Îïèñàíèÿ âèðóñîâ
[uniti.
Ora, un nuovo ghiacciolo di terrore squarciava il ricamo della loro esistenza.
JOE METAFORA
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Grog.Miami
Íåîïàñíûé íåðåçèäåíòíûé ïîëèìîðôíûé âèðóñ. Ñîäåðæèò òåêñò:
Mi Ami(C)'93byGROG-Italy
"Mi ami?" chiese lei.
"Ma certo", rispose lui.
"Mi ami davvero?" chiese lei.
"Ma certo", rispose lui.
"Mi ami davvero davvero?" chiese lei.
"No", rispose lui.
"Mi ami?" chiese lei.
"Ma certo", rispose lui.
Lei non chiese piu' altro.
Grog.NTA
Íåîïàñíûé íåðåçèäåíòíûé âèðóñ. Ïîä îòëàä÷èêîì ìîæåò âûâåñòè ñëåäóþùèå
ñîîáùåíèÿ:
ÞÛÛ² . ÞÛÛ² . ÞÛÛ² ²ÛÛÝ .
ßßß ÛÛ²Ý ßß ÛÛ²Ý ßß ÞÛ²Û ßß ÛÛ²Ý Þ²ÛÛ ßßß
.ÞÛ²Û Û ÞÛ²Û . Û²ÛÝ .ÞÛ²Û Û²ÛÝ .
. Û²ÛÝ ·Û Û²ÛÝ Þ²Û² · Û²ÛÝÜÜÜÞÛ²Û
Þ²ÛÛ Þ²ÛÛ ²Û²Ý . Þ²ÛÛ . ÛÛ²Ý .
·²ÛÛÝ . ²ÛÛÝ · Û²Ý ²ÛÛÝ. ÞÛÛ²
Þ²Û $*BR*$
The Nokturnal ÞÛ
Trading Alliance Û
Þ
þ
Grog4Ever
Grog.Crackers.NTA (c) 1993 by GROG
Grog.Razor
Íåîïàñíûé íåðåçèäåíòíûé âèðóñ. Ïîä îòëàä÷èêîì ìîæåò âûâåñòè ñëåäóþùèå
ñîîáùåíèÿ:
______/\_____/\________.__________/\
\_____ \____ \_____ | ________ \
| _ _/| |\ \/ ___| | || _ _/
| | \| |_\ \ \__| | || | \_
|__|_ /__|\___/\____|___ /|__|_ /
<========\/==================\/======\/==>
Grog4Ever
Grog.Crackers.Razor (c) 1993 by GROG
Grog.Sempre
Î÷åíü îïàñíûé íåðåçèäåíòíûé âèðóñ. Ïðîèçâîäèò ÷òåíèå ñåêòîðîâ ôëîïïè-
äèñêîâ ÷åðåç INT 40h è ïîèñê â íèõ ïåðâîé êîìàíäû JMP èëè CALL (áàéò
E9h èëè E8h). Åñëè äàííûé áàéò áóäåò íàéäåí, òî âèðóñ çàïèñûâàåò ñâîé
êîä â äàííûé ñåêòîð. Ïðè îøèáêå ÷òåíèÿ ñåêòîðà âèðóñ âûâîäèò òåêñò:
"Il nostro amore durera' per sempre", disse lui.
"Oh, si, si, si!", esclamo' lei.
"Intendendo 'sempre' in senso relativo, pero'", disse lui.
Lei lo colpi' con una racchetta da sci.
Ñîäåðæèò òàêæå ñòðîêó "_Sempre_(C)_'93_by_Grog_Italy_".
