Multimedia & CD-ROM 3

home *** CD-ROM | disk | FTP | other *** search

/ Multimedia & CD-ROM 3 / mmcd03-jun1995-cd.iso / utils / virus / vsum / vsumx.xdb (.txt) < prev

Wrap

HyperText VSUM | 1995-03-31 | 3MB | 118,274 lines

VSUMX 9503 Copyright (c) 1990-95 by Patricia M. Hoffman. All rights reserved. Patricia M. Hoffman Telephone: (408) 988-3773 3333 Bowers Avenue Suite 130 Fax: (408) 988-2438 Santa Clara, CA 95054, USA BBS: (408) 244-0813 aVTK/N above action activates activation added additional after aliases alias allocation altered anti-Pascal anti-viral anything appear approximately april attempting attempts august available based becomes become beginning being below besides boundary bulgaria bytes cHKDSK cOMMAND.COM cPAV/N certification changed changes change characters command common contains contain corruption current dark Avenger date/time december decreased decrease delete described detection Method directory direct discovered discovery diskettes diskette displayed display drive eff Length encrypted errors error europe executed execute execution experience f-Prot family february file's files first following found functionally general Comments growth hangs hooked iBMAV/N iBMAV including increase indicated infected infecting infection infector infects infect information innoc install interrupts interrupt isolated isolation itself january jerusalem keyboard known lProt length listing located master memory messages message nShld naughty Hacker nAV/N netherlands non-Resident non-resident november nProt occassionally occurred occur october opened originally original origin other overwrite overwriting overwritten parasitic partition point previously program's programs program properly pS-MPC received removal Instructions replicate resident result return screen sectors sector september similar stealth stoned strings string submitted sweep/N sweep symptoms systems system table their there these though total uTScan uninfected united States unknown updated v Status vBuster vi-Spy variant(s) variants variant version vienna violator viral virexPC viron viruScan virus Name virus visible which COLORS=1f,1e,0f,1b,1e,1d,0f,,1f,1f,1f,1f,1f,1f,1e,11,1f,1e,11,18,0f,,,, DISABLECOPY=1 (C)=HyperText VSUM Copyright (c) 1990-95 by Patricia M. Hoffman (408)988-3773 THINSCROLLBAR=1 _CA=Copyright (c) 1990-95 by Patricia M. Hoffman. _CB=All rights reserved. _CD=Patricia M. Hoffman Telephone: (408) 988-3773 _CE=3333 Bowers Avenue Suite 130 Fax: (408) 988-2438 _CF=Santa Clara, CA 95054, USA BBS: (408) 244-0813 _BA=fff5,ffee,45,05, F1:Help _BB=0002,ffc4,00,00,F2:Menu _BC=ffec,ffe1,53,03,F4:Srch _BD=ffed,ffe7,50,03,F5:Print _BE=ffe5,ffe8,4f,04,F7:Color _BF=ffee,ffef,57,06,F8:Viewed _BG=fffb,002d,2d,02,<<- _BH=fffa,002b,2b,00,+>> _BI=fffe,ffd3,58,05,F10:Exit _BJ=fffc,ffd0,42,06,ESC:GoBack _BK=ffe9,ffc0,00,00,F6:Credits _BL=ffef,ffbd,00,00,F9:Files _BM=fff9,ffc3,00,00,F3:Index _BN=ffea,ffa9,00,00,SearchAgain _MA=0000,0000,56,00,VSUM Sections _MB=0556,0000,57,02,A Word From Patricia... _MC=05ec,0000,55,0c,Licensing VSUM _MD=05ef,0000,41,00,Authorized VSUM Agents _ME=055d,0000,43,00,Certification Data and Info _MF=05d7,0000,52,05,VSUM Revision History _MG=ffff,0000,00,00,- _MH=0003,0000,49,06,Virus Index by VSUM Virus Name _MI=0559,0000,4e,07,Common Name Cross-Reference _MJ=0587,0000,54,06,Viral Type Cross-Reference _MK=055b,0000,4c,00,Length Cross-Reference _ML=058f,0000,4f,00,Origin Cross-Reference _MM=05c0,0000,50,0b,Relationship Charts _MN=0583,0000,44,12,Virus Activiation Dates _MO=ffff,0000,00,00,- _MP=055c,0000,53,0b,Common Virus List _MQ=05bb,0000,45,06,Virus Entry Fields _MR=0584,0000,4d,00,McAfee Scan-IDs FZPAPN Hyper Patricia M. Hoffman's zSummary List (tmi The Reference for all MS-DOS H y p e r T e x t may not be used in a business, corporation, organization, government, or agent en ment out a negotiated site license. Copyright (c) -95 by Patricia M. Hoffman. All rights reserved. 3 Bowers Ave Suite 130, Santa Clara, CA 95054 Tel: (408)988-3773 PZPAPN Alpha Index ! ( D 5 8 J p \ ! x ^ PTfI Alphabetic Index 2KB 4-days 4Res 10 Past 3 99% 334 391 500 572 621 702 834 923 1008 1024 Print 1024 SBC 1067 1210 1226 1241 1244 1260 1308 1385 1392 1403 1452 1575 1605 1661 1689 1720 1784 1804 1835 1840 1963 2153 2559 2560 2623 3040 3445- 4096 5120 7808 A&A A-Bomb Abal ABC Abraxas 5 Accept.3619 AcidWarp Acvt Ada Adolf Hitler Adolph African 109 Agena AIDS II AirCop Akuku Alabama Alameda Albania Albanian Alex-368 Alexander Alfa All Sys 9 Alpha-743 Ambulance Car Andre Andromeda 1.0 Andromeda 1.1 Angarsk Animus Anna Anthrax Antimon Anti-D Anti-DAF Anti-Tel Anti Anto Appelscha Aragon Aragorn Arale Arara ARCV 330 ARCV Friends ARCV Xmas ARCV-670 ARCV-n Arf Argentina Armagedon Arriba Arusiek Ash Ashar ASP-472 Astra AT144 Atas Atas II AtomAnt 3.0 Atomic 1 Atomic 2 Attack Attention! Attention-629 Aurea Aussie Dir Aussie Parasite Australian Australian 403 Australian Avispa AVV-2300 Axe-1024 Azusa B&B Baba Back BackFont-896 Bad Boy Bad-389 Badsec Bad Bandit Baobab Barcelona Baron Barrotes Basilisk Beast-N-Black Bebe Beeper Beer Belgium-320 Benoit Berlusca Best Wishes Beta Beware Big Bang Big Joke Big-2000 Bios Bit Addict Bizarre Black Hawk Black Monday Black Wizard Blinker Blinky Bljec Blood Blood Rage Blood Sugar Bloody Warrior Bloody! Bobo Bomber Boojum (Killer Boys Brain Brainy Brazilian Bug Breaking Breeze Bryansk Bubonic Burghofer Burma.563 Butterflies Butt Stink ButtUgly Cacophony Cadkill Cannabis Cansu Capicua Capitall Cara Career Of Evil Carfield Carioca Cartuja Cascade Casino Casper Casteggio Catman Caz CB-1530 CCCP-510 CD Cerburus Chad Chang Changu Mangu Chaos Chaos Year Chaser CheckSum Cheeba Chemmy Chemnitz Chile Mediera Chill China CHR-869 Chris Christmas Tree Chromo 1.0 Cinderella Civil War Clone 2.0 Clonewar Close CLS-853 CMagic Cmdr Bomber Cobra Cocaine Coffeeshop-1568 Collor de Mello 9wealth Commy Como Connie Copyright Cossiga Costeau Coyote CPSU-2535 Cpxk Cracker Jack Crash Crazy Eddie Crazy Imp Crazy Priest Creeper Crew-2480 Criminal Cruncher Crusher Curse IV Curse Cyber Cybercide CyberTech Cysta Dad Dada Damage DAME Dark End Dark Lord Darkray Datacrime DataLock Davis Day10 dBASE Dead-790 Death Dragon Deicide Dejmi Democracy Demolition Demon Viper Den Zuk Deranged Desperado Dest Destructor V4.00 Devil's Dance Devils & Evangels Dewdz Diamond Dichotomy Dicker Die Digger Dima Dinky Dir Dir-2 Dirty Discom MKiller Dismember Distrust DLSU DM Do-Nothing Doctor Qumak 2 DoDo Dodo 2456 Doom II DOS-1 DOS3 DOS7 DOSHunter Dostepu DOSVer Dot Killer Doubleheart Dreamer Drop Dutch 555 Dutch Dzino Ear Ebbelwoi Edcl Egg-1000 Eight Tunes Ein Volk Einstein Eliza Elvis-1250 Emmie Emo-899 End Of Enemy Enemy Enigma Enola Estepa ETC Evil Evil Empire Exebug Experiments Experiments-416 Explosion Exunt Faerie Fairz Father Father Christmas FeelBad Feist Fellowship Fich Fichv-896 @11-537 Filler Fingers Finnish-709 FireFly Fish Fish Fisher Fission Flagyll Flash Flex Flip Flower Flue Fly 1.1 Foetus 1.1 FoneSex Forger FORM- Frajer-649 Freddy fw-692 Freak Frere Jacques Friday 13th Friends Frodo Soft Frogs Fu Manchu Funeral Fungus Fuse Box Dwarf FWord-383 G2 Geek Genc Genesis Geodesic 2.0 Gergana Ghostballs Gidra-469 Gingerbread Man Gippo Gipsy-304 Gliss Globe Gnose Godoy GoldGeld Golgi Gollum Gorlovka Gosia Got-You Gotcha Granada Grapje Graveyard-479 Green Caterpillar-1989 Green Joker Gremlin Grither Groen Links Grog 3.1 Groove Growing Block Groz-999 Grunt-1 Guillon Guppy Gusano Ha Hacktic