Virus Database

Noki.448

Description Noki.448

This is a very dangerous, memory resident parasitic virus. While executing, the virus copies its code into the video memory at the address BD00:0000, and saves its code on the hard drive to sector 17 (17/0/0 - sector/track/head). Then the virus copies its INT 21h handler code (39 bytes) into Interrupt Vectors Table, hooks INT 21h, and returns control to the host file.
The virus intercepts the file execution (AX=4B00h), reads its code from hard drive sector 17 to the video memory, and jumps to there. The infection routine gains control, and infects EXE files that have the 448-bytes "cave" of zero bytes. The virus overwrites that cave, and returns from an infection routine. Thus, the file length does not grow during infection.
On the 17th of odd months (January, March,all), the virus corrupts the MBR of the hard drive. The virus contains the following text string:
NOKI

Check other viruses! Be aware! Use Antiviral Software

Tadinho.971

Description Tadinho.971

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 8, 21h and writes itself to the end of .COM files that are executed. Depending on the system date the virus inits its internal counter, and some time after formats the hard drive, then it tries to display the message but fails. It contains the text strings:
.com
UNICAMP
Tadinhoall Perdeu o HD... Vinganca!!!

Tadpole.2792

Description Tadpole.2792

This is a relatively harmless memory resident parasitic virus. It hooks INT 21h and 2Fh, and writes itself to the end of COM and EXE files that are executed. Starting from the 28th of any month, this virus also hooks INT 8 and 9, the keyboard is not active for several minutes, and the virus displays a message and launches a draft image of a tadpole running on the screen. The message appears as follows:
PHILIPPINES 2000, Greetings!
This tadpole lurks behind your empty mindall
It wriggles thru your brain just to remind:
You ought to have a sense of real concern
On virus strains that plagued, you've got to learn.
What have you done to clean this dirty world?
Have you taken steps on bogus softwares sold?
What have you done to lethal engineers
Who did create those worms and viral smears?
This tadpole lurks behind your empty mind...
If you've done nothin' you will surely find:
This tadpole leaps out of you brainless fools!
To breed a million more of wriggling--- TADPOLES...
Soon, silicon-based artificial life-forms will rule this organic world...
The creator will disavow any knowledge of my actions.
(Sgd) CCCv (c) Outlawed Technology Section, CCC CompE... Hail U.C.!

Home