Grog.WildCards
Íåîïàñíûé íåðåçèäåíòíûé âèðóñ. Ïîä îòëàä÷èêîì ìîæåò âûâåñòè ñëåäóþùèå
ñîîáùåíèÿ:
ÜÛÛ ÛÛÛ Ü ÜÛ ÜÛÛÛÜ C
ÞÛÛÛÝ ÛÛÛ ßÛßÜÛ ÛÛ ßÛÜ a
ÄÄÄÄ ÛÛÛÝÄÄÄ ÛÛÛ ÜÛÜ ÛÛ ÛÛ ÄÞÛÝÄÄRÄ
ßÛßÜþ ÛÛÛ ÜÛÜÞÛÝ ÛÛÝ ÛÛ ßÜ ÞÛÛ D
ÛÛÛÜßÜ ÛÛÛÛßÛÛÛ ÞÛÝ ÛÛÜÛÛÛßÜÛÛß S
ÄÄÄÄÄÄÄ Ûß Ä ß ßÛß ÜÛßßßÜÜÛßß ÄÄÄ!Ä
]ý[ WE ARE BACK! ]ý[ [o1/o3]
Grog4Ever
Grog.Crackers.Wild_Cards (c) 1993 by GROG
Grosser.607
Íåîïàñíûé íåðåçèäåíòíûé âèðóñ. Ñîäåðæèò òåêñòû:
0000 virus
ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄĬ
¦ Virus 0000.0000 Created by GROSSER (C) 1996 AUGUST ¦
¦ ÜÜÜÜ ÜÜÜ ÜÜÜÜÜ ÜÜÜ ÜÜÜ ÜÜÜÜ ÜÜÜ ¦
¦ Û Û Û Û Û Û Û Û Û Û ASSEMBLER ¦
¦ Û ÜÜ ÛÛß Û Û ßßßÜ ßßßÜ Ûßßß ÛÛß PASCAL ¦
¦ ßÜÜÜß Û ßÜ ÛÜÜÜÛ ÜÜÜß ÜÜÜß ÛÜÜÜ Û ßÜ BASIC ¦
ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ
Gullich
Íåîïàñíûé çàãðóçî÷íûé âèðóñ. Âûâîäèò íà ýêðàí òåêñò "Wolfgang GÁllich".
Ñîäåðæèò òåêñò "In memory of Wolfgang GÁllichMilan Italy 94".
Gunia.727
Îïàñíûé íåðåçèäåíòíûé âèðóñ. 31 ÷èñëà óíè÷òîæàåò ñîäåðæèìîå MBR ïåðâîãî
æåñòêîãî äèñêà. Ïûòàåòñÿ îòêðûòü ôàéë c:\gunia.
Ha.798
Î÷åíü îïàñíûé íåðåçèäåíòíûé çàìåùàþùèé ïðîãðàììíûé êîä âèðóñ.  ñóááîòó
ïûòàåòñÿ îòôîðìàòèðîâàòü 45 íà÷àëüíûõ öèëèíäðîâ ïåðâîãî æåñòêîãî äèñêà.
Èíîãäà âûâîäèò ñîîáùåíèå:
HA! HA! HA!
Your computer is infected now by the
most likely and non-dangerous virus!
Please enjoy it!
Your MBR may now be corrupted...
è óíè÷òîæàåò ñîäåðæèìîå MBR. Ïî îêîí÷àíèè ñâîåé ðàáîòû âûâîäèò òåêñò:
General error reading drive C:
Abort, Retry, Ignore, Fail?
Hadi.6153
Íåîïàñíûé ðåçèäåíòíûé âèðóñ.Ìîæåò çàïîëíèòü ýêðàí ñòðîêîé "Hercul Hadi"
è âûâåñòè òåêñò:
by
Hadi Javan Amirkhizi
03/07/1996
TABRIZÄÄIRA
Call me to repair your system (if you find)
Press CTRL key for 5 seconds to return
Haharin
Îïàñíûé çàãðóçî÷íûé âèðóñ. Íå ñîõðàíÿåò îðèãèíàëüíûé ñåêòîð ïðè
çàðàæåíèè ôëîïïè-äèñêîâ. Ïîñëå 256 çàãðóçîê ñ æåñòêîãî äèñêà óíè÷òîæàåò
ñîäåðæèìîå ïåðâîãî æåñòêîãî äèñêà è âûâîäèò íà ýêðàí òåêñò: "Haharin is
not dead !".
