Virus Database

Abbas.5660

Description Abbas.5660

This is a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of COM and EXE files that are executed.
By using INT 9 (keyboard) the virus checks INT 1 (trace), and while tracing it displays the message:
IRANIAN VIRUS W.by ABBAS KUHKAN ALIABADI
and halt the computer.
The viruses also contain the text string:
KUH
Depending on the system timer "Abbas.5660" loads some font, and displays (persian?) messages.

Check other viruses! Be aware! Use Antiviral Software

Holera_II.1488

Description Holera_II.1488

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM and to the end of .EXE files that are accessed by FindFirst/Next DOS functions (DIR command). The virus checks the file name and does not infect the files COMMAND.COM and NCMAIN.EXE. The virus overwrites the .TXT and .CPP files with the text in Russian. The virus also contains the text strings:
HOLERA II
COMMAND.COM NCMAIN.EXE EXE COM TXT CPP

Holiday Family

Description Holiday Family

These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of .COM and .EXE files that are executed. After infecting a file the viruses try to infect COMMAND.COM file of the current drive.
"Holiday.2900" also hooks INT 09h (keyboard) and "eats" every 200th keystroke.
On March, 3th the viruses display the message:
+----------------------------------------------------------------+
¦ ATTENTION! ¦
¦ I'm very sorry, today is my holiday. ¦
¦ So, I can't serve you, cause I want to play on your computers. ¦
¦ ¦
¦ DON'T TURN OFF YOUR COMPUTER UNTIL TOMORROW, ¦
¦ OR YOUR DATA WILL BE LOST!!! ¦
¦ ¦
¦ I'll be back to serve you tomorrow. ¦
¦ Thank You, ¦
¦ ¦
¦ AAA ¦
+----------------------------------------------------------------+

and then wait for March, 4th. Then the viruses display the message and reboots computer:
Thank You for playing, see youall
Please, hit ENTER!

The viruses also contain the text string: "apa saja".

Home