Virus Database

Tula.635

Description Tula.635

This is a memory-resident parasitic virus. It decreases the DOS memory size (the word at address 0000:0413) and hooks INT 8, 13h, 21h. This virus writes itself to the end of the files that are executed. The virus infects only COM files, or both COM and EXE depending on the virus version.
This virus displays the message:
Formatting driveall
and reads a disk sectors (but by rewriting one byte of code it can really format a disk).

Check other viruses! Be aware! Use Antiviral Software

Methyl.880

Description Methyl.880

This is a harmless memory resident encoded virus. It infects .COM and .EXE files by writing itself to the end of these files.
The code contains errors. COM files may cease to function correctly.
The virus contains the following text string:
[W00p] by The Methyl-Lated Spiritall Perth/AU

MF family

Description MF family

These are dangerous memory resident polymorphic and stealth parasitic viruses. They hooks INT 8, 16h, 21h, 2Fh and write themselves to the end of COM and EXE files that are executed or closed. On opening an infected file the viruses temporary disinfect it.
Depending on their internal counters the viruses change several extended ASCII (cyrillic) letters on the screen. The virus also changes letters that are typed by keyboard.
In 14 minutes after installing memory resident "MF.3564" displays the text "Merlin from AMBER: FUCK YOU MAN!", in 40 minutes the viruses corrupt the CMOS memory. Depending on a random counter the viruses disable accessing to remote disks and files.
When the text "Tell me your ver, mf!" is entered as a DOS command, the viruses display:
"MF.3490": My ver is MF v10.1
"MF.3564": My ver is MF v10.0

When the text "Do your job, mf!" is entered, they display:
Yes, I got it, man.

and then corrupt the CMOS memory.

Home