Virus Database

Scratch.554

Description Scratch.554

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. It uses the word at the address 0000:0415 (scratch pad for manufacturing error tests) as ID-word while installing its TSR copy.

Check other viruses! Be aware! Use Antiviral Software

Daemaen Family

Description Daemaen Family

These are memory resident encrypted multipartite viruses. They write themselves at the end of COM-, EXE- and SYS-files, the files SC*.*, CL*.*. VS*.*, F-*.* are not infected. On execution of infected program these viruses try to infect MBR sector of hard drive, they save the original MBR sector and its body at the 9/10/11/12 physical sectors of hard drive and then write new infected MBR. These viruses hook INT 13h and infect boot sectors of floppy disks also, the original boot sector and the virus body are stored at the last sectors of floppy. The viruses hook INT 21h also, they hit the files on accessing to them. These viruses look like a harmless ones but during one of experiments one of them erased the FAT of test computer. They contain the internal text strings:
"Daemaen.1894":
COMEXEBINOVLSYSSCCLVSF-
Cowboys From Hell/Vulgar Display of Power [Pantera]
The best Power Metal band in the world.
tHiS k0oL ViRUZ WaReZ bY [TäLöN<=>NûK_] '93!
"Daemaen.2041,2048":
[DäeMåên] by TäLöN-{{NûK_}
Hugs to Sara Gordon
Hey John! If this is bad, wait for [VCL20]!
For Dudley
[VCL20ß]/TäLöN_ï
COMEXEBINOVLSYS

Daemaen.2041.a

Description Daemaen.2041.a

This is a memory resident encrypted multipartite virus. It writes itself at the end of COM, EXE and SYS files, the files SC*.*, CL*.*. VS*.*, F-*.* are not infected. On execution of infected program this virus tries to infect MBR sector of hard drive, it saves the original MBR sector and its body at the 9/10/11/12 physical sectors of hard drive and then writes new infected MBR. This virus hooks INT 13h and infects boot sectors of floppy disks also, the original boot sector and the virus body are stored at the last sectors of floppy. The virus hooks INT 21h also, it hits the files on accessing to them. This virus looks like a harmless ones but during one of experiments one of the samples erased the FAT of test computer. It contains the internal text strings:
[DäeMåên] by TäLöN-{{NûK_}
Hugs to Sara Gordon
Hey John! If this is bad, wait for [VCL20]!
For Dudley
[VCL20ß]/TäLöN_ï
COMEXEBINOVLSYS

Home