|
The 1605 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files and data files.
 Research 1605 Virus
The 1661 Virus is a computer virus which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 1661 Virus
The 1677 Virus is a computer virus which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 1677 Virus
The 1689 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program and corrupts program or overlay files.
Research 1689 Virus
The 1701 variant Virus is a computer virus which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 1701 variant Virus
The 1704 Virus (Blackjack Virus) is an encrypted computer virus which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program files. The code for the 1704 virus is identical to the 1701 Virus except for a single instruction. The only differences are the removal of a conditional jump from the 1701 (which would never have been taken), and some necessary segment overrides on the BIOS tests missing in the previous version. The virus was designed to not infect micros manufactured by IBM, but errors in coding enable it to infect any PC, regardless of origin.
The virus tests the BIOS for the string 'COPR. IBM', and contains code to not infect if it finds this - however there are errors in the code which prevent it from working. As with the 1701 Virus, the 1704 Virus can recognize if it has previously infected a file. However, because recognition depends on the length of the virus, it will infect programs already infected by variants with different lengths. (1701 will infect COM files infected with 1704, and vice versa.) The encryption of this virus is different in each instance of the virus, being dependent on the size of the host file. The hard disk is formatted when the virus activates.
The 1704 Virus infects only COM-files which are at least 3 bytes long, and it does so only once for any given file. It overwrites the first three bytes with a JMP to the beginning of the viral code, which is appended to the file. The 2 byte address of this JMP instruction is probably the reason why only COM files are susceptible to infection. The 1704 Virus retains the file's time stamp. It even infects read-only files; on write- protected floppy disks, it attempts writing 5 times per file, thereby revealing its activity. In the infected file, the viral code is cryptographically encoded, using a simple Vigenere code depending on the length of the file; only the instructions for decoding the encrypted part of the code are in plain machine- language. This is obviously intended as a impediment against disassembling. Hence, every copy of the virus looks different (depending on the length of the file). On invocation of an infected program, the virus installs itself in RAM (if no copy is already installed), then replaces the JMP instruction with its former contents and resumes normal program operation.
The storage map shows that the virus has tampered with the free storage pointer-chain to hide the fact that it has hooked interrupt 21. Hence, only a minor part of the virus is visible in the storage map. In every year, from October to December, the virus will interfere with CGA or EGA operated screens, moving randomly chosen characters down, like falling leaves in autumn. After a while, you'll have a big heap of characters at the bottom of your screen, and as you cannot see anymore what the computer is trying to display, you'll probably have to restart the system. This behaviour has been predicted by two people, who have disassembled the virus, and has later been observed on many EGA-equipped ATs.
Research 1704 Virus
The 1720 Virus (PSQR Virus) is a computer virus derived from the Jerusalem Virus, which infects .COM, .EXE and overlay files. The virus is loaded into memory by executing an infected program and then affects the computer' s runtime operation, corrupts program or overlay files.
Research 1720 Virus
The 1757 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files.
Research 1757 Virus
The 1803 Virus is an encrypted computer virus which uses stealth techniques to avoid detection and which infects .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 1803 Virus
The 1804 Virus is a computer virus which infects .EXE files. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files.
Research 1804 Virus
The 1835 Virus is a computer virus which infects .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 1835 Virus
The 1840 Virus is a computer virus which infects .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files and data files.
Research 1840 Virus
The 191 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 191 Virus
The 196 Virus is a non-overwriting version of the 97 Virus written by Fred Deakin. It is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program files.
Research 196 Virus
The 1963 Virus is a computer virus which uses stealth techniques to avoid detection and which infects .COM, . EXE and overlay files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files and data files.
Research 1963 Virus
The 1971/8 Tunes Virus is a computer virus which infects .COM, .EXE and overlay files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 1971/8 Tunes Virus
The 1992 Virus is a harmless memory resident parasitic virus written by Skism. It hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed or opened. It contains the internal text string: 1992. On the last Friday of the month the virus will display a full colour, full screen message.
Research 1992 Virus
The 1992B Virus is an encrypted computer virus which infects .EXE files. The virus is loaded into memory by executing an infected program.
Research 1992B Virus
The 2014 Virus is a computer virus which infects the fixed disk and diskette boot sectors. The virus is loaded into memory by booting from an infected disk and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2014 Virus
The 203 Virus is a computer virus written by Solomon, which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program. The virus corrupts program files.
Research 203 Virus
The 205 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files.
Research 205 Virus
The 2062 Virus is an encrypted computer virus which uses stealth techniques to avoid detection and which infects .COM and .EXE files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2062 Virus
The 2153 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files and data files.
Research 2153 Virus
The 2330 Virus is a computer virus which infects .COM, .EXE and overlay files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 2330 Virus
The 2470 Virus is a computer virus which infects .COM and .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2470 Virus
The 2559 Virus is a computer virus which infects .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 2559 Virus
The 2560 Virus is a computer virus which uses stealth techniques to avoid detection and which infects .COM and .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2560 Virus
The 262 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 262 Virus
The 2622 Virus is a computer virus which infects the fixed disk partition table. The virus is loaded into memory by booting from an infected disk and then affects the computer's runtime operation, corrupts program or overlay files and data files.
Research 2622 Virus
The 2803 Virus is an encrypted computer virus which uses stealth techniques to avoid detection and which infects .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2803 Virus
The 2930 Virus (Traceback II Virus) is a computer virus which infects .COM and .EXE files, increasing their size by 2930 bytes. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files.
Research 2930 Virus
The 2936 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 2936 Virus
The 302 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files.
Research 302 Virus
The 3040 Virus is a computer virus which uses stealth techniques to avoid detection and which infects .COM and .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program or overlay files and data files.
Research 3040 Virus
The 310 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 310 Virus
The 337 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation.
Research 337 Virus
The 344 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files.
Research 344 Virus
The 3445 Virus is an encrypted computer virus which uses stealth techniques to avoid detection and which infects .COM and .EXE files. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files and data files.
Research 3445 Virus
The 355 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program. The virus corrupts program or overlay files and data files.
Research 355 Virus
The 365 Virus is a computer virus which infects .COM files including COMMAND. COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation, corrupts program or overlay files.
Research 365 Virus
The 370-B Virus is a computer virus which infects .COM files. The virus is loaded into memory by executing an infected program and corrupts program or overlay files.
Research 370-B Virus
The 382 Virus is a computer virus (also known as the Family Q Virus) which infects .COM files including COMMAND.COM. The virus is loaded into memory by executing an infected program and then affects the computer's runtime operation and corrupts program files.
Research 382 Virus
The 384 Virus is a computer virus which infects .COM and .EXE files including COMMAND.COM. The virus is loaded into memory by executing an infected program and corrupts program or overlay files and data files.
Research 384 Virus
|
Abbreviations
Computer Viruses
