Virus Database

Silver Family

Description Silver Family

There are dangerous nonmemory resident viruses. They overwrite all .COM and .EXE files of the current directory. They contain lot of decrypted text strings and display some of them.
Silver.2071
It contains the text strings:
Copyright(C) 1992 by CU, Boulder Colorado.
Program too big to fit in memory
Person/People/Things we >>hate<<:
Person/People we admire:
Person/People/Things we think are cool:
Irving Berlin's Music.
The SILVER DOLLAR VIRUS v3.00b
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NEWS FLASH!! Your System has been phried with
The SILVER DOLLAR VIRUS. One more thing, we have
your partition table valifiesationed, and we recommend
you >>not<< turn off your computer, unless you
have 400 clams or more for a new hard drive! Have a Phun time
Phiguring this out!
See ya,
Spies Without a Purpose,
The Savage Samurai(an alias to an alias),
Psuedo NIM(an alias to an alias),
PLO,
CU, Boulder, CO.
January 25, 1992.
For educational purposes only.
ThanWs to PCM2 for LEPROSY v1.00.

Silver.2218
It contains the text strings:
Copyright(C) 1992 by Fairview High School, Boulder Colorado, 80303.
Program too big to fit in memory
Person/People/Things we >>hate<<: Paul Harvey's sucks!!!!! MacinTrashes
Suck!!!! Graham (Not Alexander but this fuck ass kids whjo calls himself graham) sucks!
Person/People we admire:Lynn Bari, Jean Arthur, Jane Russel, Victoria Hill
Person/People/Things we think are cool: Cybernetics, C++, 39 Steps, The
Mafia, maybe "Monty Python".
The SILVER DOLLAR VIRUS v2.00d
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NEWS FLASH!! Your System has been phried with
The SILVER DOLLAR VIRUS. One more thing, we have
your partition table valifiesationed, and we recommend
you >>not<< turn off your computer, unless you
have 400 clams or more for a new hard drive! Have a Phun time
Phiguring this out!
See ya,
Spies Without a Purpose,
The Savage Samurai(an alias to an alias),
Psuedo NIM(an alias to an alias),
PLO,
Fairview High School, Boulder, CO.
January 25, 1992.
For educational purposes only.
ThanWs to PCM2 for LEPROSY v1.00.
Allocating memoryall. Please wait.....
Hard time accessing memory, please turn off all RAM
resident programs and press >>Enter<< to continue....

Silver.8108
This virus displays:
PLO
VIRUS
RESEARCH
TEAM

It also contains the texts:
Copyright(C) 1992 by CU, Boulder Colorado.
Program too big to fit in memory
Person/People/Things we >>hate<<:
Person/People we admire:A Midgit, or maybe two :-).
The Luna - moon. Ivy, Irene, Iris
Person/People/Things we think are cool or find phun:.Strip Poker,
The SILVER DOLLAR VIRUS v3.00d
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NEWS FLASH!! Your System has been phried with
The SILVER DOLLAR VIRUS. One more thing, we have
your partition table valifiesationed, and we recommend
you >>not<< turn off your computer, unless you
have 400 clams or more for a new hard drive! Have a Phun time
Phiguring this out!
See ya,
Spies Without a Purpose,
The Savage Samurai(an alias to an alias),
Psuedo NIM(an alias to an alias),
PLO,
CU, Boulder, CO.
FebuBerry 09, 1992
For educational purposes only.
Thanks to PCM2 for LEPROSY v1.00.
The Silver Dollar Virus Strikes Again
This is dedicated to a nice person Amy Everyone say Hi Amy!

Check other viruses! Be aware! Use Antiviral Software

Ifor.1427

Description Ifor.1427

It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of .EXE files that are executed. The virus deletes the anti-virus data files: ANTI-VIR.DAT, CHKLIST.MS, MSAV.CHK, AVP.CRC, CHKLIST.CPS, CHKLIST.TAV, SMARTCHK.CPS, IVB.NTZ. The virus contains the text:
[BodyCount] version POLY-B by iFOR

Ignorance

Description Ignorance

It is a harmless memory resident multipartite encrypted virus. While loading from an infected floppy disk or MBR it hooks INT 13h, waits for DOS loading and then it hooks INT 21h. While executing an infected file the virus infects the MBR of the hard drive, then hooks INT 13h and 21h. By hooking INT 13h it realizes stealth algorithm on reading the infected MBR, it also uses INT 13h for floppy boot sectors infection. By hooking INT 21h it writes itself to the end of COM, EXE and SYS files that are accessed. The virus contains the text strings:
Ignorance is Strength
Freedom is Slavery
War is Peace
COMEXEBINOVLSYSSCCLVSF-
[1984] bY [TäLöN< >NûK_] '93! THiS iZ iNFeCTi0N #00000032!
Greetz RS/NuKE!

where "#00000032" is virus generation number, that value may be not the same in different infected files/sectors. "COMEXESYSBINOVL" is the string of the file name extensions which are "infectable". "SCCLVSF-" is the string of the anti-virus software names (two bytes per name: SCAN.EXE, CLEAN.EXE, e.t.c.). While executing these files the virus disables some of its semi-stealth algorithm branches.

Home