Hafenstrass Hafenstrass 2 Haifa Hallo-496 Halloechen Halloween Hambone Hamster Handi-215 Happy Happy New Year lDays Harm-1082 Hary Anto Hates-213 Helicopter Hell Hellween Hero Hero-394 Hexametricx HH&H Hi HiDos Highlander Hiperion Hitchcock HLLS Hobbit Holiday Holocaust Hominy Honey Horror Horse Hungarian Hungarian 482 Hybryd Hydra Hymn Ice 9 Icelandic Idle Ieronim Ignorant IKV 528 Ilja-1704 Imi Incest Incom Infinity Inky Interceptor Internal Intruder Invader Invol Ionkin Iper Iranian Iraqui Warrior Iron Umbrella Italian 803 Italian Boy Itavir IVP Jack James Bond Japanese Christmas Jasmine Jason JD Jeff Jericho Jerk 11-30 -Haifa Joanna JoJo JoJo 2 Joker Joker 2 Joker-1602 Jos Joshi Joshua Julia-1000 Jump Junior Junkie Just.398 K-4B K-4C K-Hate Kalah Kali-4 Karin Karlik Keeper Kemerovo Keydrop KeyKap Keypress Kiev 483 Kiev 2049 Kipa Kiwi-550 Klaeren Klepavka KLF-356 Kode4 Kohntark Koko Korea Kremikovtzi Krivmous Kthulhu Kuku-448 Kuang Label Lancs Larry Late Night Laufwerk Lazy LCT Leech Legalize Lehigh Leningrad II Liberty Liberty-2 Liberty-1172 Lippi-286 Lisbon Literak Little Br Little Girl Little Pieces Little Red Little-139 Lo Tek Loa Duong LockUp Lockup 3.0 Loki Lokjaw Lord-933 Los-693 LoveChild-2710 LowerCase Lozinsky LPT Off Luca-309 Lucifer Lucky7 Lurve LV 1.2 Lycee Lythyum LZRQ M.I.R. Maaike Macedonia MacGyver Mad Magician Magnitogorsk 2048 Malaga Malaise Malign Malmsey Maltese Amoeba Mannequin Manola Manta Marauder March 25th Mardi Bros Mark II Marked-X Marl Marzia Matura Max.347 Mayak Mayberry Medical Meditation Lapse Mercenary Mercy Merry Xmas Meta-2048 Metallica II Mexican Mud MGTU Mich II Michelangelo Micro 128 Microbes Micropox Miky Milano Milena Ming MiniMax Minimite Ministry Minsk Ghost Mirage Mirror Mithrandir Mix1 Mix2 MMIR Moctezumas Revenge Mohova Monika-686 Monkey Mono Month 4-6 Monxla Monxla B Mordor.1110 More-649 Mosquito MPS 1.1 MPS 3.1 MPS 3.2 MPS 4.01 MPS II-754 Mr. D Mr. G MShark MSTU Mugshot Mule Multi 1.1 Multi Child Multi-123 Multi-Face Mummy Munich Murphy MusicBug Mutagen Mutant Mutation ~ MVF MX-335 My Child Mystic-377 Nanite Narcosis Natas Nazgul NaziPhobia NCU LI Necro Fear Necro Shadow Necrosoft Dementia NeverMind Newcom NGV Nina Nines Ninja No Frills NoBock NoInt Nomenklatura Not-586 NPox NR-481 NTit NTKC Null Set Null-178 Number 6 NYB Nygus Nympho 1.0 Offspring Ohio Oi Dudley OMud-512 OMT One Half Ontario Ontario 730 Ontario III Oropax Osiris Otto6 Outland Oxana Pa Parasite Paris Parity Parity Particle Man Path Pathhunt Patient Paturuzu Pay Rise PC Flu PC Flu-2 PCBB Peace Man Pegg-833 Pentagon Penza Perfume Phalcon.894 Phantom Phoenix Phoenix 2000 PhoenixD Piazzolla Pila Ping Pong Pinky Pinworm Pirate 1344 Pisello Pitch Piter-1228 Pixel Pixie Plastique Plastique-B Platov Play Tetris Plovdiv 1.1 Plovdiv 1.3 Plumbum Plutto Poem Poet Pogue Poison Pojer Polifemo Polimer Polish 217 Polish 529 Polish 583 Polish Polish-376 Poor Man Porridge Positron Possessed PPSP Praying Predator Pregnant Press Prime Print PrintMonster Problem Protecto Protipus Proud Psychosis Puke-393 PV-81 Python QMU Quake Queens Quiet Quick Quirk R-10 R-11 Radyum Rael Rage Rajaat RAM Random Raptor Rasek Rattle RaubKopie Raver Reaper Red Diavolyata RefRef Reklama Relzfu Reset Revenge Attacker Revelation Reverse.A Rider Riihi RIP-699 RNA Rocko Roguey Rosen RPVS RSP-1876 RTL4 Rubbit Ryazan Rybka Sabbath Saddam Sadist Sandwich Sayha Watpu Satyricon Saturday The 14TH Schrunch-420 Scorpio Scott's Valley Scramble Scream Scroll Scythe SeaCat Search-1000 Seat Self Semtex Sentinel Serena Seventh Son Shadow Shake Shaker Shaman Shanghai Shield Shifter Shiny Happy Shirley Shizol Shock Therapy Sicilian Mob Signs Silence Silly SillyOR Silly Silly-365 Simple Simulati Sinep Siskin Sistor Skater Skew-469 Skid Row Skynet Skull Slayer Sleepwalker Slime Slovak Slow Slub Sluknov Small ARCV Small Small-115 Small-145 Small-178 Smaug Smiley SNA Socha Sofia Term Solano 2000 thing Sonik Youth Sorlec Sorry Soupy Spanish Spanish Fools Spanz Sparkle Sparse Split Split Second Spring Spyer Squawk Squeaker Squisher Staf Stahl Stanco StarDot 600 StarDot 789 StarDot 801 Stasi Sterculius Sticky StinkFoot Stone`90 Storm-1163 Storyteller Striker #1 Student-776 Stupid-1355 Suicidal Sunday Sunday-2 Sundevil Suriv 1.01 Suriv 2.01 Suriv 3.00 Suriv 4.02 Surrender Susan SVC 3.1 SVC 4.0 SVC 5.0 SVC 6.0 SVC-2936 SVC.3241 Sverdlov SVir Swap Swedish Boys Swedish Disaster Swiss 143 Swiss Phoenix Sword Sybille Sylvia Sylwia Synergy Syrian SysLock TBug-634 Tabulero Tack Tai-Pan Taiwan Taiwan 3 Taiwan 4 Tajfun Talentless Tamanna Tamper Tankard Tao Cheng Tatou Taurus Tchantches TechnoRat Telecom Ten Tequila Terminator Terminator-2294 Terminator-3549 Tester The Click Thimble Thirty Three Timid Timor Tiso TMTM Tobacco Todor Tokyo Tolbuhin Tomato Tony Tony Tormentor Tormentor-205 Totoro TPWorm Traceback Traceback 3029 Traceback II Traveller Tremor Trident Trigger Troi Tu-482 Tula Tumen Turbo Turn.557 Tver-308 Twin-351 Twister Typo Typo UFA-1201 Ugur Ultimation Under 7 UnExe Unk Urfydus Uruguay Uruk-hai V-3n V270x V351 V388 V483 V651 V800 V801 V82 V1024 V2000 V2100 V2P2 V2P6 Vacsina Vampire Varicell VCL VComm Veronika VFSI VHP2 Vicious Victor Vinchuca Vindicator Violetta Violite Viperize VirDem VirDem-792 VirDem-1542 Vivaldi Vivat VLamix VMem Voice-1495 Voodoo Voronezh Voronezh-370 Voronezh-Chemist Vote Vriest VS-2790 VVF 3.4 VX-163 W13 Walker Wally Wanderer Warez-1341 Warning Warrior Warsaw-850 Wasp Wave Weak Were Here Western Ukraine Westwood Whale Wharps Wild Thing 2 istrover III Windmill WinVir Wisconsin Witch Wolfman Wonderful WordSwap World Peace Worm-16850 Worm-17690 Wrzod WW-658 WXYC X-2 Xandu Xpeh Xuxa Yafo YAM-3599 Yankee Doodle Yankee 2 YB.Old Scribe Year Youth Zaphod Zaragosa Zero Bug ZeroHunt Zherkov ZK900 ZMT Zoid Zombie Zu1 s and Research 382 Recovery 422 4870 Acid AIDS Amstrad Argentina-102 Bad Brain Banana Blaze Blood Lust Budo Burger Busted Darth Vader Define DisDev Druid Explode Fat Fratricide Groove OW Green Peace Gyro Harakiri Hastings Hellraiser House Immolation Itti Kamikazi Leprosy Madismo Mindless MindRiot Mini-45 Naught-865 Nowhere Man Number One Ondra Over-4032 Pascal-4260 Pascal-5220 Pirate Polish-45 Possum Psychogenius Repent Seneca-B Shhs Silver Dollar Simple Minds Skism Small-38 T-1000 TalkingHeads Today Toxic Twin Peaks Tyst V-1n Viper Wonder WWT Yukon ZigZag PZPAPN MAIN MENU WEL /E TO A word gPatricia... Using Index Cross-Reference Relationship Chart Revision History Licensing Appendices Exit PZPAPN Index PZPAPN 10 Past 3 2KB 4-days 4Res 5Lo 99% 302 310 334 337 382 Recovery 391 405 408 422 439 500 512 557 572 595 604 621 646 66A 702 708 834 889 914 923 981 1008 1024 Print 1024 SBC 1067 1210 1226 1241 1244 1253 1260 1308 1385 1392 1403 1452 1575 1605 1661 1689 1720 1784 1804 1835 1840 1963 2153 2559 2560 2623 3040 3445- 4096 4870 5120 7808 PZPAPN A&A A-Bomb Abal ABC Abraxas 5 Accept.3619 Acid AcidWarp Acvt Ada Adolf Hitler Adolph African 109 Agena AIDS AIDS II Aircop AIW Akuku Alabama Alameda Albania Albanian Alex-368 Alexander Alfa All Sys 9 Alpha-743 Ambulance Car Amstrad Andre Andromeda 1.0 Andromeda 1.1 Angarsk Animus Anna Ant Anthrax Anti-D Anti-DAF Anti-Tel Anti Antimon Anto Appelscha Aragon Aragorn Arale Arara ARCV 330 ARCV Friends ARCV Xmas ARCV-670 ARCV-n Arf Argentina Argentina-102 Armagedon Arriba Arusiek Ash Ashar ASP-472 Astra AT144 Atas Atas II AtomAnt 3.0 Atomic 1 Atomic 2 Attack Attention! Attention-629 Aurea Aussie Dir Aussie Parasite Australian Australian 