It also contains the text string:
Alüra? ALF

Home