Virus Database

Jouce.1608

Description Jouce.1608

This is a very dangerous non-memory resident parasitic virus. It searches for the command processor (COMMAND.COM), then for COM and EXE files, then writes itself to the end of the file. On Wednesdays, the virus overwrites the MBR of the hard drive with the following text, and reboots the computer:
*Jouce und Krisque*, Version 0001h.

The virus also contains the text string:
*.EXE *.COM COMSPEC=[:

Check other viruses! Be aware! Use Antiviral Software

HLLP.Nover.8528

Description HLLP.Nover.8528

This is a harmless non-resident virus, written in Turbo Pascal. It is 8528 bytes in size.
It searches for .EXE and .COM on the C: and D: disks and in directories defines in %PATH%. It then writes itself to the start of the files it finds, and encodes the original file. Infected files contain the following lines of text:
CodeL
CodeLife Virus Technology
VIRUS

HLLP.Tomsk.8506

Description HLLP.Tomsk.8506

This is a relatively harmless, non-memory resident parasitic virus written in Pascal. It searches for EXE files in all directories on the current drive, then writes itself to the beginning of the file. To return control to the host program, the virus temporarily disinfects and executes the host file.
The virus also checks write-protect for the current drive. If the current drive is write-protected, the virus displays the following message:
Runtime Error: Disk fool or write protect

and terminates.
On October 20th, the virus displays a message in Russian and waits for a keystroke.
If the command line contains the /? argument, the virus displays its "About" message:
ã====================================-
ƒ Virus 3.14Zdec V 2.0 ƒ
ƒ------------------------------------ƒ
ƒ Target *.EXE ƒ
ƒ Stealth No ƒ
ƒ TSR No ƒ
ƒ Attac speed Slow ƒ
ƒ Danger 0 ƒ
ƒ Effects Yes ƒ
ƒ Length KingSize= ƒ
ƒ Language Turbo Pascal ƒ
ƒ OS Dos, Windows ƒ
ƒRussia, Tomsk, 20/11/1999 ƒ
L====================================-

Home