403 Australian Avispa AVV-2300 Axe-1024 Azusa PZPAPN B&B Baba BackFont-896 Back Bad Boy Bad Brain Bad Bad-389 Badsec Banana Bandit Baobab Barcelona Baron Barrotes Basilisk Beast-N-Black Bebe Beeper Beer Belgium-320 Benoit Berlusca Best Wishes Beta Beware BFD Big Bang Big Joke Big-2000 Billboard 1.0 Bios Bit Addict Bizarre Black Hawk Black Monday Black Wizard Blaze Blinker Bljec Blood Blood Lust Blood Rage Blood Sugar Bloody Warrior Bloody! Bob Bobo Bomber Boojum (Killer Bow Boys Brain Brainy Brazilian Bug Breaking Breeze Bryansk Bubonic Budo Burger Burghofer Burma.563 Busted Butterflies Butt Stink ButtUgly PZPAPN Cacophony Cadkill Cannabis Cansu Capicua Capitall Cara Career Of Evil Carfield Carioca Cartuja Cascade Casino Casper Casteggio Catman Caz CB-1530 CCCP-510 Cerburus Chad Chang Changu Mangu Chaos Chaos Year Chaser CHCC CheckSum Cheeba Chemmy Chemnitz Chile Mediera Chill China CHR-869 Chris Christmas Tree Chromo 1.0 Cinderella Civil War Clone 2.0 Clonewar Close CLS-853 CMagic Cmdr Bomber Cobra Cocaine Coffeeshop-1568 Collor de Mello 9wealth Commy Como Connie Copyright Cossiga Costeau Coyote CPSU-2535 CPW Cpxk Cracker Jack Crash Crazy Eddie Crazy Imp Crazy Priest Creeper Crew-2480 CRF Criminal Cruncher Crusher CSL Curse Curse IV CV4 Cyber Cybercide CyberTech Cysta PZPAPN Dad Dada Damage DAME Dark End Dark Lord Darkray Darth Vader Datacrime DataLock Davis Day10 dBASE Dead-790 Death Dragon Define Deicide Dejmi Democracy Demolition Demon Viper Den Zuk Deranged Desperado Dest Destructor V4.00 Devil's Dance Devils & Evangels Dewdz Diamond Dichotomy Dicker Die Digger Dima Dinky Dir Dir-2 Dirty Discom DisDev MKiller Dismember Distrust DLSU DNR Do-Nothing Doctor Qumak 2 DoDo DoDo 2456 Doom II DOS-1 DOS3 DOS7 DOSHunter Dostepu DOSVer Dot Killer Doubleheart Dreamer Drop Druid DSME Dutch 555 Dutch DWI Dzino PZPAPN Ear Ebbelwoi ECU Edcl EDV Egg-1000 Eight Tunes Ein Volk Einstein EkoT Eliza Elvis-1250 Emf Emmie Emo-899 End Of Enemy Enemy Enigma Enola Estepa ETC Exebug Experiments Experiments-416 Explode Explosion Exunt Evil Evil Empire PZPAPN Faerie Fairz Fat Father Father Christmas FCB FeelBad Feist Fellowship FGT Fich Fichv-896 Fil @11-537 Filler Fingers Finnish-709 FireFly Fish Fish Fisher Fission Flagyll Flash Flex Flip Flower Flue Fly 1.1 Foetus 1.1 FoneSex Forger FORM- Frajer-649 Fratricide Freak Freddy fw-692 Frere Jacques Friday 13th Friends Frodo Soft Frogs Fu Manchu Funeral Fungus Fuse Box Dwarf FWord-383 PZPAPN Geek Genc Generic Generic Genesis Geodesic 2.0 Gergana Ghostballs Gidra-469 Gingerbread Man Gippo Gipsy-304 Gliss Globe Gnose Godoy GoldGeld Golgi Gollum Gorlovka Gosia Got-You Gotcha Granada Grapje Graveyard-479 Green Caterpillar-1989 Green Joker Green Peace Gremlin Grither Groen Links Grog 3.1 Groove Groove OW Growing Block Groz-999 Grunt-1 Guillon Guppy Gusano Gyro PZPAPN Hacktic Hafenstrass Hafenstrass 2 Haifa Hallo-496 Halloechen Halloween Handi-215 Hambone Hamster Happy Happy New Year Harakiri lDays Harm-1082 Hary Anto Hastings Hates-213 Helicopter Hell Hellraiser Hellween Hero Hero-394 Hexametricx HH&H HiDos Highlander Hiperion Hitchcock HLLS Hobbit Holiday Holocaust Hominy Honey Horror Horse Hot House Hungarian Hungarian 482 Hybryd Hydra Hymn PZPAPN I-B Ice 9 Icelandic Idle Ieronim Ignorant IKV 528 Ilja-1704 Ill Imi Immolation Incest Incom Infinity Interceptor Internal Intruder Invader Invol Ionkin Iper Iranian Iraqui Warrior Iron Umbrella Italian 803 Italian Boy Itavir Itti IVP PZPAPN Jack James Bond Japanese Christmas Jasmine Jason Jeff Jericho Jerk 11-30 -Haifa Joanna JoJo JoJo 2 Joker Joker 2 Joker-1602 Jos Joshi Joshua Julia-1000 Jump Junior Junkie Just.398 JW2 PZPAPN K-4B K-4C K-Hate Kalah Kali-4 Kamikazi Karin Karlik Keeper Kemerovo Keydrop KeyKap Keypress Kiev 483 Kiev 2049 Kipa Kit Kiwi-550 Klaeren Klepavka KLF-356 Kode4 Kohntark Koko Korea Kremikovtzi Krivmous Kthulhu Kuang Kuku-448 PZPAPN Label Lancs Larry Late Night Laufwerk Lazy LCT Leech Legalize Lehigh Leningrad II Leprosy Liberty Liberty-2 Liberty-1172 Lippi-286 Lisbon Literak Little Br Little Girl Little Pieces Little Red Little-139 Lo Tek Loa Duong LockUp LockUp 3.0 Loki Lokjaw Lord-933 Los-693 LoveChild-2710 LowerCase Lozinsky LPT Off Luca-309 Lucifer Lucky7 Lurve LV 1.2 Lycee Lythyum LZRQ PZPAPN 00l k PTl M.I.R. Maaike Macedonia MacGyver Madismo Mad Magician Magnitogorsk 2048 Malaga Malaise Malign Malmsey Maltese Amoeba Mannequin Manola Manta Marauder March 25th Mardi Bros Mark II Marked-X Marl Marzia Matura Max Max.347 Mayak Mayberry Medical Meditation Lapse Mercenary Mercy Merry Xmas Meta-2048 Metallica II Mexican Mud MGTU Mich II Michelangelo Micro 128 Microbes Micropox Miky Milano Milena Mindless MindRiot Ming Mini-45 MiniMax Minimite Ministry Minsk Ghost Mirage Mirror Mithrandir Mix1 Mix2 MMIR Moctezumas Revenge Mohova Monika-686 Monkey Mono Month 4-6 Monxla Monxla B Mordor.1110 More-649 Mosquito MPS 1.1 MPS 3.1 MPS 3.2 MPS 4.01 MPS II-754 Mr Mr. D Mr. G MShark MSJ MSTU Mugshot Mule Multi 1.1 Multi Child Multi-123 Multi-Face Mummy Munich Murphy MusicBug Mutagen Mutant Mutation MVF MX-335 My Child Mystic-377 PZPAPN Nanite Narcosis Natas Naught-865 Nazgul NaziPhobia NCU LI Necro Fear Necro Shadow Necrosoft Dementia NeverMind Newcom NGV Nina Nines Ninja No Frills NoBock NoInt Nomenklatura Not-586 Nowhere Man NPox NR-481 NTit NTKC Null Set Null-178 Number One Number 6 NYB Nygus Nympho 1.0 PZPAPN Offspring Ohio Oi Dudley OMT OMud-512 Ondra One Half Ontario Ontario 730 Ontario III Oropax Osiris Otto6 Outland Over-4032 Oxana PZPAPN Parasite Paris Parity Parity Particle Man Pascal-4260 Pascal-5220 Path Pathhunt Patient Paturuzu Pay Rise PC Flu PC Flu-2 PCBB PCV Peace Man Pegg-833 Pentagon Penza Perfume Phalcon.894 Phantom Phoenix Phoenix 2000 PhoenixD Piazzolla Pif Pila Ping Pong Pinky Pinworm Pirate Pirate 1344 Pisello Pitch Piter-1228 Pixel Pixie Plastique Plastique-B Platov Play Tetris Plovdiv 1.1 Plovdiv 1.3 Plutto Plumbum Poem Poet Pogue Poison Pojer Polifemo Polimer Polish 217 Polish 529 Polish 583 Polish Polish-45 Polish-376 Poor Man Porridge Positron Possessed Possum PPSP Praying Predator Pregnant Press Prime Print PrintMonster Problem Protecto Protipus Proud Psychogenius Psychosis Puke-393 PV-81 Python PZPAPN QMU QP3 Quake Quiet Quick Quirk Queens PZPAPN R-10 R-11 Radyum Rael Rage Rajaat RAM Random Raptor Rasek Rattle RaubKopie Raver Reaper Red Diavolyata RefRef Reklama Relzfu Repent Reset Revenge Attacker Revelation Reverse.A Rider Riihi RIP-699 RNA Rocko Roguey Rosen RP3 RPVS RSP-1876 RTL4 Rubbit Ryazan Rybka PZPAPN Sabbath Sad Saddam Sadist Sandwich Saturday The 14TH Satyricon Sayha Watpu Schrunch-420 Scorpio Scott's Valley Scramble Scream Scroll Scythe SeaCat Search-1000 Seat Seneca-B Self Semtex Sentinel Serena Seventh Son Shadow Shake Shaker Shaman Shanghai Shhs Shield Shifter Shiny Happy Shirley Shizol Shock Therapy Sicilian Mob Signs Silence Silly Silly Silly-365 SillyOR Silver Dollar Simple Minds Simple Simulati Sinep Siskin Sistor Skater Skew-469 Skid Row Skism Skull Skynet Slayer Sleepwalker Slime Slovak Slow Slub Sluknov Small ARCV Small Small-38 Small-115 Small-145 Small-178 Smaug Smiley SNA Socha Sofia Term Solano 2000 thing Sonik Youth Sorlec Sorry Soupy Sov Spanish Spanish Fools Spanz Sparkle Sparse Split Split Second Spring Spyer Squawk Squeaker Squisher Staf Stahl Stanco StarDot 600 StarDot 789 StarDot 801 Stasi Sterculius Sticky StinkFoot Stone`90 Storm-1163 Storyteller Striker #1 Student-776 Stupid-1355 Suicidal Sunday Sunday-2 