Virus Database

Ko.360

Description Ko.360

These are memory resident parasitic viruses. They copy the TSR-parts into the Interrupt Vectors Table, hook INT 21h, then write themselves to the end of .COM files that are executed. These viruses contain the word "Ko".
"Ko.408" corrupt the files that do not have JMP NEAR (E9h) opcode at the beginning of the file. Sometimes it overwrite the files with RET instruction. On every 33rd infection "Ko.408.b" displays:
Birdie Hop!

On every 50th infection "Ko.407" overwrites the file with the random data.

Check other viruses! Be aware! Use Antiviral Software

Playgame.1999

Description Playgame.1999

This is a benign memory-resident multipartite virus. While executing an infected file, the virus writes itself to the hard drive MBR, and returns control to the host program. The virus stays memory resident upon loading from an infected disk only. The virus hooks INT 13h and 21h, and writes itself to the end of accessed EXE files.
The virus contains the string "CO4DSCCLVSNEHTTBVIF-FIGIIMRAFEMTBR", and does not infect files if the first two bytes of the file name consist of two characters from this string (CO*.*, 4D*.*, SC*.*, all). This virus also contains the text string:
[ MK / TridenT ]
In December, this virus starts a game, and, while playing the game, it displays the following message:
HAPPY VIRUS Time to play a game (Use shift keys)
You reached level Play again?

Playgame.2000

Description Playgame.2000

This is a benign memory-resident multipartite virus. While executing an infected file, the virus writes itself to the hard drive MBR, and returns control to the host program. The virus stays memory resident upon loading from an infected disk only. The virus hooks INT 13h and 21h, and writes itself to the end of accessed EXE files.
The virus contains the string "CO4DSCCLVSNEHTTBVIF-FIGIIMRAFEMTBR", and does not infect files if the first two bytes of the file name consist of two characters from this string (CO*.*, 4D*.*, SC*.*, all). This virus also contains the text string:
[ MK / TridenT ]
In December, this virus starts a game, and, while playing the game, it displays the following message:
HAPPY VIRUS Time to play a game (Use shift keys)
You reached level Play again?

Home