Virus Database

Close.960

Description Close.960

It's a not dangerous memory resident parasitic EXE-infector. It tries to overwrite every 16th COM-file but it contains an error and COM-files stay clear. COM-files, which have been corrupted by this virus should set the display to 40x25 video mode and type a political message in Russian.

Check other viruses! Be aware! Use Antiviral Software

Ada.2600

Description Ada.2600

This is a very dangerous memory resident virus. It hooks INT 8, 13h, 21h and writes itself into the beginning of .COM-files that are started. The virus makes a "cracking" sound through the PC's speaker. This virus searches for the file PCCILLIN.COM and if this file exists the virus can erase the contents of the Boot-sectors and the FATs of the first HD. While deleting the files this virus sets their file-attributes as HIDDEN. The virus also contains the texts:
COMMAND.COM
PCCILLIN.COM
PCCILLIN.IMG
PCCILLIN.COM
HATI-HATI !! ADA VIRUS DISINI !!
Delete

ADI.1431

Description ADI.1431

These are dangerous memory resident encrypted parasitic viruses. They write themselves to the end of COM files. While infecting a file the viruses encrypt not only its code, but whole contents of the file. The viruses have bugs and may halt the system while infecting a file.
When an infected file is executed, the virus decrypts itself, hooks INT 22h (DOS Terminate call), returns control to the host program, waits for termination call, then hooks INT 8, 1Ch, 21h, 24h. Timer interrupts (INT 8, 1Ch) are used by the virus to disable tracing and debugging. INT 21h is used to intercept access to COM files.
The viruses use several levels of anti-debugging tricks, they also contain the text string:
(c) Beast. Advanced Disk Infector. [ADinf v1.5]

Home