Sundevil Suriv 1.01 Suriv 2.01 Suriv 3.00 Suriv 4.02 Surrender Susan SVC 3.1 SVC 4.0 SVC 5.0 SVC 6.0 SVC-2936 SVC.3241 Sverdlov SVir Swap Swedish Boys Swedish Disaster Swiss 143 Swiss Phoenix Sword Sybille Sylvia Sylwia Synergy Syrian SysLock Sze PZPAPN T-1000 Tabulero Tack Tai-Pan Taiwan Taiwan 3 Taiwan 4 Tajfun Talentless TalkingHeads Tamanna Tankard Tao Cheng Tatou Taurus TB1 TBug-634 Tchantches TechnoRat Telecom Ten Terminator Terminator-2294 Terminator-3549 Tequila Tester The Click Thimble Thirty Three Timid Timor Tiso TMTM Tobacco Today Todor Tokyo Tolbuhin Tomato Tony Tony Tormentor Tormentor-205 Tormentor-1072 Totoro Toxic TPE TPWorm Traceback Traceback 3029 Traceback II Traveller Tremor Trident Trigger Troi TSoft Tu-482 Tula Tumen Turbo Turn.557 Tver-308 Twin Peaks Twin-351 Twister Typo Typo Tyst PZPAPN UFA-1201 Ugur Ultimation Under 7 UnExe Unk Urfydus Uruguay Uruk-hai PZPAPN V-1n V-3n V270x V351 V388 V483 V651 V800 V801 V82 V1024 V2000 V2100 V2P2 V2P6 Vacsina Vampire Varicell VComm VCL VCS Veronika VFSI VHP VHP2 Vicious Victor Vinchuca Vindicator Violetta Violite Viper Viperize VirDem VirDem-792 VirDem-1542 Vivaldi Vivat VLamix VMem Voice-1495 Voodoo Voronezh Voronezh-370 Voronezh-Chemist Vote Vriest VS-2790 VVF 3.4 VX-163 PZPAPN W13 Walker Wally Wanderer Warez-1341 Warning Warrior Warsaw-850 Wasp Wave Weak Were Here Western Ukraine Westwood Whale Wharps Wild Thing 2 istrover III Windmill WinVir Wisconsin Witch Wit Wizard 3.0 Wolfman Wonder Wonderful WordSwap World Peace Worm-16850 Worm-17690 Wrzod WW-658 WWT WXYC PZPAPN X-2 X77 Xak Xandu Xpeh XPH Xuxa PZPAPN Yafo YAM-3599 Yankee Doodle Yankee 2 Yap YB.Old Scribe Year Youth Yukon PZPAPN Zaphod Zaragosa Zero Bug ZeroHunt Zherkov ZigZag ZK900 ZMT Zoid Zombie Zu1 PZPAPN : 2KB J: j; DOS S: 2,048 7: PRhAK - , NAV 3.05+, ]2.17+, 12.2 9503+, 7.00+, 2.17+, 1.05 9503+ The 2KB . Its . 2KB is a /and . .. It may be related to the Bios c2KB at the top of the ), not moving ~12's , as sby the DOS Bby 8,336 }09, 1C, and nby the the 2KB , it /and . rof 2,048. The at the $of . a, and the end of . The @and in the DOS not be . The in the 7in all "BIOS" If the DOS the 2KB son all See: Bios PZPAPN : 3Y 3Y.853 J: S: 853 7: PRhC - 12.2 9503+, The 3Y . Its . 3Y is a wof . a, but not Y, the 3Y at the top of &the ), not moving ~12's , as sby the DOS Bby 1,328 nby the the 3Y , it may Pnot yall . rof 853 at the end of the b. The @and the DOS not be . The in the 7in all /MAND." "3Y_06b. /Ver0.6b Copyright 3Y2H" "R3Y_06a. It is what 3Y PZPAPN 4-days : 4-days J: S: 1,358 - 1,372 7: PRhAK - 2.1.7+, 12.2 9503+, The 4-days . Its . 4-days is a wof . and . c4-days Y, the 4-days at the top of &the ), not moving ~12's , as sby the DOS Bby 1,360 nby the , the .if it was not the 4-days , it rof 1,358 to 1,372 at the end of the b. The @and in the DOS to the @and . The in the 7in all Xcom exe OVL" "ALIEN 1.0 written by P.K. on Good Luck !!!" PZPAPN : 4Res J: (failure; S: 1,049 7: PNAK - ], NAV 3.05+, 12.2 9503+, {3.0+ The 4Res . Its . 4Res is a wof . /and . the 4Res yone . /or . in the the 4Res rof 1,049 at the end of the b. The @and in the DOS not be . The can be in the 7in all "4RESPATH= /SPEC=*. X4RES" kfrequently (copy of t, the fail to gthe PZPAPN : 5Lo J: Poland S: 1,030 - 1,040 7: PRhE - , NAV, 12.2 9503+, The 5Lo , and is gPoland. 5Lo is a wof . c5Lo Y, the 5Lo at the top of the ), hooking ~21. 5Lo rof 1,030 to 1,040 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all 5Lo "92.05.24.5lo.2.23MZ" PZPAPN 10 Past 3 : 10 Past 3 J: keypresses lware devices disabled or interference S: 748 7: PRaCK - , NAV, The 10 Past 3, or 748, was actually much earlier, in early . 10 Past 3 is a wof . The the 10 Past 3 in low , hooking }21 and 6B. , as measured by the DOS not be the 10 Past 3 , it rof 748 at the end of the b. The in the DOS not be . No in the The 10 Past 3 between 15:10 and 15:13 (3:00PM and 3:15PM) every day, at cause the "Ctrl" or "Shift" keys to be invokes enters a character on the . As a , the character input may not be the same as what the intended. ly, it either disables or interfers the functioning of the devices on the days of any month 1st day of any month - 10th day of any month - 16th day of any month - monitor/ 29th day of any month - On the 22nd day of any month, unexpected (s may of 10 Past 3 are: 10 Past 3-B: A 789 of the 10 Past 3 adds 789 +to the . .. It the on the monitor: The in the 7in all 10 Past 3-B : Republic Of South Africa PZPAPN : 99% 99 Percent, Traveling Jack J: seconds set to 14 S: 821 - 835 7: PNE - 1, NAV, The 99% . Its , but it s to be W. 99% is a wof . 99% is Y, the 99% yone . in the Gor in the Q's root rof 821 to 835 the end of the b. The @and in the DOS to not be , but the seconds #set to "14". The in the 99% "Het 99%- heeft toegeslagen. . ." is my revenge E.V !" released 6 X\* \" It is what 99% may do of 99% are: 99%-B: in May gthe , 99%-B is a 979 of the 99% . It xone . bin the ever an rof 979 to 993 at the end of the b. The @and in the DOS . The in the 99%-B "\*. *. The 99%-B 7to perform an absolute write : The May, PZPAPN : 302 J: 4; TSR S: 302 7: PRsCK - , NAV, The 302 . Its . The 302 is a wof . c302 Y, the 302 as a low TSR of 864 +. It hooks the 302 , it rof 302 at the end of the b. The @and in the DOS to the @and . No ;ed in the The 302 Pn't do PZPAPN : 310 DM.310 J: j; write protect S: 310 7: PRaCK - , NAV, The 310 . Its is a wof . The 310 is Y, the 310 hooking }21 and 63 in the ~area. the DOS the 310 , it Y. If Y, it the 310 rof 310 at the end of the b. The @and in the DOS the 310 notice gwrite protected write protect Nby DOS. because the Pn't check for the Vand handle PZPAPN : 334 Made J: May, England S: 334 7: PNCK - , NAV, 12.2 9503+, The 334 in May, . It is England. is a the 334 Y, the 334 check the cthree . in the see if it finds the three . a, it yit. completed process, the the 334 of 334 at the end of the b. The @and in the DOS to the @and . No in the The 334 Pn't to do of 334 are: 334-B: on the 334 very . It xone . bin the Pnot apast the cfive in the rof 334 at the end of the b. The @and in the DOS to the @and . The in the "Made in England" : England 334-C: on the 334 is an very minor . It :the "Made in England" : England May, PZPAPN : 337 F1-337, V337 J: May, j; TSR S: 337 7: PRsC - , NAV, The 337 Win May, . 337 is a wof . . It Pnot The 337 is Y, the as a low TSR of 944 nby the 337 is , it by 337 at the end of a. The @and in the not be 337 Pnot do PZPAPN 382 Recovery : 382 Recovery 382, Recovery, 382 Recovery.1 J: c382 +of . spurious Qspinning; (failures Taiwan S: N/A 7: ONAK - , NAV, The 382 Recovery in Taiwan. It is generic wof . /and . the 382 Recovery Y, the check the Gfor a . has not . If it finds an b, it yit. If the less , the now be 382 were greater not show any always mthe c382 +of the the all . ain the Gare t, the next Ythe ato . a, however, may or may not later of the 382 Recovery %present on a bare the . In cases, the hang upon [, requiring the to be re (ed. In cases, spurious on the and the not run. Lastly, the may do nothing but leave the Qspinning, requiring the to be powered off and re Occasionally, the 382 Recovery corrupt IO.SYS, one of the hidden <has gthe fail. Since the c382 the acannot be recovered. The the bare permanently lost. ashould be Dd or erased and replaced backup copies to be of 382 Recovery are: 382 Recovery.1: A minor of 382 Recovery hequivalent to the differs by See: Burger PZPAPN : 391 J: S: 391 7: PNCK - ]2.17+, 12.2 9503+, 2.0+, 2.17+ The 391 . Its is a wof . the 391 yone . in the rof 391 at the end of the b. The @and the DOS not be . The in the "*.com" PZPAPN : 405 Hammelburg, 405-EST J: 1987 afail to run; c405 +of . Austria or Germany S: N/A 7: ONC - ], NAV, ], NAV, or The 405 is an in the C: Qroot G. If the of the . less +, the of 405 =ly cannot recognize are already t, so it attempt to them again. The 405 Pn't carry an @, and Pn't do in the C: Qroot G. However, since it s the c405 +of . aare not recoverable except by replacing them backups or distribution of 405 are: 405-EST: , 405-EST is an of the 405 . The purpose of the alteration is to avoid detection by See: Burger PZPAPN : 408 J: j; unexpected ; write protect Uon write protected S: 408 7: PRfCK - The 408 . 