Virus Database

Coup.1957

Description Coup.1957

This is very dangerous memory resident multipartite virus. When an infected file is executed, the virus infects the MBR of the hard drive and then returns to DOS. While loading from infected MBR the virus cuts a block of the system memory, copies itself to there, hooks INT 13h, 1Ch and returns control to the original MBR code.
By hooking INT 13h the virus realizes a stealth routine while accessing to the infected MBR. By hooking INT 1Ch (timer) the virus waits for DOS loading process, hooks INT 21h and then writes itself to the end of .COM and .EXE files (except COMMAND.COM) that are executed. The virus checks the file names and corrupts several anti-virus scanners: SCAN, MSAV, PART*, CLEAN, VSAFE, TOOLKIT, GUARD, FINDVIRU. The virus overwrites them with a trojan program that displays the message:
Coup De Main : In Childhood taught me to Love
Now that I Love Frenzied,Said me Forget !!!

Check other viruses! Be aware! Use Antiviral Software

Armee.a

Description Armee.a

This is a dangerous memory resident boot infector. It infects the boot sectors of the hard drive and the floppy disks.
The virus infects the hard drive while loading from an infected floppy disk. Then it hooks INT 13h, and infects the floppy disks that are accessed - these floppies are infected by the "Brain" method. On February 7th the virus displays a message and erase the disk sectors:
Schafft die Schweizer Armee ab !

Armee.b

Description Armee.b

This is a dangerous memory resident boot infector. It infects the boot sectors of the floppy disks and the hard drive MBR.
The virus infects the hard drive while loading from an infected floppy disk. Then it hooks INT 13h, and infects the floppy disks that are accessed - these floppies are infected by the "Brain" method. On February 11th the virus displays a message and erase the disk sectors:
Ausländer raus aus der Schweiz !

Home