Virus Database

Pentagon

Description Pentagon

This is a dangerous virus. It infects Boot sectors of floppy disks in a "Brain" way. If the floppy disk is already infected by the "Brain virus, "Pentagon" will "cure" the Boot sector of this disk, change its label and infect the disk by itself. The file PENTAGON.TXT will be created on the infected disk. The virus survives "warm" rebooting. Some part of the virus is encrypted. The virus hooks INT 9, 13h. The virus contains the text: "(c) 1987 The Pentagon, Zorell Group", "first sector in segment".

Check other viruses! Be aware! Use Antiviral Software

Hero.394

Description Hero.394

These are not dangerous memory resident parasitic viruses. They copy themselves to the Interrupt Vectors Table at the address 0000:0200, hook INT 21h, and write themselves to the end of the files that are executed.
"Hero.394" infects only EXE files, "Hero.506" infects both EXE and COM files. As a read/write buffer these viruses use video memory.
While setting Interrupt Vector (INT 21h, AH=25h) with a number greater than 7Fh, "Hero.506" disinfects itself in the memory.
On the 1st of any month these viruses decrypts and display the following messages in Russian: "GLORY TO HEROES!" or "The author of the virus is a cretin" depending on the version of the virus.

Hex

Description Hex

It's a harmless memory resident boot virus. It hooks INT 13h and writes itself into MBR of hard drive and boot sector of floppy disks. It contains the internal text strings:
CocaColato jest to!
Wirus HEX dedykowany E.D. i M.Sellowi

Home