Virus Database

Tourist.1871

Description Tourist.1871

It is a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. The virus traces the file code and writes the JMP_Virus instruction into the middle of the file. The virus has bugs and may corrupt the files and halt the system. On June 9th the virus displays the message:
Do not be afraid , I will do no hurt with you . I am a lonely TOURIST , I
come here only because today is the birthday of my dear LITTLE WIND , on
this lovely day I am glad to say ' HAPPY BIRTHDAY ' to all the people with
my heart . and I want also to say: Thank you very much!
ABOUT ME:
1. Have been in 85.1.
2. Now in Chen du.
3. Some of my classmates: Hu wen shen, Liu lei ji, Wang bo, Wang tao, etc.

Check other viruses! Be aware! Use Antiviral Software

Gift.553

Description Gift.553

These are not dangerous memory resident parasitic viruses. "Gift.724" is encrypted. They hook INT 21h and write themselves to the beginning of COM files that are searched. While installing memory resident the viruses allocate a 64Kb block of DOS memory that may decrease the system performance.
The most interesting feature of these viruses is their structure: it follows the standard ZIP archives binary format. The beginning of virus code is very similar to ZIP header, and to the end of infected files a block of data is written that is similar to ZIP "end-of-archive" data. Despite on this, when infected files are run, these data are executed as a sequence of legal assembler instructions that pass control to the main virus code. As a result, the infected files can be not only executed as DOS programs, but also can be accessed as ZIP archives. These "archives" contains just one file named "SMF_Gift.com". Being "extracted" this file is the same as original contents of infected file.

Gigi.1283

Description Gigi.1283

These are dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are executed. The viruses do not infect the files: VSAFE.COM, COMMAND.COM, WIN.COM. They have bugs and install themselves two and more times in the system memory, as a result in some time the system halts.
The viruses contain the text strings:
SUCKER
.COM VSAFE COMMAND WIN

"Gigi.1449" contains the texts:
Gigi Euristicu' v1.0 * RoMaNiA
Only COM infector but a new generation is comeing all
Copyright [C] 1996-97 Elecktronick RAT & Pink Phanter
Special thanks to GikuABS (Ps!ko)
Who's General Failure and what's he doing on your HD ?

Home