Virus Database

NRead.1467

Description NRead.1467

This is a very dangerous memory resident parasitic virus. It hooks INT 8, 9, 13h, 21h, and 28h. The INT 21h hooking is used for file infection - the virus writes itself to the end of .COM files that are executed or opened. INT 2Fh hooking is used for a "Are you here?" call when the virus is installing itself memory resident. Other hooks summon a trigger routine that in February displays a message and deletes all files on the current disk. The message appears as follows:
Network Read CRC Error
Re-reading Packet

Check other viruses! Be aware! Use Antiviral Software

Deliver.Digi.3547

Description Deliver.Digi.3547

This is a polymorphic stealth virus. It hooks INT 1, 3, 1Ch, 21h and writes itself to the end of COM- and EXE-files that are executed. While creating, opening and executing COM- and EXE-files it stores their names, and hits them on the files closing. On opening of infected files the virus disinfects them. On FindFirst/Next DOS calls it "decreases" the infected file length. The virus deletes CHKLIST.* files, while execution of CHKDSK utility it disables its FindFirst/Next handler, while execution of MKS anti-virus scanner is stops the infection. It disables the debugging of the virus code by hooking INT 1, 3.
On May, from 28th till 31th the virus overwrites the hard drive sectors with the strings:
DIGI POWER
Then it manifests itself with the video and sound effects, and displays the message:
DIGI POWER
THIS IS A NEW all
DELIVER II SÆëâlÆH (R) WRITE BY DiGiT! ... SOUTH POLAND 1995

Delphine.761.a

Description Delphine.761.a

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. The virus deletes the anti-virus data files ANYCHECK.VAL and ANTI-VIR.DAT. If CountryCode=21h (France) the virus on March 25th erases the CMOS and displays the message:
Remember me, Delphine ? I do !

The virus also contains the text:
Delphine by WiNTeRMuTe

Home