Virus Database

Phx Family

Description Phx Family

These are very dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files. Several of the viruses contain the text "PHX".
"Phx.823,1015" hook the INT 21h function Open (AX=3D02h) and check the code of program which performs that call. The viruses compares that code with the list of specified masks, and if that code is in the list, "Phx.823" virus resets computer, "Phx.1015" corrupts the data while writing to the files.
"Phx.965,1289,1336" in some cases change one byte of information while writing to disk file.

Check other viruses! Be aware! Use Antiviral Software

BNB.1278

Description BNB.1278

It is a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. The virus writes the text string to the not used area in the MBR of the hard drive and displays it:
Phalcon/Skism was here!
Guns N' Roses - Get in the ring
--------------------------------
And that goes for all you punks in the press
that want to start shit by printin' lies
instead of the things we said.
That means you Andy Secher at Hit Parader,
Circus Magazine, Mick Wall at Kerrang,
Bob Guccione Jr at Spin.
What, you pissed off cuz your dad gets more
pussy than you?
Fuck You! Suck my fuckin' dick!
You be rippin' off the fuckin' kids
while they be payin' their hard earned
money to read about the bands
they want to know about.
Printin' lies startin' controversy.
You wanta antagonize me?
Antagonize me motherfucker!
Get in the ring motherfucker
and I'll kick your bitchy little ass!
Punk!!!

The virus also contains the text strings:
*.COM *.COM DOS*.COM
Beware the Beast-N-Black (c) 1992-95, Night Crawler - Phalcon/Skism 3.1

Bob.718.a

Description Bob.718.a

This is a very dangerous not memory resident virus which scans the subdirectory tree and writes itself into the .COM-files beginnings. This virus contains the text strings "*.COM", "COMMAND.COM". On 1993 year this virus will overwrite the files by a small program which types: "Program terminated normally".

Home