Virus Database

Backfont.765

Description Backfont.765

These are memory resident parasitic viruses, they hook INT 21h and write themselves at the end of EXE-files are executed.
Backfont.900,905
These are not dangerous viruses. They hook INT 8 and 21h. They contain no text strings, manifest themselves depending on their internal counters and the current year, month, day and only if EGA-adapter is present. You can see a rather interesting video effect: approximately 20 min after the virus activation all symbols displayed on the screen "flip", i.e. "/," -> "`". (shown approximately). The symbols remain in their places, only their view is changed. Approximately 10 seconds later the original state of the screen will be restored, next 10 sec. later the symbols will flip ones more etc.
Backfont.765,821
These are dangerous viruses. Upon every call of the ChDir DOS function (INT 21h, ah=3Bh) they set one of FAT cluster to BAD (pseudobad cluster).
Backfont.896
It's a harmless virus. It doesn't manifests itself.
Backfont.1172
It's a not dangerous virus. It hooks INT 8, 21h. Sometimes it decrypts and types the message in Russian.

Check other viruses! Be aware! Use Antiviral Software

Iotm.1009

Description Iotm.1009

It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of COM and to the end of EXE files (except COMMAND.COM) that are accessed. The virus also calls infection subroutine when disk files are searched. On infecting COM files the virus encrypts first 1009 bytes if the file. The virus contains the text string:
Hi, I`m [IOtm] virus$

Iper.1062

Description Iper.1062

It is a dangerous nonmemory resident parasitic virus. It searches for COM files that are started with JMP NEAR opcode (E9h), then writes itself to the end of the file. This virus is nonmemory resident, but it leaves in the memory a small resident program that hooks INT 13h and writes some data to the RS232 ports, and changes the keyboard flags. The virus contains the word:
IPER

Home