Virus Database

Riot.IR8.1968

Description Riot.IR8.1968

It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed, or accessed with FindFirst/Next FCB DOS function (DIR command). When GetDiskSize DOS function is executed, the virus creates the IR-DEMO.COM file, and writes a program into there. Being executed that file displays the message:
THIS PROGRAM IS (C) - 1996 IMMORTAL RIOT - ALL RIGHTS RESERVED!

The virus also contains the text strings:
Immortal Riot Technologies! All Rights Reserved
Not enough memory
How can hell be any worse? COMEXEDIR Conzouler.dyno go BOMB 'em ALL!
"SUCK MY DICK, FEMALE!" Welcome to IR Liquid Jesus!
IR#8 competition-contribution by The Unforgiven/Immortal Riot -96
"I name the bitch: 2 iS2H8" Girls, I Hate you all!

Check other viruses! Be aware! Use Antiviral Software

Kyokushinkai

Description Kyokushinkai

It's a dangerous memory resident multipartite virus. On execution it infects MBR and installs itself into the memory. It hooks INT 12h, 13h, 1Ch, 21h and on execution of any program it searches for EXE-files and writes itself at their ends. It is stealth virus on accessing to infected MBR. Depending on system time it overwrites the disk sectors with the string:
+++++++ Kÿöküshïñkäï +++++++.- 39-mynrazCmeroizóJdanogewogninertuzoboogeintelóktáimapaN-OLYKaúysezrpuzoboogeúacaldainezcyºenzcedreS
[Note: some characters not displayable in HTML]

Kysia.1536
It's the variant of "Kyokushinkai" virus. This one hits first Boot-sector of hard drive. Depending on system time it displays the message:
(c) 1993 Kysia Software Co.
Your fucking PC is infected !
I'm formating your hard disk now.
I'm lucky.
FUCK'AM ALL
Bezplatna reklama kapeli ZOD ze Szczecina.

LA.802

Description LA.802

It is a harmless memory resident parasitic virus. It hooks INT 21h, 2Fh and writes itself to the end of COM-files that are executed, and SYS-files that are opened. The virus does not manifest itself in any way.
While installing the memory resident copy the virus uses "Are you here?" call with INT 21h, AX=FFFFh. The TSR copy returns "LA" in AX register.

Home