Virus Database

Jovial Family

Description Jovial Family

These are not dangerous nonmemory resident parasitic viruses. They search for COM files, then write themselves to the end of the file. The virus code contains eleven junk bytes that are placed at different addresses, and while infecting a file the virus fills these bytes with NOP or HLT opcodes depending on random data. In some cases the viruses display the message:
HI MOM!!!!

The viruses also contain the text string:
JOVIAL KINDNESS BY yOUNG aDULT mALE
[NOP/HLT ENGINE 1.0]
*.COM

Check other viruses! Be aware! Use Antiviral Software

Shirley Family

Description Shirley Family

These are memory resident harmless viruses. They hook INT 21h and write themselves to the end of .EXE files that are executed. "Shirley.4096" contains the texts:
IWANTSHIRLEY
Marty McFly lives somewhere in time (Doc Brown)kFuck for Eddie!!There is only
one place to spend nice holidaysall CASAL BORSETTIin Italy... Fuck for John
McAfeeand all the other Vrs-Killers...We have a right to live
!!!!!!!!Greetings to the 1704... you were the first Virus, that infected my
System! Greetings to Jerusalem-B...You were the Second! But now its my turn.
Hope You have fun with the Shirley-Virus !!!!!!----------------Dies ist die
Geschichte einer Dreiecksbeziehung,könnte mann
sagen-A.C,L.C.und,natürlich,CHRISTINE. Aber sie sollten wissen,dass Christine
zuerst kam. Sie war Arnies erste Liebe, und obwohl ich nicht meine Hand dafür
ins Feuer legen moechte(denn mit 22 kann der Mensch sich ja noch
irren),möchte ich doch sagen,dass Christine seine einzige wahre Liebe gewesen
ist. Deshalb ist diese Liebesgeschichte für mich eine Tragödie

"Shirley.4096" contains the text:
VIVALDI

Shish.1142

Description Shish.1142

It is a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of EXE files that are executed. Depending on the system month (before/after June) the virus stores original EXE data in different form, and restores it to original values also depending on the system date. As a result infected file do work correctly only if they were infected during the half of year (before/after June) and halt the system during another half of year. When user presses Alt-Ctrl-Del, the virus displays the message:
WARNING!
SYSTEM REPORT:
If your system does not work properly,
change the month of the current system date.
Error code #

The virus also contains the text:
[SHISH. Version 2.00]

Home