Virus Database

Dosver.2062

Description Dosver.2062

It's a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed. On installation this virus checks the DOS version and in case of its number the virus sets the INT 20h, 21h, 25h, 26h, 27h to their original address in the DOS kernel.

Check other viruses! Be aware! Use Antiviral Software

Guerilla.1996

Description Guerilla.1996

It is a harmless memory resident parasitic polymorphic and stealth virus. It hooks INT 21h and writes itself to the end of EXE files that are closed. While opening an infected file the virus disinfects it, while searching for files (FindFirst/Next) the virus decreases the returned file length - these are virus stealth routines.
The virus does not infect several anti-viruses according to the string (two bytes per name):
TBVIAVNANEVSFIF-IMFVSCQBIV

When several file compressing utilities, anti-viruses and Windows are run, the virus disables its stealth routines. The list of these programs looks as follows: TBSCAN, TBSETUP, WIN, PKZIP, ARJ, RAR, LHA, ADINF.
While installing memory resident the virus scans the system memory for memory resident anti-viruses TBAV, NAV and NEMESIS. If one is found, the virus terminates its installation routine.
The virus also contains the text strings:
NACSBT NIW PUTESBT PIZKP JRA RAR AHL FNIDA
Guerilla 1996 PH
TB*NAVNEM

Guess.928.a

Description Guess.928.a

This is a benign memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On execution it displays:
Hey, YOU !!!
Something's happening to you !
Guess what it is ?!
HA HA HA HA all

Home