Virus Database

Danny.872

Description Danny.872

It is not a dangerous memory resident parasitic virus. It hooks INT 8, 21h and writes itself to the end of .COM files (except COMMAND.COM) that are executed. If the system date's year is less than 1992, the virus decrypts and displays the message and then halts the computer:
Invalid date. System halted.

On October 17th the virus depending on its internal counter decrypts and displays the message:
Today is Danny's birthday! She is now ?? years old.
Press any key

where 'xx' is a number: current year minus 1973.
The virus also contains the text strings:
[Uni}amp] virus 1992
command.com

Check other viruses! Be aware! Use Antiviral Software

Daemaen.2041.a

Description Daemaen.2041.a

This is a memory resident encrypted multipartite virus. It writes itself at the end of COM, EXE and SYS files, the files SC*.*, CL*.*. VS*.*, F-*.* are not infected. On execution of infected program this virus tries to infect MBR sector of hard drive, it saves the original MBR sector and its body at the 9/10/11/12 physical sectors of hard drive and then writes new infected MBR. This virus hooks INT 13h and infects boot sectors of floppy disks also, the original boot sector and the virus body are stored at the last sectors of floppy. The virus hooks INT 21h also, it hits the files on accessing to them. This virus looks like a harmless ones but during one of experiments one of the samples erased the FAT of test computer. It contains the internal text strings:
[DäeMåên] by TäLöN-{{NûK_}
Hugs to Sara Gordon
Hey John! If this is bad, wait for [VCL20]!
For Dudley
[VCL20ß]/TäLöN_ï
COMEXEBINOVLSYS

Daffy.901

Description Daffy.901

It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 8, 16h, 21h and writes itself to the end of .COM files that are executed. Depending on the system timer and its internal counters the virus displays the message, disables keyboard and formats the hard drive:
POZOR! Ve vasem PC je umistena bomba, ktera
vybuchne behem pristich peti sekund!!

The virus also contains the text string:
<-DfY->V1.0 by M.J.96

Home