Haifa.2352 (1,2)
Îïàñíûå ðåçèäåíòíûå ïîëèìîðôíûå âèðóñû. Âíåäðÿþòñÿ â ïàìÿòü ïî
ôèêñèðîâàííîìó àäðåñó 9F00:0000 áåç êîððåêöèè MCB, â ðåçóëüòàòå ÷åãî
ïðîäîëæèòåëüíîñòü èõ "æèçíè" - íåâåëèêà. Ïðè ïåðâîì æå çàïóñêå âèðóñû
ñòðåìÿòñÿ çàðàçèòü ôàéë COMMAND.COM. Ïåðèîäè÷åñêè "âåøàþò" ñèñòåìó.
Haifa.2352 (1) èíîãäà âûâîäèò ñîäåðæèìîå ýêðàíà íà ïðèíòåð (INT 5).
Haifa.2352 (1) çàïèñûâàåò â *.BAK ôàéëû òåêñò:
... What is backup for anyway???
BackUp is usually unneccessary!
End..
À â *.DOC è *.TXT ôàéëû çàïèñûâàåò òåêñò:
What's 455260 MI COUNTACH 5000 CC???
Instead of reading this junk, think about it!
5 ìàÿ Haifa.2352 (1) âûâîäèò òåêñò:
KIRYAT MOZKIN!!!
LOCAL PROCESS INDUSTRY.
VIRUS DONE BY:
SIBEL ,TEACHES
HOW TO MANAGE SHEEP?
Thanks for using Turbo Anti Virus.
PLEASE JMP FE00:0
Haifa.2352 (2) â *.ASM è *.PAS ôàéëû çàïèñûâàåò òåêñò:
.model small
.code
s: mov ax,310h
xor cx,cx
mov dx,80h
int 13h
end s
18 àâãóñòà èëè 4 àïðåëÿ âûâîäèò íà ýêðàí òåêñò:
HAIFA VIRUS V1.01
WRITTEN BY Y.S.
GUEST STARS: T.S. & I.F.
MADE IN ISRAEL
I AM TIRED. PLEASE WAKE ME UP ON TUE 12.4.3456
PRESS RESET TO CONTINUE...
Ñîäåðæèò òåêñòû: "CONST VIRUS='HAIFA'",
"OOPS! Hope I didn't ruin anything!!!
Well, nobody reads those stupied DOCS anyway!".
Halfive.512
Îïàñíûé ôàéëîâî-çàãðóçî÷íûé âèðóñ. Áëîêèðóåò óäàëåíèå ôàéëîâ. Ñîäåðæèò
òåêñò "ONE_HALF35/7".
Hal
Íåîïàñíûé çàãðóçî÷íûé âèðóñ. Ìîæåò âûâåñòè íà ýêðàí òåêñò "HAL 3001".
Hal.2862
Íåîïàñíûé íåðåçèäåíòíûé ïîëèìîðôíûé âèðóñ. Çàðàæàåò MBR æåñòêîãî äèñêà
çàãðóçî÷íûì âèðóñîì Hal.
Harlot.738, 5632 (1,2)
Harlot.5632 (1,2) - îïàñíûå ðåçèäåíòíûå âèðóñû. "Ñáèâàþò" ñèñòåìíîå
âðåìÿ. Ïåðèîäè÷åñêè âûâîäÿò â ðàìêå ñëó÷àéíîå ñîîáùåíèå (ñì.
SGWW.Nostardamus.5995) è æäóò íàæàòèÿ íà êëàâèøó "ïðîáåë". Èíîãäà
âûâîäÿò åùå îäíî ñîîáùåíèå:
Âèðóñ HARDY HARLOT v1.06 by CRAZY
Êèåâ , ÊÈÈÃÀ ÔÀÐÝÎ 101 ,20.05.94
CRAZY ïîäðóæèñü ñî ìíîé. ÔÀÂÒ 2..