408 is a wof . The 408 is in low be no sby the DOS }80, 82, 83, 85, 88, 89, 8A, 8C, 8E, 91, 93, 95, 96, 98, 9C, 9E, A0, A1, A2, A3, A5, A7, A8, AA, AC, AF, B4, B8, and BB all be nby the 408 is , it yany . by 408 at the end of the be no 5in the @and in the DOS \write protect gwrite-protected require 8line input receive 8line input was not 408 Pnot to do PZPAPN : 422 J: March, acorrupted; 4; TSR; DOS DIR 8output not correct; fail to function S: 422 7: PRsC - NAV 3.05 9503+, The 422 in March, . Its . 422 is a , but not c422 as a low TSR of 1,120 by the the 422 , it one . a DOS DIR Y. The 8output of the DOS DIR be affected, usually one . %repeated multiple the 422 ras the where in the middle of the host b. The one exception is were smaller "over 65K v. The in the DOS to the @and . No in the the 422 not function PZPAPN : 439 Beech J: Poland S: 439 7: PRhCK - , NAV, 12.2 9503+, The 439 . It is Poland. 439 is a wof . The the 439 the 439 at the top of &the , as sby the DOS Bby 2,064 by the the 439 , it rof 439 at the end of the b. The and in the DOS not be The 439 Pn't to do of 439 are: 439-B: hequivalent to the , 439-B is a minor . A couple +differ gthe : Poland PZPAPN : 500 Int86 J: S: 500 7: PRaCK - , NAV, The 500 wof . c500 Since the Pnot reserve the it occupies, and keep it in may \frequent the 500 , it rof 500 at the $of the . The and in the DOS not be The 500 cannot determine it has , so re amay vof a in an to the PZPAPN : 512 512-A, Number of the Beast J: , 1989 crashes; k; TSR S: 512 7: PRCK - , NAV, : CleanUp, or The 512 is not the same as the Friday The 13th . The 512 , 1989, by Vesselin Bontchev. It |ing is run. becoming , any for any reason tif its is at least 512 the 512 crashes due to unexpected U, as well as k. Damage may aif the runs the /F parameter as the of the in the Gentry not match the actual Mspace used. adjust the ing in damaged The of "Number of the Beast" is because the author of the used a signature of 666 near the end of the to determine if the bis already t. Since 512 adds its 7to the end of a, it is easy to verify tby the 512 by checking for signature. of 512 are: 512-B: to the 512 , except the DOS check in the #omitted. The author's signature of '666' has #omitted. 512-C: to the 512-B , minor 512-D: to the 512-C , except no longer checks to see if a bhas the Attribute on it before 512-E: to the , such as on video cards. ma 55,104 sby the DOS Pnot use the 666 signature to designate 512-F: , the DOS show any . The "666" signature can be aas offset 1FD. PZPAPN : 557 J: S: 557 - 566 7: PRhE - , NAV, , NAV, {3.0+ The 557 . Its is a c557 at the top of the sby the DOS Bby 624 nby the 557 the 557 , it rof 557 to 566 at the end of the b. The @and in the DOS to the and . One s in all "X[YZ]" The 557 Pn't to do PZPAPN : 572 J: S: 572 7: PRhE - , NAV, 12.2 9503+, The 572 . Its is a The the 572 at the top of &the , as sby the DOS Bby 1,024 }21 and 24 the 572 the 572 , it rof 572 at the end of the b. The @and in the DOS to the @and It is if 572 of 572 are: 572-COD: A minor of the 572 has three differ. May, PZPAPN : 595 J: S: 595 7: PNCK - NAV 3.05 9503+, {3.0+ The 595 . Its . The 595 is a wof . the 595 Y, the 595 yone . in the G. If all of the . ain the already t, the search for a . in the Qroot rof 599 the end of the b. The @and in the DOS to the and is one in the It is if 595 PZPAPN : 604 J: S: 604 7: PRhCK - {3.0+ The 604 . Its . 604 is a wof . c604 at the top of the ), not moving ~12's , as sby the DOS Bby 880 nby the the 604 , it rof 604 at the end of the b. The @and in the DOS not be . No in the PZPAPN : 621 thing J: S: 621 7: PNCK - NAV, The 621 . Its . 621 is a wof . 621 is Y, the search the Qand Gfor an , it tby the 621 621 at the end of the b. The in the "Water detected in math-co-processor" "PARITY ERROR" halted" thing wonderful has happened, your PC is alive..." It is what 621 PZPAPN : 646 J: S: 646 7: PNCK - , NAV, The 646 . Its is a wof . the 646 Y, the yone bin the by 646 the end of the acan be easily identified as always end the hex : "EAF0 s to do nothing except PZPAPN : 66A Satan-B J: failure; "Too many aopen" S: 512 7: PNCK - , NAV, The 66A . Its is a the 66A search the Gto locate all a. As the aare e, the ythem. the 66A rof 512 at the end of the b. The @and in the DOS to the @and The can be in all 66A "66A" The "66A" is used by the to determine if the bwas t, and is at the end of the the 66A may fail to or unusual , such as "Too many aopen". PZPAPN : 702 J: j; TSR S: 702 7: PRsC - , NAV 3.05+, {3.0+, 1.05+ The 702 . 702 is a of . it is what picky about what it The the 702 as a low TSR of 944 nby the the 702 , it may rof 702 at the end of the b. The @and in the DOS not be . No the 702 It is if 702 PZPAPN : 708 J: j; TSR; S: 708 7: PRsCK - 12.2 9503+, 7.00+ The 708 . Its . 708 is a wof . The the 708 the 708 as a low TSR of 1,040 nby the , the ythe copy of in the C: Qroot Gif it was not the 708 , it ythree . in the 708 at the end of the The @and in the DOS to the @and The in the 708 "Bad "C:\ /MAND . The 708 corrupt the corrupted mthe cthree , no . The in the DOS not be [of one of corrupted hang. PZPAPN : 834 Arab J: j; TSR; ; unexpected Maccesses to may hang Saudi Arabia S: 834 7: PRsC - , NAV, The 834 . Its is a wof . but not The the 834 the as a low TSR of 1,808 nby the well. At , the access the , altering it. the 834 , it aof a greater 4K in ., however, not be by 834 +, the at the end of the . The @and in the Gis not by the the 834 may notice unexpected accesses to the executing accesses are the accessing the Y, or a by the . The yious copy of the , but has later (the gthe in a hang ring during the (process. of 834 are: 834-B: (Arab) to the are greater 1K in before v. Two 7: "nsed Materi" and " Low TSR is 1,792 PZPAPN : 889 J: March, S: 889 - 903 7: PRhA - , NAV, {3.0+ The 889 in March, . Its . 