Virus Database

Sisters.2221

Description Sisters.2221

It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h, 16h and writes itself to the end of COM and EXE files that are executed.
The virus deletes the anti-virus data files: CHKLIST.MS and CHKLIST.CPS.
Depending on its internal counter and current date the virus: disables the mouse driver, erases 40 sectors on the C: drive, erases the CMOS memory, halts the computer, displays the messages:
TEMPLE OF LOVE V1.0 MS 95
FoUnD VIRUS SYSTERS OF MERCY iN yOuR sYsTeM !!!

The virus INT 16h handler (keyboard) erases the CMOS memory after 700th keys entered.
The virus also contains the strings:
SyStEm is now halted.

Check other viruses! Be aware! Use Antiviral Software

Phrase.1568

Description Phrase.1568

This is a relatively harmless non-memory resident parasitic encrypted virus. It searches for .COM files, then writes itself to the end of the file. On Tuesdays, the virus plays a tune.

Phx Family

Description Phx Family

These are very dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files. Several of the viruses contain the text "PHX".
"Phx.823,1015" hook the INT 21h function Open (AX=3D02h) and check the code of program which performs that call. The viruses compares that code with the list of specified masks, and if that code is in the list, "Phx.823" virus resets computer, "Phx.1015" corrupts the data while writing to the files.
"Phx.965,1289,1336" in some cases change one byte of information while writing to disk file.

Home