Virus Database

Ace.1872

Description Ace.1872

It is a very dangerous memory resident encrypted parasitic virus. Being executed the virus hooks INT 22h, returns the control to the host program, wait for termination of that program, then traces and hooks INT 21h and stays memory resident. Then the virus writes itself to the end of COM files that are executed and to OBJ files that are opened. The virus infects OBJ files that are to be linked to EXE files, and replaces the entry point of EXE files with the instruction CALL_Virus.
The virus checks the names of COM files and does not infect C*.* and W*.* files. While executing W*.* files the virus depending on the system date erases that file, displays the message and reboot the computer:
This program wastes a lot of memory,
SYSTEM HALTEDall

The virus also contains the text strings:
OBJ
(C) Ace of Spades , Kiev-1995... Don't be a snub - enjoy yourself!

Check other viruses! Be aware! Use Antiviral Software

Ekoterror

Description Ekoterror

It's a memory resident dangerous multipartite stealth virus. On execution of infected file it writes itself into MBR of hard drive (it occupies the sectors from 0/0/1 till 0/0/5 - track/head/sector) and returns the control to the host program. On loading from infected sector it hooks INT 8, 13h, then by using INT 8 it hooks INT 21h and writes itself at the beginning of the .COM-files on their creating.
Sometimes it decrypts and types:
EkoTerror (C) 1991 ATK-toimisto P.Linkola Oy
Kovalevysi on poistettu käytöstä luonnonsuojelun nimessä.
Vihreässä yhteiskunnassa ei saa olla ydinsähköllä toimivia kovalevyjä.

and then hangs up the computer. It infects incorrectly some types of hard drives, DOS hangs up on loading in these cases.

ELCN.374

Description ELCN.374

These are not dangerous nonmemory resident parasitic viruses. They search for COM files, then write themselves to the beginning of the file. "ELCN.374" does not infect the COMMAND.COM files. The viruses display the messages in Russian. They also contains the texts:
"ELCN.374": COMMAND.COM
"ELCN.424": Bryansk ELCN

Home