Virus Database

DeadWin.1088

Description DeadWin.1088

These are memory resident encrypted parasitic stealth viruses. They hook INT 21h, and write themselves to the end of COM and EXE files that are executed or closed. When an infected file is opened, the viruses disinfect it. While infecting, the viruses can corrupt files.
The viruses check the names of files that are executed, and if the file name begins with "WI" (WIN.COM), they run their trigger routines (see below).
When WIN.COM is executed, depending on the system time (if the hours counter is equal to the seconds counter), displays the message "Dead to Windows!" and reboots the computer. It also contains the text:
Dracula lives Resucitated somewhere in time
by Dust Group, Tucumán, Argentina
On Fridays, when WIN.COM is executed, this virus checks the system timer, and if the hour counter is equal to the second counter, the virus displays the following message, and reboots the computer:
Dead to Windows!

Check other viruses! Be aware! Use Antiviral Software

Pers

Description Pers

It is a harmless memory resident boot virus. It hooks INT 13h and writes itself to the MBR sector of the hard drive and to boot sector of floppy drive A:. The virus infects the hard drive MBR on loading from infected floppy disk; floppy disks get infection on accessing to them.
The virus does not manifest itself in any way. It contains the text:
Pers?fone 1.1

Peru

Description Peru

It is a dangerous boot virus. It hooks INT 13h and writes itself to the boot sector of hard drive and floppy disks. It infects the hard drive while loading from infected floppy drive and affects floppy disks that are accessed. Because of an error while infecting floppy disks the virus writes original boot sector to one of the FAR sectors. That may corrupt data on disk.
After five infections the virus displays the message:
No Existe Otra Mujer Como JOHANA

The virus also contains the text:
Peru

Home