Virus Database

Beda.883

Description Beda.883

These are memory resident parasitic stealth viruses. They hook INT 21h and write themselves at the end of the files are executed or closed. On infected file opening the viruses disinfect it, and then hit again on closing. They use BEDAh hexadecimal value as virus ID word for infected files, and on detection of already loaded virus TSR copy.
"Beda.883,1301" hit COM-files only, "Beda.1530" hits both COM- and EXE-files, on infection of EXE-files that virus may corrupt them.
"Beda.883,1301" are not dangerous viruses, depending on their internal counters they manifest themselves with the video effect.
"Beda.1530" is dangerous virus. It deletes the anti-virus programs -V, WEB, AIDSTEST, A-DINF. It hooks INT 09h also, and depending on its internal counter it changes the keys are entered: '?', 'n' and 'N' to 'B', 'y' and 'Y'.

Check other viruses! Be aware! Use Antiviral Software

Screen.600

Description Screen.600

It is not a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of COM files that are executed or opened. When Alt-Ctrl-Del keys are pressed, the virus "shakes" the screen.

Screen_II.1387

Description Screen_II.1387

This is a very dangerous memory resident parasitic virus. It hooks INT10h and 21h, and writes itself to the end of EXE files that are executed or opened. Depending on the system date and their counters, the virus "shifts" the screen.
It also hooks INT 13h, and starting from 10th of each month, corrupts some files while writing to them. On the same days, this virus also writes a Trojan program to the end of infected EXE files instead of infecting them. When executed, this program erases the hard drive sectors.

Home