Virus Database

MadSatan Family

Description MadSatan Family

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves at the end of COM- or EXE-files, or both COM and EXE depending on the virus version. Different virus versions hit the files on their opening, execution ot DOS calls FindFirst/Next. Some of these viruses hook INT 08h also, they manifests themselves by video or/and sound effects, display the messages.
These viruses contain the strings:
"MadSatan.599":
Cosmo Virus V1.0 (c) 1994 Written By [ Mad Satan ] in Taipei.TAIWAN.
MS

"MadSatan.639":
Mad Satan[ This is StarFish ]
1993 Written by Mad Satan in TAIWAN.
[ STARFISH ] Satan

"MadSatan.1019":
(c) Copyright 1994 Satan Virus
This is Satan Virus Ver 3.08
Written by Mad Satan in TAIWAN
Satan Ver 3.08 [Mad Satan]

"MadSatan.2060":
How do you do >>
Today is My Birthday
OH! YES! Happy Birthday To Youp!
Satan

"MadSatan.2876":
----------------
* Satan Virus * (c) Copyright 1994 Mad Satan International Corporation.
Written by Mad Satan in TAIWAN. Satan Ver 2.08 Mad Satan
----------------

"MadSatan.9849":
Ruei-Chiang Virus by Mad Satan
----------------
1994 (C) Copyright Ruei-Chiang Virus
Written by Mad Satan in TAIWAN.
Carzy !!! Another Masterpiece of Satanall..
Don't Worry I just a Virus.
Satan Ver 3.01
- Mad Satan -----------------

"MadSatan.19033"
* Satan virus * MAD !! Another Masterpiece of Satan...........
Satan virus Copyright (c) 1993 Ver 2.01 Written by * Mad Satan *
GOOD LUCK TO YOU - Mad Satan - - Mad Satan - - Mad Satan -

"MadSatan.King.1424":
Virus King 1
"MadSatan.King.2175":
Mad Satan King Kong Virus Satan Ver 3.00 - Mad Satan -

Check other viruses! Be aware! Use Antiviral Software

NYB

Description NYB

this text was written by Mikko Hypponen, DataFellows ltd
The NYB virus is very common all over the world. It is a reasonably simple diskette and Master Boot Record infector. It is only able to infect a hard disk when you try to boot the machine from an infected diskette. At this time the virus infects the Main Boot Record, and after that it will go resident to high DOS memory during every boot-up from the hard disk.
Once NYB gets resident to memory, it will infect practically all non-writeprotected diskettes used in the machine. NYB will allocate 1kB of DOS base memory. NYB is a stealth virus, so the changes made to MBR are not visible as long as the virus is resident.
Every time a floppy disk is accessed, there is a 1/512 chance that the virus activates. Virus then sends the floppy drive head repeatedly from track 0 sector 0 to track 255, sector 62. On standard floppy drives, such areas do not exist.
On some floppy drives there are no validity checking on these values, and so the floppy head might get hit against the stopper again and again. This might cause some physical damage to the floppy drive, but only if the routine is allowed to continue for some time. We've yet to see an actual case where this would have caused real damage to the floppy drive.
There is also another activation routine, which went unnoticed by virus researchers for a long time. The virus will crash the machine, if the hard disk is written to when the hour and minute fields of the system clock are zero (ie. right after midnight). Thanks to Paul Talbot (ptww@aol.com) for pointing this out.
The virus also will corrupt some diskettes seriously while infecting them.
Original NYB has no text strings. "NYB.d" contains the text string:
SVK by RAVEN

Nygus Family

Description Nygus Family

These are harmless memory resident parasitic viruses. They write themselves to the end of the files. These viruses contain the strings:
"Nygus.227": Nygus v1.1
"Nygus.278": (c)Nygus v1.1
"Nygus.295": (c)Nygus v1.2
"Nygus.752,757": (c)Nygus v2.0

"Nygus.227,278,295" are nonmemory resident viruses. They search for .COM files and infect them.
"Nygus.752,757" are memory resident viruses. They hook INT 21h and infect .COM and .EXE files that are executed.

Home