Virus Database

Sacrilege.1802

Description Sacrilege.1802

This is a benign memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. The virus does not infect anti-viruses TBAV, F-PROT, SCAN, CLEAN and VIRSTOP. When an infected file is executed on March 28th from 10:00 till 13:00, the virus decrypts and displays the following message:
Virus "LA MULA RETOBADA", dedicado a Brocca..(jeje)".Special Greetings to:
Blas Pascal , Mr.S, Krenchas.Fridirik agarrame las bolas, TBAV chupame el
pitongoS&S haceme un pete y dejate de mentir, roba-guitaProfesora de
Liquidacion de Sueldos TIRAME LA GOMAWalter Fabrica sos un PELOTUDO,
LADINO, MENTI((profesionales en sitemas de informacion)) LADRONES..Aguante
" Buenos para Nada " en concierto el 22/9/95 (que bienque toca el
bateroallquien sera????)Y por ultimo un gran saludo a DAVID SQUILLACE. a
real Friend..Ahora si...Feliz cumpleañanos Dr.k, feliz cumpleaños Dr.k,
feliz cumpleaños, feliz cumpleaños, feliz cumpleaños Dr.K Gracias,
gracias....1995 by Dr.K [PVC].

Check other viruses! Be aware! Use Antiviral Software

BackFormat.1855

Description BackFormat.1855

These are dangerous memory resident parasitic viruses. "BackFormat.2354," are encrypted ones. Upon execution, they hit the COMMAND.COM file, and the length of the COMMAND.COM file doesn't increase. This virus uses the "Lehigh" virus algorithm. Then they hook INT 21h, ("BackFormat.2000" hooks INT 13h also), and write themselves to the end of COM- and EXE-files. They infect newly created files on a floppy only and write themselves upon file closing. Upon infection of a COM-file, the virus checks the first instruction of it. If this instruction is not JMP (E9h), the virus infects the file in a standard manner: it writes itself to the end of the file and overwrites the beginning of the file with a "JMP Virus" instruction. If the first byte is JMP, the virus overwrites the instruction to where the first JMP points.
These viruses contain the internal text string ":command.com".
"BackFormat.2000" depending upon generation number and system date, this version changes the system tables upon floppy disk formatting. The sectors are formatted in reverse order: from the 9th to the first (for 360k floppies). If this floppy is not 360K, the disk will not be accessible.
"BackFormat.2435" sometimes corrupts data upon it being saved on a disk.

BackTime.1234

Description BackTime.1234

This is a dangerous memory-resident virus. It hooks INT 8 (timer), and INT 21h and hits COM files by a standard way when they are executed.
This virus drops "Stoned.March6" boot virus.

Home