Virus Database

Tentacle_III.10496

Description Tentacle_III.10496

It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. While infecting a file the virus writes to the file EntryPoint the JmpFar_Virus instruction and fixes the EXE relocation table in the same way as "Voronezh.1600" virus does. If an EXE file contains overlay data, the virus moved that data down and writes its code between EXE module and overlay data.
While opening a GIF files the virus depending on its random counter renames them to the name TENTACLE with a random selected extension and overwrites with GIF image of a tentacle.
The virus check the system memory for the memory resident anti-viruses and patches their code, if they are found. The virus also reads some data from IFS$HLP$ and patches it in some way.
The virus contains the text strings:
IFS$HLP$
TBDRVXXXSCANX TBCHKXXXTBMEMXXXTBFILXXXTBDSKXXXTBLOGXXX
WARNING!
Your system is contamined with the Tentacle Virus.
IMPORTANT: Don't open any GIF file!
.GIF.gif.EXE.exeTENTACLE.

Check other viruses! Be aware! Use Antiviral Software

NightKing.1568

Description NightKing.1568

It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files (except AVG.EXE) that are executed or opened. While infecting a computer the virus stores the current time in the MBR of the hard drive, and one month after infecting the virus reads to the memory the FAT of the C: drive, then corrupts the FAT, displays the message:
+-----------------------------------------------+
¦ Hello dear friend, your computer is attacking ¦
¦ by NIGHT KING I. virus. If do you like your ¦
¦ data very much, don't reset your computer ¦
¦ before midnight ! ¦
+-----------------------------------------------+

then the virus waits till midnight and restores the corrupted data. If the computer is rebooted before midnight the FAT is lost.

NightKnight

Description NightKnight

It is a dangerous memory resident parasitic stealth virus. It hooks INT 20h, 21h, 27h, 28h, 2Ah, 2Fh and writes itself to the end of COM and EXE files that are accessed. Depending on the system date it deletes the files instead of infecting them. It contains the text string:
Night Knight!

Home