Virus Database

Cli&Hlt.1345

Description Cli&Hlt.1345

It's a not dangerous memory resident parasitic encrypted virus. It hooks INT 21h, 28h and writes itself to the end of COM- and EXE-files that are accessed. Depending on the system timer it manifests itself with a video effect or calls INT 02. It contains the internal text string:
COMEXE
** (C) CLI&HLT Hackers Group **

Check other viruses! Be aware! Use Antiviral Software

Gigi.1283

Description Gigi.1283

These are dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are executed. The viruses do not infect the files: VSAFE.COM, COMMAND.COM, WIN.COM. They have bugs and install themselves two and more times in the system memory, as a result in some time the system halts.
The viruses contain the text strings:
SUCKER
.COM VSAFE COMMAND WIN

"Gigi.1449" contains the texts:
Gigi Euristicu' v1.0 * RoMaNiA
Only COM infector but a new generation is comeing all
Copyright [C] 1996-97 Elecktronick RAT & Pink Phanter
Special thanks to GikuABS (Ps!ko)
Who's General Failure and what's he doing on your HD ?

Gimon.2256

Description Gimon.2256

It is not a dangerous memory resident parasitic virus. When an infected file is executed, it installs itself into the system to activete itself each time DOS boots up. To do that the virus creates its dropper file (pure virus code) in the root of the C: drive and "registers" it in the C:CONFIG.SYS file by "install=" instruction. The name of virus dropper file has four random selected letters, for example: AOCJ.ICG, APCF.KCG, e.t.c. The virus then installs itself memory resident.
When the virus dropper runs, it does not installs the virus into the system memory but just creates the C:GBMONKEY.COM file and registers it in the C:WINSTART.BAT file. The virus dropper then exits to DOS.
While installing memory resident the virus hooks INT 21h and hooks file searching functions. The virus then infects COM, EXE and SYS files that are accessed by these functions. While infecting files the virus writes itself to the end of files and modifies file header. The virus also tries to infect OBJ files, but fails because of bugs.
The infected SYS files on October 10th display the message and halts the computer:
Gibraltar Monkey!
(A)bort, (R)etry, (I)gnore?

On March 8th the virus overwrites all accessed GIF files with an image of Gibraltar flag.
The virus also contains the text strings:
[Gibraltar Monkey, by Mister Sandman]

Home