Virus Database

Topa.2520

Description Topa.2520

This is a dangerous memory-resident parasitic encrypted virus. It hooks INT 1Ch, 21h and writes itself to the end of COM and EXE files that are executed or opened. It deletes CHKLIST.MS file. While infecting a file it checks the file name and does not infect the files from the list:
COMMAND
SCAN
CLEAN
VSHIELD
4DOS
NDOS
F-PROT
VIRSTOP
F-TEST
TBAV
TBSCAN
TBSETUP
TBGENSIG
TBCLEAN
TBUTIL
VPCSCAN
VIREX
MSAV
While installing memory resident, in some cases this virus displays:
TOPA 2.01 is active.
The virus writes to BAT, DOC, TXT and some other files with "text" extensions the string:
REM Chi non lecca la Figa il Signore lo castiga.
The virus also contains the text string:
dummy fcb

Check other viruses! Be aware! Use Antiviral Software

Holiday.3000

Description Holiday.3000

This is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. After infecting a file the virus tries to infect COMMAND.COM file of the current drive.
On March, 3th the virus displays the message:
+----------------------------------------------------------------+
ƒ ATTENTION! ƒ
ƒ I'm very sorry, today is my holiday. ƒ
ƒ So, I can't serve you, cause I want to play on your computers. ƒ
ƒ ƒ
ƒ DON'T TURN OFF YOUR COMPUTER UNTIL TOMORROW, ƒ
ƒ OR YOUR DATA WILL BE LOST!!! ƒ
ƒ ƒ
ƒ I'll be back to serve you tomorrow. ƒ
ƒ Thank You, ƒ
ƒ ƒ
ƒ AAA ƒ
+----------------------------------------------------------------+

And then wait for March, 4th. Then the viruses display the message and reboots computer:
Thank You for playing, see youall
Please, hit ENTER!
The virus also contains the text string:
apa saja

Holms.6161

Description Holms.6161

It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 8, 1Ch, 21h, 28h and writes itself to the end of COM and EXE files (except COMMAND.COM) that are executed or opened. On INT 8 and INT 28h calls depending on its counters and system conditions, the virus searches for the files and infects them. The virus contains the text strings:
PATH=COMMAND COMEXE*.*
Copyright 1989-1992. Version 1.05-NC for antivirus program debugging.
Holms.

When both Left/Right Shift keys are pressed, this virus plays a tune. Sometimes it performs a Control-Break call (INT 1Bh).

Home