Virus Database

Macgyver.1098

Description Macgyver.1098

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves at the end of files that are accessed. Depending on the current date and time they hook INT 08h and also and manifest themselves in different ways. "Macgyver.2803,2824" infect .EXE-files only, other versions hit both COM- and EXE-files. "Macgyver.4480,4645" are stealth viruses, they hook INT 2Ah also. "Macgyver.4112" is a multipartite virus, it hits MBR of hard drive and boot sectors of floppies.
These viruses contain the internal encrypted list of file names which will not be infected:
"Macgyver.2803,2824": SCAN ZTEST EXEGOD
"Macgyver.3160,4112":
SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCKC DEBTPLUS
"Macgyver.4480": command ibmbio ibmdos
"Macgyver.4645": COMMAND

They also contain the internal encrypted string:
"Macgyver.2803,2824": MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
"Macgyver.2824.b: * Satan Virus * MAD !! Another Masterpiece of Sax
(c) Copyright 1993 Written by Mad Satanall Ver 2.02
MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
"Macgyver.4480": MacGyver v4.0 written by Dark Slayer in Keelung,
Taiwan. 93/09/09

By hooking INT 08h "Macgyver.2803,2824,4480" play a tune, "Macgyver.3160" displays the message:
+--------------------+
ƒ * MacGyver V2.2 * ƒ
ƒ Hi! I am MacGyver ƒ
ƒ Written by ƒ
ƒ in Keelung. TAIWAN ƒ
ƒ Don't Worry,I just ƒ
ƒ a Virus. Ha..Ha... ƒ
+--------------------+

"Macgyver.4645" displays:
+--------------------+
ƒ * MacGyver V3.0 * ƒ
ƒ Hi! I am MacGyver ƒ
ƒ Written by ƒ
ƒ Dark Slayer ƒ
ƒ in Keelung. TAIWAN ƒ
ƒ Don't Worry,I just ƒ
ƒ a Virus. Ha..Ha... ƒ
+--------------------+

Check other viruses! Be aware! Use Antiviral Software

Devil.941

Description Devil.941

This is very dangerous memory-resident virus which by standard way affects .COM-files in the current directory (as infected files are activated) or as soon as they are started (from TSR-copy of the virus). From time to time the virus changes the color of some characters on the screen. Depending on its internal counters this infector deciphers and displays the following text: "Have you ever danced with the devil under the weak light of the moon? Pray for your disk!". It contains the strings: "Drk", "*.com", hooks INT 9, 21h.

Devil.941

Description Devil.941

This is a memory resident harmless boot virus.
The virus hits hard drive MBR while booting and the floppy boot sectors while reading/writing. On every 6th rebooting and on read/write errors it displays:
(c) Devil Production Ver 1.0 28/08/1972

Home