Virus Database

Vampiro Family

Description Vampiro Family

These are dangerous encrypted parasitic viruses. Depending on the system date and time they display the messages:
"Vampiro.1000":
Zarathustra & Drako les comunican que llego la hora de ir a dormir.
Shh! Vampiro Virus.

"Vampiro.1623":
NO NO NO!! Que hace todavia despierto?!?!
Drako & Zarathustra le OBLIGAN a dormir.
Que sea la última vez, ok?!?! En caso contrario, morira.. JAJAJAJAJAJA
Vampiro 2.4 Versión de Batalla - (C) Digital Anarchy Viral Development

Vampiro.1000
It is a nonmemory resident virus. It searches for COM files (except COMMAND.COM) and writes itself to the end of the file. It deletes the CHKLIST.MS file.
Vampiro.1623
It is a memory resident virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus deletes the CHKLIST.MS and ANTI-VIR.DAT files, and does not infect the files from the line:
TBF-SCANCHKDSKCOMMAND.COM

Check other viruses! Be aware! Use Antiviral Software

Critter.1015

Description Critter.1015

Critter.1015 is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM-files that are executed. Depending on the system timer the virus displays the message:
[PGa] a critter from DC has infected U ;)

Croatia.1349

Description Croatia.1349

These are a very dangerous memory resident parasitic viruses. They hook INT 21h, 28h and write themselves to the end of .COM files that are executed. When infected files are opened or loaded for debugging, the viruses disinfect them, and infect again when the file is closed. While disinfecting the viruses create the temporary file ("Croatia.1349" - E, "Croatia.1535" - LARGE2.COM), copy the disinfected copy of the source file, and rename that file to the original name.
Depending on the system time and date the viruses decrypt the text string "Croatia" and overwrite the disk sectors with this string ("Croatia.1535" reads from the sectors instead of writing).

Home