Virus Database

Athens Family

Description Athens Family

These are harmless memory resident encrypted parasitic viruses. They hook INT 21h and write themselves at the end of COM- and EXE-files upon access to them. They contain the internal text strings:
"Athens.1463": TROJECTOR II,(c) Armagedon Utilities, Athens 1992
"Athens.1510": FOETUS 2.a Athens 1993
"Athens.1561": TROJECTOR ]I[,(c) Armagedon Utilities, Athens 1992,
Greetings to Vesselin
"Athens.1561.b": FOETUS Version 1.1 Athens 1993

Check other viruses! Be aware! Use Antiviral Software

Pages Family

Description Pages Family

These are not dangerous memory resident parasitic viruses. They hook INT 1Ch, 21h and write themselves to the end of .COM files (except COMMAND.COM) that are accessed. They contain the text string "COMMANDO-3". They manifest themselves with the video tricks: they change the video pages or "shake" the screen.

Palm.Phage

Description Palm.Phage

This is the first known virus infecting PalmPilot applications. The virus has an "overwriting" infection mechanism, and affected applications do not work anymore.
The Pilot applications (.PRC files - "executable files" in DOS/Windows terms) are standard Pilot databases with a special "application" resource inside. When an application is run, the "application" resource is activated and performs its functions. There is a set of system "library routines" that the Pilot applications can use to access system resources and other database resources.
When the virus starts, it opens its own file and reads its DATA and CODE resources from there, then it simply searches for all other "application" databases in the system and overwrites their DATA and CODE resources with the virus'. The affected application then has virus DATA and CODE resources in it.

Home