Virus Database

Abola.2420

Description Abola.2420

This is a very dangerous memory resident parasitic virus. It writes itself to the end of EXE and to the beginning of COM files that are terminated (on INT 22h call). The virus stays memory resident only if the XMS driver is installed. While copying its resident code, the virus patches the XMS driver, hooks INT 2Fh and leaves its code in Upper Memory.
The virus utilizes a rather unusual way of accessing the files - during INT 2Fh calls, the virus scans memory blocks and patches INT 22h (Terminate) address in programs' PSP. When these programs are terminated, the virus will infect them.
On Tuesdays, the virus overwrites the disk sectors with the string:
AbolaAbolaAbolaAbolaAbola

Check other viruses! Be aware! Use Antiviral Software

Amoeba.2367

Description Amoeba.2367

This is a very dangerous memory resident polymorphic virus. It hooks, in a standard way, COM and EXE files when they are started or opened. On March 21st and November 1st, it erases the hard drive's sectors. The virus hooks INT 21h, and contains the following texts:
Tosee aworld in a grain of sand,
And a heaven in a wildflower
Hold Infinity in the palm of your hand
And Eternity in an hour.
THE VIRUS 16/3/91 AMOEBA virus by the Hacker Twins (C)1991 This is nothing,
wait for the release of AMOEBA II-The universal infector, hidden to any eye
but ours! Dedicated to the University of Malta- the worst educational system
in the universe,and the destroyer of 5X2 years of human life.
COM EXE

Amstrad Family

Description Amstrad Family

This family comprises not memory resident dangerous parasitic viruses. Common features are as follows:
all .COM-files in the current directory are infected;
virus writes itself at the beginning of the file;
reinfection is possible;
files of large length may be deleted;
the string "*.COM" present in the virus body.
Some versions of the viruses show themselves up soon: from the fifth "generation" of the viruses, as an infected program is started, with the probability of 1/2 the following message appears on the screen: "Program sick error: Call doctor or buy PIXEL for cure description". Some versions of the viruses display the texts:
"Amstrad.257,275": Fucking hell:You wet pussy
"Amstrad.283": What a stupid you are !!!!!!!!
"Amstrad.296": En tu PC hay un virus RV1, y esta es su quinta generacion
"Amstrad.299.b": Software Failure. Task Held. Guru Meditation
#456789:#34567?????
"Amstrad.837": I love you so much!!! -- Francis
"Amstrad.847.b": Buy AMSTRAD it is THE CHEAPEST COMPUTER thatyou can buy
THE END IS NEAR!! THE SIGNS OF THE BEAST ARE EVERYWHERE!!
Hello, John Mcafee,please uprade me.Bests regards,Jean Lu
"Amstrad.847.c": En tu PC hay un virus RV1, ésta es su quinta generación
"Amstrad.877": Sector not found error fucking defoult drive! Please
buy me a new disk drive!
"Amstrad.899": COMMAND.COM Fucking Hell: What a smelly ass hole!!Do you
want to fuck it!!!

"Amstrad.936" (this message is displayed on April, 1st):
Fucking Hell: What a smelly ass hole!!Do you want to fuck it!!! HaHaHaall
What a Good Friday!!

Some of the versions display a political slogan in Bulgarian.
"Amstrad.761" contains the internal text: "LiquidCode<tm>".
"Amstrad.1268,1271" display the message "ENTER THE PASSWORD:" and wait for input "Ken Sent Me". If the input is not correct, the viruses type "YOU HAVE ENTERED THE WRONG PASSWORD!!" and return to DOS. They contain the internal text also: "PreComFileRunSyndrome 1993".

Home