Virus Database

Leproso.1221

Description Leproso.1221

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files (except COMMAND.COM) are executed or opened. While infecting the virus creates a temporary file. Depending on the system date it displays the message:
Felicitaciones su máquina esta infectada por el virus LEPROSO creado por
J.P.G., hoy es mi cumpleaños y lo voy a festejar formateando su rígido!!!
Byeall(Vamos Ñull que con Diego somos campeones)
CopyRight (C) 1993 hasta 2000, J.P.G., Rosario, Argentina

and then halts PC. The virus also contains the text strings:
Diego_es.NOB
MOC.DNAMMOC

Check other viruses! Be aware! Use Antiviral Software

Niko.3477

Description Niko.3477

It is a very dangerous memory resident parasitic virus. It traces and hooks INT 21h, hooks INT 3 (debugger), then it stays memory resident and writes itself to the end of COM and EXE files that are executed or opened. The virus if stuffed with anti-debugging tricks that cover more than 50% of the virus code.
Depending on the system timer the virus corrupts the data that is saved on disk (DOS call Write INT 21h, AH=40h). While creating a .AS* or .DB* file the virus depending on the system time corrupts it or creates a subdirectory with the same name. When any file is executed or opened, the virus calculates the CRC sum of its code, and the CRC is not correct, the virus "shakes" the screen, decrypts and displays the message and halts the computer. The message is:
FUCK YOU

Under debugger or depending on the system time the virus also calls the same effect but displays another message:
No viruses

The virus also contains the encrypted text strings in Russian and:
Oct(123,123,126) by one of student

Nina.256.a

Description Nina.256.a

Nina.256
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the beginning of COM files that are executed. They contain the text strings:
"Nina.256.a,b": Nina
"Nina.256.c": RIOT!

Nina.1560,1600,1614
These are dangerous memory resident parasitic viruses. The viruses activate their routines only if there is no anti-virus monitor in the system memory, hooks INT 21h and then search for .COM, .EXE and .SYS files in the current directory and write themselves to the end of file.
Under debugger "Nina.1600" destroys the data on the disk. This virus contains the strings:
Dear Nina, you make me write this virus; Happy new year!
*:COMMAND.COM

Home