Èñïðàâëåíî: ôàéëîâ - 25
Virus segment - 9E5F
Harlot.738 ñîäåðæèò òåêñò:
Hello ! I'm virus Hardy-Harlot !
Don't hurt me ,please . v1.03
Harmless.1082
Îïàñíûé ðåçèäåíòíûé, ÷àñòè÷íî çàøèôðîâàííûé, âèðóñ. Ïîðòèò ïðè
çàðàæåíèè EXE-ôàéëû, èìåþùèå âíóòðåííèå îâåðëåè. Ñîäåðæèò òåêñòû
"Eat me Lozinsky!", "Harmless v1.0, 10/06/92 Tyumen".
HarmWare.3516, 3716
Îïàñíûå ðåçèäåíòíûå ïîëèìîðôíûå âèðóñû. Ïðè çàðàæåíèè ôàéëîâ âèðóñû íå
èçìåíÿþò èõ äëèíó.Ïðè âíåäðåíèè â ôàéë âèðóñû ïðîèçâîäÿò àíàëèç äàííîãî
ôàéëà ñ öåëüþ âûÿñíåíèÿ âîçìîæíîñòè åãî óïàêîâêè äîñòàòî÷íî ïðîñòûì
àëãîðèòìîì ñæàòèÿ, èñïîëüçóåìûì äàííûìè âèðóñàìè. Ïîñëå ÷åãî âèðóñû
ñæèìàþò ïðîãðàììíûé êîä è çàïèñûâàþò ñâîé êîä â íà÷àëî ôàéëà.  EXE-
ôàéëû âèðóñû ìîãóò âíåäðèòü êîä, êîòîðûé ïðîèçâîäèò íàñòðîéêó àäðåñîâ
ïåðåìåùàåìûõ ýëåìåíòîâ, ïðè ýòîì êîëè÷åñòâî ýòèõ ýëåìåíòîâ â çàãîëîâêå
EXE-ôàéëà îáíóëÿåòñÿ. Âèðóñû ñîäåðæàò àíòè-îòëàäî÷íûå ïðèåìû. Ïðè
íåàêêóðàòíîé òðàññèðîâêå ìîãóò óíè÷òîæèòü ñîäåðæèìîå ñåêòîðîâ æåñòêîãî
äèñêà. Ïåðèîäè÷åñêè, åñëè íå áûëî íàæàòèé íà êëàâèøè, âèðóñû ïðîèçâîäÿò
"âðàùåíèå ýêðàíà".Ïðè îòêðûòèè òàáëèö ðåâèçîðà ADinf, âèðóñû âîçâðàùàþò
îøèáêó îòêðûòèÿ ôàéëà-òàáëèöû. À òàêæå ïûòàþòñÿ îáìàíóòü ADinf
âñåâîçìîæíûìè ìàíèïóëÿöèÿìè: ñîõðàíåíèåì â âèäåîïàìÿòè òåêóùåé ñòðàíèöû
ýêðàíà è ïîñëåäóþùèì åå âîññòàíîâëåíèåì, ïîäñîâûâàíèåì â áóôåð
êëàâèàòóðû ñêàí-êîäà êëàâèøè Enter è äð. Íî ýòî ïðîèñõîäèò òîëüêî â òîì
ñëó÷àå, åñëè íà ýêðàíå â ýòîò ìîìåíò ïðèñóòñòâóþò ñòðîêè "ADinf",
"Ðàáîòà", à ñàìà òàáëèöà ñîäåðæèò òåêñò "Diskinfoscope". Âèðóñû óäàëÿþò
ôàéëû chklist.ms è chklist.cps. Ñîäåðæàò òåêñòû:
HarmWare.3516:
- HarmWare v1.06 by Ak Kort [SOS group] -
Hi! I'm still alive :) Let me introduce my new release.