889 is a wof . , but not c889 Y, the 889 at the top of the ), hooking ~21. , as sby the DOS Bby 960 ~12's not be moved. the 889 , it /and . , but not rof 889 at the end of the by 889 to 903 at the end of the b. The @and in the DOS to the and . No the It is what the 889 may do PZPAPN : 914 Russian Mutant J: S: 914 7: PRhC - , NAV, The 914 . Its . The 914 is a wof . . It Pnot The the 914 at the top of &the ~12's not #moved. sby the DOS Bby 912 }1C and AC nby the the 914 , it larger 1K in rof 914 the at the end of the b. The @and in the DOS are no in the It is if 914 PZPAPN : 923 Hey You J: may fail to S: 923 7: PRhAK - , NAV, The 923 . Its 923 is a generic wof . /and . The 923 is Y, 923 at the top of &the sby the DOS Cby 944 nby the 923 is , it /and . Y. If Y, it 923 to 942 at the end of the Pnot alter in the ;the is part of the "Hey, YOU !!! thing's happening to you ! Guess what it is ?! HA HA HA HA" may be N, the be terminated and the ed to a DOS prompt. PZPAPN : 981 Joe's Demise J: May, S: 981 - 1,932 7: PRhA - , NAV, The 981 Iin the in May, . Its is a /and . a, but not c981 Y, the 981 at the top of &the ~12's not be moved. , as sby the DOS Bby 1,952 21 and 22 nby the , the 981 /and . for any reason. . by 981 if the smaller "1,934 by 1,015 to 1,025 +. In both cases the at the end of the adding an +to the b. The @and in the DOS not be One can be ein all 981 requires MS-DOS 3.00 or later" It is what the 981 may do of 981 are: Joe's Demise: to the has 11 differ. PZPAPN : 1008 Suomi, Oulu J: j; internal stack halt on Helsinki, Finland S: 1,008 7: PRCK - ], NAV, ], NAV, or The 1008 by Petteri Jarvinen of Helsinki, Finland. It is a w, and s referred to as the Suomi The the 1008 the ing in its increasing by 1,008 +. The .cannot be seen by doing a if the is present in (ing a tcopy of .may in an internal stack V, and the %halted. effect was noted on the author's test machine is a XT-clone running Microsoft MS-DOS 3.30. , it yany . Y, adding 1,008 +to the . The rcannot be seen by doing a if the is present in PZPAPN 1024 SBC : 1024 SBC Ontario II, SBC J: j; intermittent printing problems; Canada S: 1,024 7: PRhAK - NAV, : CleanUp, or The 1024 SBC . Its is Canada. 1024 SBC is a /and . It is on the Ontario The 1024 SBC is at the top of &the ), hooking , as measured by the DOS Bby 3,072 12's #moved. At , the .if it was not many as the part of the 00h at the end of , 1024 SBC /and . for any reason. and . rof 1,024 be hidden if the . The at the end of the A symptom of a 1024 SBC intermittent printing problems printer. Unlike several hide the the DOS 1024 SBC is an , and no the See: Ontario Ontario III PZPAPN 1024 Print : 1024 Print 1024PSCR J: May, 4; Print failure; S: 1,024 7: PRhCK - , NAV, The 1024 Print in May, . Its and its , are is a wof . The 1024 Print Y, the at the top &the , as measured by the DOS 2,048 and 21 nby the 1024 Print , it over 1K in for any reason. by 1,024 at the $of the 1024 Print @and in the to the 1024 Print , it interfer the functioning of the Print key. Pressing the Print in a Oof the 's CMOS configuration instead of printing the contents of the PZPAPN : 1067 J: ; TSR; S: 1,067 7: PRhCK - , NAV, The 1067 . 1067 is wof . It is The a 1067 Y, the 1067 as a low TSR of 1,808 or 1,856 nby the . Unlike most are TSRs, the vof the in a in increments of 64K. The may be mapped by utilities as an rin the of the in interpretor. the 1067 , it yone . over 3K in in the Y. If G, it may 1067 1,067 +. The at the end of the . The @and in the DOS are no in the A symptom of a 1067 Zlarge may fail due to the of large amounts of large . may receive the Zthem: too big to fit in 1067 Pn't to do PZPAPN : 1210 Prudents J: A, 1989 Mwrite failure; TSR Spain S: 1,210 7: PRE - ], NAV, ], NAV, or The 1210, or Prudents , was in Barcelona, Spain, A1989. The 1210 is a between May 1st and May 4th of any year, causing Mwrites to be Mverifies, so writes to the Mnever between PZPAPN : 1226 V1226 J: k; spurious Nin place of executing; Qspinning S: 1,226 7: PRhC - ], NAV, The 1226 by Vesselin Bontchev. is a generic . Pnot .. The 1226 is a self- encrypting , and simple search algorithms work to detect its presence on a The the 1226 the , reserving 8,192 at the top of 1226 is , the attempt to is at least 1,226 before v. The is rather "buggy" and the process is not always entirely successful. Successfully by 1,226 amultiple s, it is unable to determine bis already grow in by an 1,226 +. Eventually, the . grow too large to fit into the 1226 \unexpected . An effect instead of a executing, a line or two of spurious on the O. Lastly, always indicate m8,192 less is actually on the machine. of 1226 are: 1226-B: , 1226-B is a bug fixed of the 1226 Pnot mthe bugs present in the earlier cause Oing of spurious Pstill re yalready auntil "too large to fit into . It is fairly to 1226D. 1226-B Dropper: is an . drops the 1226-B 1226D: on the 1226 Pnot the kand the Oof spurious . 1226D aover 1,226 , copied, 1226M: (V1226M) to the 1226D , except are not bopen, PZPAPN : 1241 J: j; TSR S: 1,241 7: PRsCK - , NAV, The 1241 . Its is a wof . c1241 Y, the 1241 as a low TSR of 1,584 +, hooking ~21. Its TSR may 8data" or as part of the 8interpretor in mapping utilities. the 1241 , it Y. If Y, it tas well. 1241 rof 1,241 at the end of the be no 5to the @and in the DOS It is what 1241 PZPAPN : 1244 J: j; TSR S: 1,244 - 1,258 7: PRsA - NAV, The 1244 . It is where it was . 1244 is a wof . /and . a, it Pnot It is on the The the 1244 as a low TSR of 1,440 +. It }08 and the 1244 , it rof 1,244 at the $of the rof 1,244 to 1,258 at the end of the be no 5to the @and in the DOS . One can be econsistently in the "CONFIG" It is what 1244 of 1244 are: 1244-B: to the :the "KATALOG". : Poland See: PZPAPN : 1253 Anticad, V-1, ksgiving J: TSR; BSC; Austria S: 1,253 7: PRsBCKX - , NAV, : NAV or aand replace The 1253 . It is believed to ated in (or at least to in) Austria. 1253 is a generic wof . .. It xthe Kand the The the 1253 the as a low TSR. The TSR be 2,128 , hooking 13, 21, and 60. remain un 3, and Cby 2,128 +. At , the of the the 1253 . If the L, the the . tif it hasn't t. The 1253 appends its 7to the end of the b, and 4the cfew +of the be a jump to the appended by 1,253 +, and the makes no attempt to hide the fourth through sixth +set to "V-1" (hex 56 2D 31). Any are accessed while the is present in Newly formatted K, likewise, timmediately. The 1253 is destructive . The author of was able to get it to activate by setting the A24th and executing an The promptly went and overwrote the entire a pattern of 9 of what s to be a fragment. has started to L, the way to stop the Mactivity is to power off the The in the and/or is of special note. gthe in the , the . At , the resides the top of &the ). The be 77,840 +. It can be seen 8. At , any . the 1253 , even on the before the One effect of Qor floppy is the FORMAT 8may in unexpected Mactivity to inactive Qs. For example, on the author's formatting a QC:, was always Mactivity to uthe 1253 requires deleting , the the of any Kexposed to the be dis t. If the not dis t, the promptly gthe L. Dis uthe done in the 's full again It is @s for if it Mif an A24th gthe PZPAPN : 1260 V2P1, Chameleon Research J: Minnesota, S: 1,260 7: PNC - Encrypting , NAV, : CleanUp, ], or The 1260 not , but is it extremely virulent rd by 1,260 +, and the The encryption key The 1260 is derived gthe is highly modified. was developed as a research by Mark Washburn, who wished to show the community why identification ners do not work in all cases. The encryption used in 1260 is one of many possible cases of the encryption Washburn's later research , V2P2. See: Casper V2P2 V2P6 PZPAPN : 1308 MSpoiler J: j; lost clusters S: 1,308 7: PNCK - , NAV, The 1308 . Its . The 1308 is a of . the 1308 Y, the 1308 search the Gfor the b. If an , it it. rof 1,308 at the end of the . The @and in the DOS the 1308 may notice increasing numbers of lost clusters clusters may a, and typically in multiples of 10. PZPAPN : 1385 MPlus 1 J: j; TSR; S: 1,385 7: PRsCK - NAV, The 1385 . Its . 