Virus Database

Tim.1600 Family

Description Tim.1600 Family

These are memory resident parasitic viruses. They hook INT 9, 21h and write themselves to the end of .COM and .EXE files that are executed or opened. They overwrite the first 16 bytes of .COM files with a Jmp-Virus routine. At the end of infected file there is the string "EDCL".
Tim.1600.a
This is a very dangerous virus. It does not infect the BACKUP.COM file. It also hooks INT 13h, and depending on the number of the keys that are pressed, disables writing to the disk (INT 13h, AH=3). It contains the enciphered texts:
Hi to Eastern Digital. Greetings to Mister L.Megafuck to Mihai Sirbu --
MicroTimSoft.
COMEXEBACKUP.COM

Tim.1600.b
This virus is not a dangerous one, it just displays the message:
+-----------------------------------------------+
¦ ¦
¦ MegaFuck from Eastern Digital ¦
¦ ¦
+-----------------------------------------------+

Tim.1700
It is a very dangerous virus. It checks the file name and does not infect the COMMAND.COM and BACKUP.COM files and deletes the .DOC, .HLP, .ZIP, and .C* files. If the system date is 1988, November 13th, the virus displays the message:
*** warning !!!! Lee Pich is right here !!!! ***

Depending on its counter the virus erases the disk sectors and displays:
*** you have been destroyed by Lee Pich alien v 1.00 ***

The virus also contains the string:
COMMAND.COMCOMEXEDOCHLPZIPCBACKUP.COM

Check other viruses! Be aware! Use Antiviral Software

Brezhnev.974

Description Brezhnev.974

It is a not dangerous memory resident encrypted parasitic virus. It traces and hooks INT 21h, then writes itself to the end of EXE files that are executed. On Sundays it displays a message in Russian.

Broadcast.1987

Description Broadcast.1987

It's a not dangerous memory resident parasitic stealth virus. It hooks INT 21h, 2Fh and writes itself at the end of COM- and EXE-files that are closed and on terminating of the program. On execution or opening of infected file the virus disinfects it. The virus hooks MS-Windows functions INIT BROADCAST and INIT COMPLETE BROADCAST (INT 2Fh, AX=1605h,1608h) and does not infect the files between calls for these functions. Depending on the system time it manifests itself by sound and video "noise".

Home