MThere are none distruction. Just another way of anti-heuristic...
HarmWare.3716:
- HarmWare v1.05 by Ak Kort [SOS group] -
Final version. Wait new releases.
Çþãàíîâ - ñâèíüÿ. Åëüöèí òîæÈ.
Harrier.4602
Îïàñíûé ðåçèäåíòíûé ïîëèìîðôíûé âèðóñ. Çàïèñûâàåò â MBR æåñòêîãî äèñêà
êîä, êîòîðûé èíîãäà âûâîäèò íà ýêðàí òåêñò:
I am the ¦ DARKLAND is the
  ÚĬ ÂĬ ÂĬ  ÂĬ ÂĬ ¦ kingdom of Hackers
¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦
ÃÄ´ ÃÄ´ ÃÂÙ ÃÂÙ ¦ ÃÄ ÃÂÙ ¦ I come from dark...
¦ ¦ ¦ ¦ ¦À¬ ¦À¬ ¦ ¦ ¦À¬ ¦ I invade Your PC...
Á Á Á Á Á Á Á Á Á ÁÄÙ Á Á ¦ I am Your death...
from DARKLAND ¦
ïîñëå ÷åãî îòäàåò óïðàâëåíèå îðèãèíàëüíîìó çàãðóç÷èêó. "Ïåðåõâàòûâàåò"
INT 8, 16h, 17h, 21h. Áëîêèðóåò âûâîä íà ïðèíòåð, ïå÷àòàÿ âìåñòî
îðèãèíàëüíîãî òåêñòà ñâîé òåêñò:
Hey, Ugly User, You could be my . . .
I promise You! Death to all CHAINIKS!!!
Cause I am Harrier from DarkLand . . .
Ïðè çàïóñêå ïðîãðàìì, èìåíà êîòîðûõ ñîäåðæàòñÿ â ñëåäóþùåé ñòðîêå
AIDSWEBADINFDRWEB âèðóñ âûâîäèò îäíî èç ñîîáùåíèé:
Program too big to fit in memory
Division by 0
Error in EXE file
Memory allocation error!
Bad command or file name
Cannot load COMMAND.COM . . .
Internal stack overflow!
Incorrect DOS version
This program requires Microsoft Windows.
è áëîêèðóåò çàïóñê äàííûõ ïðîãðàìì. Èíîãäà (åñëè êîìàíäíàÿ ñòðîêà
íà÷èíàåòñÿ ñ ïàðàìåòðà @@) ìîæåò âûâåñòè ñîîáùåíèå:
(c) 1996y by TechnoRat "HDL" GenNo: 000122.
ãäå ïàðàìåòð "GenNo" ÿâëÿåòñÿ ñ÷åò÷èêîì çàðàæåíèé. Äî ìåíÿ äîøåë 122
èíôèöèðîâàííûé ôàéë. Ñîäåðæèò òåêñòû:
?VirMON-I-Virus has been installed successfully!
?VirMON-W-execution 0 error!
(C)reated by HARD WISDOM!!! (hacker)
Harrier.14058
Îïàñíûé ðåçèäåíòíûé ïîëèìîðôíûé âèðóñ. Âèðóñ ñîñòîèò èç ñïëîøíûõ êîìàíä
ïåðåõîäîâ, êîòîðûå èäóò ïîñëå 1-10 "ðàáî÷èõ âèðóñíûõ" èíñòðóêöèé. Ò.î.,
ïîñëåäîâàòåëüíî âûïîëíÿþùèåñÿ âèðóñíûå èíñòðóêöèè ðàçáðîñàíû ïî âñåìó
òåëó âèðóñà è ïåðåäàþò äðóã äðóãó óïðàâëåíèå ñ ïîìîùüþ èíñòðóêöèé
áåçóñëîâíûõ ïåðåõîäîâ. Òàêèì ñòèëåì ïðîãðàììèðîâàíèÿ àâòîð, âèäèìî,
