Virus Database

ZhengZhou.3584.c

Description ZhengZhou.3584.c

This is a dangerous memory resident multipartite DOS virus.
ZhengZhou.3584.c hooks INT 13h, 21h and first writes itself to the end of COM and EXE files that are executed, and to the MBR of the hard drive when infected files are executed. It then infects the boot sector of the floppy drive. Under a debugger it may reboot the computer.
ZhenZhou.3584.c may also infect files that are accessed by FindFirst/Next FCB function (DIR command). It may also erase hard drive sectors.

Check other viruses! Be aware! Use Antiviral Software

KeyPress.935

Description KeyPress.935

There are memory-resident dangerous parasitic viruses. They hook INT 1Ch, 21h and write themselves to the end of COM and EXE files that are executed or opened. In COM files the virus overwrites the the first 16 bytes of the beginning with Jmp-Virus routine. The viruses periodically call INT 9 (keyboard).
"Keypress.935,1000" erase the disk sectors, and contain the text strings:
"Keypress.935": Chaos&Amber
"Keypress.1000": King worm

"Keypress.1199" hooks INT 1Ch and depending on its internal counter reboots the computer.
"Keypress.1216.b,ß" do not call INT 9, they display:
SAMSOFT

"Keypress.1216.d" hooks INT 1Ch and sometimes displays symbol FFh (ASCII). It contains the text strings:
FRED
FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT

"Keypress.1236" displays:
SADDAM, the inferiority of the chaos

"Keypress.1250,1479" display:
Mubark is caw

"Keypress.1600" hooks INT 09h, 1Ch, 21h. Depending on its internal counters it displays the messages:
HELLO SHSHTAYY
GODBYE AMIN
00 ZAGAZIG UNIVER

Keypress.BBS.1258
It intercepts Open File function (INT 21h, AH=3Dh) and if the file name is USER.BBS, the virus writes to that file login information about new user, and gives maximum privileges to that user. The text strings (register information) are:
User.Bbs
Platon Potapov
SPb
311-63-83
Alfred

Keypress.Ufo

Description Keypress.Ufo

It's a not dangerous memory resident multipartite virus. It hooks INT 13h, 1Ch, 21h. By hooking INT 21h this virus writes itself at the end of COM- and EXE-files are accessed. On infection of any file the virus tries to infect COMMAND.COM file. By hooking INT 13h it hits boot sectors of floppy disks. By hooking INT 1Ch this virus manifests itself by a video effect: it decrypts and displays the messages:
The U F O Club
UFO-4 By Faisal-Andre-Akhmad Klp Gading Jakarta Utara

Home