Virus Database

BootExe.331

Description BootExe.331

This is memory-resident harmless virus which hooks INT 13h and writes itself into EXE files and boot sectors of disks. The boot sector of the hard disk get infection when an infected file is started, the boot sector of floppies - during a reading from them. The original boot sector is saved on the hard disk at the location 0/0/11 (head/track/sector), on a floppy - at the location 1/0/3.
EXE files are infected in quite an original way: the virus analyzes the information read from the disk (INT 13h). If in the sector read from the disk there is an EXE file header (the first two bytes are 'MZ' and some conditions are also met) the virus writes itself into empty space in this header and saves the modified sector on the disk. It means: a) an infected file has the same length; b) no necessity to handle file attributes and time of its creation and fatal errors (INT 24h). The virus doesn't manifest itself in any observable way.

Check other viruses! Be aware! Use Antiviral Software

Democracy.3670

Description Democracy.3670

These are not dangerous memory resident parasitic viruses. They hook INT 1, 3, 16h, 21h, 28h, 2Fh and write themselves to the end of COM- and EXE-files on their execution or searching. They contain the internal text "Democracy". Sometimes they display some messages.

Demolited.1585

Description Demolited.1585

It's a very dangerous memory resident encrypted virus which hooks INT 1Ch, 21h and infects by a standard manner .COM-files, except COMMAND.COM, that are opened or executed. On 17th of every month it overwrites the MBR by a small program which types "DEMOLITION is here!". It overwrites the files by the text:
Sorry, this file was destroyed by DEMOLITION! from THE YODAS CREW Italy

It also contains the text "DEMOLITED COMMAND.COM". Sometimes it manifests itself by the black caterpillar moving on the screen.

Home