Virus Database

Viking.1600

Description Viking.1600

This is a benign memory resident parasitic encrypted virus. It traces and hooks INT 21h, then it writes itself to the end of COM and EXE files that are executed, opened or renamed. It searches (by using the string "*.COM *.EXE") for the files and infects them on DOS calls OpenFCB and GetDiskSpace.
This virus contains the string:
CLEAVACCFMAPDIR2BDS.VSHIVIRS
The virus checks the file name for this string before infection. If the first four letters of file name present in that string, the virus does not infects that file. As a result, the files CLEA*.*, VACC*.* FMAP*.*, DIR2*.*, BDS.*, VSHI*.*, VIRS*.* are not infected.
Some generations of the virus displays the message:
On 1 Mar. 1992 I met NATALY, and she changed my life!
The 365th copy of is dedicated to our first anniversary

Check other viruses! Be aware! Use Antiviral Software

Fifo.333

Description Fifo.333

This is a harmless memory-resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and intercepts GetDiskSpace DOS function (AH=36h). When that function is executed, the virus searches for COM files, and writes itself to the beginning of the file. The virus contains the text string:
*.COM FIFO

FileHider.1057

Description FileHider.1057

This is memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM files that are executed or opened. While installing into the system memory, this virus searches for the original INT 21h address in such complex way that it can halt a computer.
This virus isn't dangerous. Sometimes it displays one of the following messages:
Fucky machine! How about buying an AT?
Good machine you have!
Monochrome is out! Try VGA graphics!
Making day out of night again?
Give me a rest!
Your disk is quite full, isn't it?

Home