1385 is a of . .. It Pnot, however, yvery small . The the 1385 the 1385 as a low TSR of 3,376 }13, 21, CC, and F8 nby the 1385 , the .if it was not t, and one in the Qand the 1385 , it Y, plus one in the mechanism allows the to spread very quickly. the 1385 rof 1,385 at the $of the . The @and in the DOS . Two in the "c:\ "PATH=" the 1385 It is if 1385 PZPAPN : 1392 Amoeba J: March, TSR; . @s modified Indonesia S: 1,392 7: PRA - ], NAV, ], NAV, or The 1392, or Amoeba, in Indonesia in March . The 1392 is a and . .. It copies the c1,089 +of the host bto the end of the s the c1,089 7. An to the end of the b. As aare creation/modification 3to the @the awere Pnot to cause any destructive damage. The s in the is where its of Amoeba was derived "SMA KHETAPUNK - Nouvel Band A.M.O.E.B.A" PZPAPN : 1403 J: S: 1,403 - 1,417 7: PRhAK - 12.2 9503+, The 1403 . Its . 1403 is a /and . c1403 Y, the 1403 at the top of &the ), not moving ~12's , as sby the DOS Bby 3,296 }08, 12, 13, and 21 nby the the 1403 , it /and . rof 1,403 +. . by 1,403 to 1,417 +. In both cases, the at the end of the b. The @and in the DOS not be . No in the It is what 1403 PZPAPN : 1452 J: j; unexpected S: 1,452 - 1,465 7: PRCK - 1, NAV, The 1452 . Its is a wof . The 1452 is Y, the yall . in the C: Qroot The , however, Pnot Later, is re gthe C: Q, the as part of the 8interpretor. rof 1,452 to 1,465 at the end of the are no in the 7in the 1452 may \unexpected require 8line input. For example, [of the DOS EDLIN in the "Invalid ", and the be terminated. It is what 1452 and disrupt operation. See: Antimon PZPAPN : 1575 1577, 1591, Green Caterpillar J: ; sluggishness of DIR "green caterpillar" s on Taiwan Ontario, Canada S: 1,575 7: PRfAk - ], NAV, : CleanUp, or The 1575 in Ontario, Canada, in #widely reported, and is believed to be gthe Far East, probably Taiwan. It is a wof . /and . a, and the 1575 Y, the in 1,760 to 1,840 the top of , but &the is not reserved, and may be later by an nby the the Qroot the 1575 , it yone . one . on the ever a DOS DIR or COPY Pnot spread @and in the DOS to the @and show an rof between 1,577 and 1,591 at the end of ma green caterpillar the to the Centipede game creature. of 1575 are: 1575-B: to the 1575 . The major difference is reserves the it occupies at the top of is not moved. 1575-C: to the 1575-B, Yin addition to a DOS DIR or COPY 8is issued. may hang 1575-D: [of an in the C: becoming t. Later the gthe C: in the becoming are copied (both source and target), or a DIR 8is issued. as Green Caterpillar due to the graphic caterpillar and eat all the gthe 1575-E: [of an in the C: becoming t. The the next Y. Its at the top of the )is 1,840 +, hooking 1575-E /and . a DOS DIR Y, or a by 1,575 - 1,591 at the end of the b. The @and the DOS to the @and has to avoid detection by : Australia 1575-Libin: Fairly in behavior to 1575-E, to avoid detection by utilities. See: Green Caterpillar-1989 PZPAPN : 1605 1605-B, 1600, Anti , Tel Aviv J: j; TSR; slowdown S: 1,605 7: PRsA - , NAV, : NAV, or The 1605 was uploaded to John McAfee's Homebase BBS by an anonymous . The . The 1605 is a wof . a, and it Pnot .. It is roughly on the The the 1605 the as a low TSR of 1,728 }13 and 21 nby the . At , the slowdown by 15-20%. becoming , any . /or . tby the by 1,605 +in all cases at the $of the b. . by between 1,601 and 1,610 at the end of the replicating, it is carries any damage potential. of 1605 are: 1605-B: by MicroCom in London, England in March in a plain envelope a London postmark. The label on the Lread "Solomon is not related in any way to Dr. Solomon. very to the 1605 . The major difference is by 1,605 to 1,619 See: PZPAPN : 1661 Cascade.1661, Turkey J: j; TSR Turkey S: 1,661 7: PRsCK - p, NAV, 12.2 9503+, The 1661 , in Istanbul, Turkey. 1661 is a wof . a, it The 1661 is Y, the as a low TSR of 2,000 nby the , 1661 Y. If Y, it by 1,661 at the end of the It is what 1661 of 1661 are: 1661-B: as Turkey, Turkey in . It is to the to avoid detection by familiar 1661. : Turkey 1661-C: in Turkey in It is to 1661-B. : Turkey See: Cascade PZPAPN 1689 : 1689 J: March, S: 1,689 7: PRhAK - , NAV, {3.0+ The 1689 in March, . Its . 1689 is a /and . c1689 at the top of &the ), hooking }21, 22, and 2F. , as sby the DOS Bby 1,728 ~12's #moved. the 1689 , it and . rd in by 1,689 +, but the is hidden by the it is . The @and in the DOS not be Two in the "5V3" The DOS Uon all . The attempt to hide the balterations so utilities perform CRC or checksumming not detect alterations on 1689 is active in PZPAPN : 1720 PSQR J: March, : TSR; . damage on Dd on Friday the 13th Spain S: 1,719 - 1,733 7: PRsA - , NAV, : NAV, or The 1720, or PSQR , is a of the was in Barcelona, Spain, in March /and . unlike , it yoverlay not be The Y, the as a low TSR of 2,048 nby 1720 in the 1720 , it by 1,720 +, and the at the $of the by 1,719 to 1,733 +, and the the end of the b. In both cases, be no 5to the @and in the DOS G. All can be easily identified as the character "PSQR", is the vmarker for On Friday the 13th, the 1720 activate the Y, it M. More damaging, however, is the 1720 check to see if the has a Q. If a Qis present, the and ing in all data on the Mbecoming . The to hang. of 1720 are: 1720-B: in Spain in to the . The encryption used in the #slightly modified, most detect out any problem. See: PCBB PZPAPN : 1784 J: : . S: 1,784 7: PRhAK - , NAV 3.05+, 12.2 9503+, {3.0+, 1.05+ The 1784 . Its is a of . /and . c1784 Y, the 1784 at the top of &the ), not moving ~12's , as sby the DOS Bby 2,304 nby the , the .if it was not the 1784 , it /and . , but not copied. rof 1,784 at the end of the b. The @and in the DOS . No in the It is what 1784 PZPAPN : 1804 Dashel J: : . Germany S: 1,804 - 1,805 7: PNE - , NAV, 12.2 9503+, {3.0+, The 1804 gGermany in . 1804 is wof . the 1804 Y, the 1804 yone . in the usually rof 1,804 be 1,805 +. The at the end of the b. The @and in the DOS to the @and . No are in the It is what 1804 PZPAPN : 1835 J: S: 1,835 7: PNE - , NAV, The 1835 . It is a wof . and is very roughly on the Yankee Doodle . The sample has ated the 1835 Y, the 1835 ytwo . in the rof 1,835 at the end of the b. The @and in the DOS not be Two in the can be "*.exe *.*" It is if 1835 PZPAPN : 1840 J: j; TSR; Write protect S: 1,838 - 1,891 7: PRsAK - , NAV, The 1840 . Its . 1840 is a wof . and . The 1840 is Y, the as a low TSR of 2,144 nby the , 1840 Y, it by 1,838 to 1,891 +. The at the end of the Two in the can be "NV71. /MAND" It is if 1840 PZPAPN : 1963 V1963, 1963 OverWrite J: May, S: 1,963 7: PRsAK - , NAV, The 1963 in May, . Its . 1963 is a of . /and . , it hides its regardless of whether the . It is related to the The the 1963 the as a low TSR of 5,136 nby the mark its TSR as " is in fact reserved. 1963 is , it /and . over 1,963 Y. The xthe by writing the c1,963 of the end of bmark, and copying into the c1,963 +of the b. (. mthe c2,475 +of the , the difference is due to the . Xheader.) do not in the DOS [of the DOS %detected. regardless whether the 1963 is capable of dis on the fly. As a unaware of be unable to locate it on using CRC or checksumming techniques. Further, [of an unaware of 1963 in all becoming It is what 1963 of 1963 are: 1963-B: in May, W. 1963-B is in behavior to 1963. The primary difference is are 48 differ gthe See: Cracker Jack PZPAPN : 2153 J: j; TSR S: 2,153 - 2,217 7: PRsA - {3.0+ The 2153 . Its is a /and . . It Pnot The the 2153 the 2153 as a low TSR of 2,672 nby the the 2153 , it rof 2,153 to 2,168 rof 2,203 to 2,217 +. In both cases the at the end of the b. The @and in the DOS not be It is what 2153 PZPAPN : 2559 Yaunch J: k; unexpected Maccess to S: 2,559 - 2,933 7: PNE - 1, NAV, The 2559 zabout its is un . 2559 is a wof . 