Virus Database

Mayak.513

Description Mayak.513

These are memory resident parasitic viruses. They hook INT 21h and write themselves to the end of the files.
Mayak.513
It is a dangerous virus. It infects COM and EXE files that are executed. It erases first 8 sectors of C: drive. It contains the text:
Jews NEWER surrender!

Mayak.2339,2370
These are not dangerous viruses. They hooks INT 8, 9, 21h and infect COM, EXE and SYS files. The viruses infect the system drivers (SYS files) when an infected COM or EXE file is executed, or while warm reboot (Alt-Ctrl-Del): the viruses infect all .SYS and .BIN files that are listed in the C:CONFIG.SYS file.
The virus stays memory resident only when infected system driver (SYS file) is installing: the virus copies itself to the memory area at address 7000:xxxx, waits for the finich of installation of that driver, and then appends itself to the codes of installed driver. Then the virus infects the COM and EXE files, and only if they are located on floppy disk, and when they are run or closed. While opening an infected file the virus disinfects it.
After 5 day of infecting, the computer starts to signal like a old soviet radio station "Mayak": on every hour at 59:30 the speaker of computer plays three times the popular Russian tune and then beeps six times. The virus also contains the texts:
Jews-2 Virus. MSU 1991
c:config.sys.device
com.exe.bin.sys

Check other viruses! Be aware! Use Antiviral Software

Danny.872

Description Danny.872

It is not a dangerous memory resident parasitic virus. It hooks INT 8, 21h and writes itself to the end of .COM files (except COMMAND.COM) that are executed. If the system date's year is less than 1992, the virus decrypts and displays the message and then halts the computer:
Invalid date. System halted.

On October 17th the virus depending on its internal counter decrypts and displays the message:
Today is Danny's birthday! She is now ?? years old.
Press any key

where 'xx' is a number: current year minus 1973.
The virus also contains the text strings:
[Uni}amp] virus 1992
command.com

Darek.434

Description Darek.434

It is not a dangerous memory resident parasitic virus. It copies itself to Interrupt Vectors Table and hooks INT 21h. When any file is executed, the virus searches for .COM files in the current directory and writes itself to the beginning of files. On June 14th the virus displays the message:
DAREKSOFT ss

Home