Virus Database

CopyProtected.512

Description CopyProtected.512

It's a dangerous not memory resident overwriting virus. It searches for .COM- and EXE-files and writes itself at their beginnings. It saves original beginning of the file at the file end, it overwrites the file end by data is saved. As the result the infected files are corrupted and should be deleted. The infection is processed by using absolute reading/writing INT 25h and INT 26h. On execution on write-protected disk this virus displays the message:
This program is COPY PROTECTED !

Check other viruses! Be aware! Use Antiviral Software

CriCri.4616

Description CriCri.4616

This is very dangerous memory resident polymorphic and stealth multipartite virus. It hooks INT 13h, 21h and writes itself to the end of COM and EXE files that are executed or closed, and to the boot sector of floppy disks that are accessed. The virus does not infect the files that have digit or 'V' character in their names as well as TB*.*, SC*.*, F-*.* and GU*.* files. The virus has a bug and may corrupt the files while infecting them. On June 4th the virus displays the message and halt the system:
Cri-Cri ViRuS by Griyo96 allTried, tested, not approved.
The Implant virus is related to the CriCri family.

Criminal.2615

Description Criminal.2615

Criminal.2615 is a memory resident very dangerous virus. When the infected file is started the infector hits the file C:COMMAND.COM. When the virus starts from file COMMAND.COM it stays memory-resident and starts to infect other files when they are started. The infector checks the command line and if some combination (.F, .Z, .E, .D, .S) of letters present then:
displays messages like a "Criminal, be a wiseguy and turn youreself in, if you don't I will";
renames all files of current directory to CRIMINAL.xxx and then displays:
+-------------------------------------------+
¦ The Ultimate Weapon has arrived, ¦
¦ please contact the nearest police station ¦
¦ to tell about the illegal copying of you ¦
+-------------------------------------------+

It also contains the strings: ".Status", ".Enable", ".Disable", ".Force", ".Zero", "C:COMMAND.COM", "STATUS:", "CRIMINAL.000".

Home