Virus Database

Horse.1154.a

Description Horse.1154.a

There are not dangerous memory resident parasitic viruses. They hook INT 8, 21h and write themselves to the end of COM and EXE files that are executed or closed. While infecting the viruses use the undocumented System File Table. The viruses trace interrupts, periodically manifest themselves by a sound or the video-effects. They contain the text strings like:
Sofia,Jan/Feb 1991 (c) Naughty Hacker.
Sofia,Feb '91 Naughty Hacker.

Check other viruses! Be aware! Use Antiviral Software

Dark.1016

Description Dark.1016

These are very dangerous non-memory resident parasitic viruses. They search for COM (except COMMAND.COM) and EXE files, then write themselves to the end of the file. On Mondays, if it is the 16th day of the month, the viruses overwrite the boot sector of the current drive with a Trojan program that reboots a computer when executed; then the viruses display the following message:
Welcome to the Dark Apocalypseall Your computer will
never escape... You might as well read this and weep!
The Dark Apocalypse v1.00 by Crypt Keeper [RoT]
TTReign of TerrorTT [DARK APOCALYPSE]
Press any key to continue...

and print the screen by a INT 5 call, and reboot a computer. These viruses also contain the text strings:
COMMAND.COM *.EXE *.COM

DarkElf (boot)

Description DarkElf (boot)

It is a dangerous memory resident stealth boot virus. It hooks INT 3, 8, 13h and writes itself to the boot sectors of the floppy disks that are accessed. While infecting a disk the virus stores its second sector and original boot sector to the FAT sectors, and infects correctly 360K floppy disks only. While installing memory resident, if the virus cannot locate the original boot sector, it formats the disk sectors, then display and prints the message:
The Dark Elf strikes again!

It also contains the text strings:
V.I.R.U.S. Rules!
DARKELFv0.1

Home