Virus Database

Mik

Description Mik

It is a very dangerous memory resident boot stealth virus. It hooks INT 13h and writes itself to the MBR of the hard drive and boot sectors of the floppy disks. The virus disables every 256th writing to the disk and may corrupt the data in such a way. The virus contains the text strings:
Mik Virus is Your Computer,T.M.E.Varna'96
Black Love!

Check other viruses! Be aware! Use Antiviral Software

KeyKapture.1071

Description KeyKapture.1071

These are not dangerous memory resident companion stealth viruses. They hook INT 9, 13h, 21h and create companion .COM files on accessing to .EXE files. By hooking INT 9 they store whole keyboard input and save it to the file KKV.90. The virus saves that date when new drive is selected (INT 21h, AH=0Eh). By hooking INT 13h they realize stealth algorithm. They contain the text strings:
KKV.90
KeyKapture Virus v0.90 [Hellspawn-II] (c) 1994 by Stormbringer [P/S]

KeyPress.935

Description KeyPress.935

There are memory-resident dangerous parasitic viruses. They hook INT 1Ch, 21h and write themselves to the end of COM and EXE files that are executed or opened. In COM files the virus overwrites the the first 16 bytes of the beginning with Jmp-Virus routine. The viruses periodically call INT 9 (keyboard).
"Keypress.935,1000" erase the disk sectors, and contain the text strings:
"Keypress.935": Chaos&Amber
"Keypress.1000": King worm

"Keypress.1199" hooks INT 1Ch and depending on its internal counter reboots the computer.
"Keypress.1216.b,ß" do not call INT 9, they display:
SAMSOFT

"Keypress.1216.d" hooks INT 1Ch and sometimes displays symbol FFh (ASCII). It contains the text strings:
FRED
FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT

"Keypress.1236" displays:
SADDAM, the inferiority of the chaos

"Keypress.1250,1479" display:
Mubark is caw

"Keypress.1600" hooks INT 09h, 1Ch, 21h. Depending on its internal counters it displays the messages:
HELLO SHSHTAYY
GODBYE AMIN
00 ZAGAZIG UNIVER

Keypress.BBS.1258
It intercepts Open File function (INT 21h, AH=3Dh) and if the file name is USER.BBS, the virus writes to that file login information about new user, and gives maximum privileges to that user. The text strings (register information) are:
User.Bbs
Platon Potapov
SPb
311-63-83
Alfred

Home