Virus Database

Detic.1514

Description Detic.1514

This is a relatively harmless, memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of .COM- and .EXE-files that are executed, renamed or opened. After successful infecting of any file, the virus creates a C:(_FREE_D.) subdirectory, and tries to set the system date to March 23, 1977.
From the 13th until the 15th of any month, the virus also hooks INT 13h, and disables writing to the hard drive. On the 1st of any month, the virus outputs the word "zero" to the 9Bh port.
The virus contains the internal text strings:
[Friends] Virus V1.00
Virus Deticadet To My ExFriends.
Virus Written By [_Free_D.]
Made In ALBANIA.
C:COMMAND.COM
C:(_Free_D.)
IO

Check other viruses! Be aware! Use Antiviral Software

Hehehe.331

Description Hehehe.331

It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. Depending on the system time it decrypts and displays the message:
HEHEHEall YOU HAVE A VIRUS!!!

Heiko.2184

Description Heiko.2184

It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened.
The virus deletes the anti-virus data file CHKLIST.MS. Depending on its counter the virus erases the CMOS. Depending on the system timer the virus writes to accessed files random data. Also depending on the system timer the virus hooks INT 1Ch (timer), waits for some time and then modifies the modem settings and calls the phone number (see modem AT commands below).
The virus contains the text strings:
"Lord of the Dance";fuer Heiko, den ich fuer immer und immer liebe;
(c) Wesley;rel. 1
at s7=87s10=255dt0190332332
at s0=1

Home