Virus Database

Zerobug.1536

Description Zerobug.1536

It is a memory resident not dangerous virus which inserts itself into COM-files beginning at their creating: the infector hooks INT 21h, f.3Ch, creates the file, writes its body into this file and returns the control back to the program that called this function. And then that program appends the COM-file which is created to virus body. As a result the virus deceives much of the antiviral monitors; and not needed to check INT 24h. This infector has a interesting manifestation: it runs the small face (ASCII 01h) which moves on the screen and erases all zero symbols ('0'). It hooks INT 1Ch, 21h.

Check other viruses! Be aware! Use Antiviral Software

HarmWare.3483

Description HarmWare.3483

These are memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the beginning of COM and EXE files that are executed. While infecting a file the viruses compress its body by an internal compression routine, as a result the file length does not grow. The viruses delete the anti-virus data files CHKLIST.MS, CHKLIST.CPS.
The viruses use on-the-fly encryption: the virus' subroutines are encrypted not only in files, but also in its TSR copy. The viruses decrypt them in case of need, execute, and then encrypt with new key. The viruses also use anti-debugging tricks.
HarmWare.3515
It is a very dangerous virus. Under debugger it erases disk data. It contains the text:
- HarmWare v1.06 by Ak Kort [SOS group] -
Hi! I'm still alive :) Let me introduce my new release.
There are none distruction. Just another way of anti-heuristicall

HarmWare.3716
It is not a dangerous virus. It also hooks INT 8, 9 (timer and keyboard) and by hooking these interrupts runs its video effect - if there are no keystrokes within 10 minutes, the virus "shifts" the screen. When the ADINF anti-virus integrity checker is executed, the virus stuffs the ENTER key into keyboard buffer and blacks the top half of the screen.
The virus contains the text strings:
- HarmWare v1.05 by Ak Kort [SOS group] -
Final version. Wait new releases.
Diskinfoscope ADinf

Harpy.1219

Description Harpy.1219

These are very dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of .COM and .EXE files that are executed or opened. Depending on the system date the viruses corrupt files instead of infecting them, and display the messages:
"Harpy.1219": Tehran`s Nights. Viruse
"Harpy.1750": This is a Harpy Viruse..

Home