Virus Database

Kbrflags.1024

Description Kbrflags.1024

It is not a dangerous memory resident parasitic virus. It hooks INT 8, 21h, and intercepts DOS functions execute, read and write. On these calls the virus searches for EXE files of current directory and writes itself to the end of the file. Sometimes it changes the keyboard flags.

Check other viruses! Be aware! Use Antiviral Software

Obora.1558

Description Obora.1558

This is a dangerous memory resident parasitic virus. It hooks INT 21h, and stays memory resident. Upon executing each 3rd file, the virus searches for EXE files in the current directory, and writes itself to the end of the file.
On Sundays, the virus, depending on the system time, also hooks INT 8 (timer), and scrolls the screen on each 185th timer tick. On the 22nd of any month, the virus corrupts the CMOS and displays the following message:
** MY NAME IS TROUBLe ** HELLO FROM " KETY " - CREATED BY KEVIN

The virus also contains the text strings:
KETY - POLAND!!
PROSZE TU NIE GRZEBaC
96.02.12
TROUBLe - (c) by Kevin
OBORa 96 V1.0 (c) by KEVIN

Ocean.2571

Description Ocean.2571

It is not a dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus does not infect files witch names begins with letters:
WIN, TB, COMMAND, NOD, AV

On start from infected file it checks the current time. If current hours number is equal to current minute, the virus decrypts and displays the message:
This is an Atlantic Ocean I Virus (C) 1997 by #13

If quantity of current second below than 10 it also displays the message:
Listen to Radio RAGTIME 106.6 FM! [and use MSDOS 95 to keep #13 alive]

The virus also contains the encrypted text strings:
Dedicated to the one I love
heuristics :-(, string check :-) This is [Atlantic Ocean I] by #13

Home