2559 is Y, the search the Gfor a candi If one is e, it yit. If not, it search the B: and C: Gstructures for a candi , and 2559 of 2,559 to 2,933 +. The at the end of a 2559 vare large . fail to s due to the having al a large amount of host Yby the . The isn't released until the host completes kmay PZPAPN : 2560 Magnitogorsk J: S: 2,560 7: PRhA - , NAV, The 2560 . It is gthe is a wof . /and . a, it Pnot The the 2560 2560 at the top of but &the ~12's is not moved. }08, 13, 21, and 22 nby the , as measured by the DOS Cby 5,184 becoming , 2560 /and . over 3K in for any reason. rof 2,560 at the end of the b. The @and in the DOS not be The DOS EDLIN fail to function 2560. ZEDLIN in the "Invalid N, and EDLIN terminate leaving the at a DOS prompt. 2560 is a . While it Pnot hide it's r, it Pactively employ techniques in order to avoid utilities are unaware of it. It is what 2560 of 2560 are: 2560-B: in May, W, 2560-B's major difference g2560 is .the r, regardless of whether the 2560-C: in May, W, 2560-C's is very to 2560-B. Magnito-3000: on the 2560-C , Magnito-3000 is a 3,000 of the . Its 6,064 +, hooking }08, 13, 21, and 22. It /and . Y, copied, or for any reason. rof 3,000 be hidden the . The at the . The @and in the DOS not be . The in the /MAND" "AND" Magnum: on the 2560-C , Magnum has avoid %detected by . It reset the @to 1-03-1988 it is . The the "Mr. Lozinsky Just read document on your AIDSTEST (1-Jan-91 ) we release new . (C) TeleFucks, Ltd See: Magnitogorsk 2048 PZPAPN : 2623 J: May, S: 2,623 - 2,633 7: PRhE - , NAV, 1.05 9503+ The 2623 in May, . Its . The 2623 is a of . The the 2623 at the top of &the , as sby the DOS Bby 2,864 }21, 22, and 2F by the ~12's #moved. , the 2623 ya randomly selected . in the the 2623 , it intermittently yone . in the the 2623 rof 2,623 to 2,633 at the end of the b. The @and in the DOS are no in the in 2623 It is what the 2623 PZPAPN 3040 : 3040 3040 J: S: 3,040 - 3,183 7: PRaA - NAV, The 3040 . Its . 3040 is a wof . /and . , but not .. It uses techniques to avoid detection. The the 3040 at the top &the as the Pnot allocate the where it resides. to the the 3040 , it may of the . /and . in the rof 3,040 to 3,183 at the $of the b. The @and in the DOS to the @and . No in the The portion of the performs the function to avoid the detection of . It effectively on the fly are read into , thus avoiding locating the 4due to PZPAPN 3445- : 3445- 3445 J: S: 3,445 7: PRhA - , NAV, The 3445- , or 3445, . Its . 3445- on all configurations, and on most [of an in a hang. It is a wof . employs techniques to avoid detection. The the 3445- Y, one of two things happen. On most , the be hung, and the mto re (the , the 3445- , it at the top of &the and , as sby the DOS Bby 3,488 ~12's #moved. The 3445- 21 at the top of ~01 in low the 3445- , it and . , but not copied. In the case of copying, both the source and target the 3445- rof 3,445 not be in the DOS if the . The at the end of the . The @and in the DOS of a 3445- vare the DOS indicate Uon all the in a hang. PZPAPN : 4096 FroDo J: X, & overlay j; TSR hides crosslinks; <of data Israel S: 4,096 7: PRsA - , NAV, : CleanUp, ], NAV or The 4096 considered a it is almost in to the The 4096 X, and Overlay a, adding 4,096 the in a into , it execu qif it is COPY or XCOPY is destructive to both data aand execu as it very slowly cross-links aon the M. The cross-linking s so slowly is a lware problem, the %almost in . The cross-linking of ais the of the manipulating the FATs, changing the number of , as well as the issuing think mlost cross-linking if the is in As a side note, if the is present in and you attempt to copy a, the new copy of the not be if the new copy Pnot man execu extension. Thus, one way to dis is to copy off all the a non-execu bextension (i.e., don't use . /, .SYS, etc.) while the is active in power off the and re ga write-protected, (ed and the is not in Dthe aand copy back the Kto the execu s and extensions. The ythe , if done correctly, but still leave the problem of cross-linked are permanently damaged. On or 22 of any year, the 4096 s to be a "bug" in the it goes into a consuming loop. The 4096 in its 7; however, it is never written out to the . Moving to the of a Land re (ing the in the "FRODO LIVES" 22 is Bilbo and Frodo Baggin's birthday in the Lord of the Rings trilogy. An important note on the 4096 data s, the data to be fine on . However, is later now be corrupted and unpredic s may of 4096 are: 4096-B: to the 4096 , the main encryption mechanism has 3in order to avoid detection. 4096-C: of 4096 is to the . The major difference is the DOS not show any cross-linking of lost clusters. A symptom of Mspace according to a DIR be more Mspace according to the DOS 4096-D: of 4096 is to the 4096-C in behavior. The major difference is it has #modified to avoid detection by anti- utilities. 4096-E: of 4096 is to the 4096-C in behavior. The major difference is it has #modified to avoid detection by most anti- utilities. Its is 5,648 PZPAPN 4870 : 4870 4870 J: fail to S: 4,870 7: ONAK - p, NAV, 2.0+, The 4870 . It's is not /and . the 4870 the search the Gfor an or . b. The csuch tby the mthe c4,870 +of the candi by the . If the was 4,870 +or more, be no rin the in the DOS G. If the was less 4,870 in the DOS now be 4,870 +. The in the not be the 4870 checked for a y, and tthe candi if one was e, the terminate and to a DOS prompt. A side note on : the is compressed Xutility, accounts for much of the 4,870 mthe markers of ein the c4,870 +of the It is not possible to dis the 4870 as the c4,870 +of the are lost. must be Dd or erased, replaced clean copies. PZPAPN : 5120 VBasic , Basic J: May, West Germany <; unexpected Mactivity S: 5,120 7: PNAK - ], NAV, ], or The 5120 in May, . It is a non- generic /and . is was written in compiled Turbo Basic assembly language. Y, the 5120 /and one . bon the Qand G, followed yone randomly selected . /or . Gon the 's C: by 5,120 +. . tby the 5120 by between 5,120 and 5,135 Unlike most of the MS-DOS es, the 5120 Pnot intercept Mwrite . Thus, may notice Mwrite no access should be ring for a Q, such as the C: Data amay "corrupted on , and cross-linking of amay The can be 5120 near the end of the "BASRUN" "BRUN" "IBMBIO. "IBMDOS. "Access denied" is one of the 5120 Pnot , but be ms in a very manner. second is not shere as the author Pnot ma copy. PZPAPN : 7808 J: May, "Not enough S: 7,808 7: PNA - , NAV, The 7808 in May, . Its . 7808 is a wof . . It Pnot 7808 is Y, the search the Qand Gfor a . /or . y. It ythe /or . it finds in the by 7,808 +. The at the @and in the DOS to the @and The in the may be re tby 7808. s, an 7,808 to the 7808 may in the "Not enough N, and the Zterminating. in the not be t. An symptom of 7808 take longer to load Ydue to the searching the @and in the PZPAPN : A&A J: S: 506 7: PRxC - , NAV, {3.0+ The A&A , and is . A&A is a wof . , but not .. It uses a tunneling technique to avoid detection by monitoring cA&A Y, the A&A in a "hole" in low al , hooking ~21. , as sby the DOS not be the A&A , it rof 506 at the $of the b. The @and in the DOS to the @and . The can be in the 7in all A&A "{A&A}" It is what A&A may do PZPAPN A-Bomb : A-Bomb J: j; DOS ?seconds = "62" S: 878 7: PRhCK - ]2.17+, 2.1.7+, NAV 3.05 9503+, 12.2 9503+, 2.0+, The A-Bomb . Its . A-Bomb is a cA-Bomb at the top of the ), not moving ~12's and , as sby the DOS Bby 1,808 the . The if it was not the A-Bomb , it for any reason. rof 878 be hidden . The at the end of the b. The @and in the DOS to be the seconds field #set to "62". The in the A-Bomb "[A-BOMB V1.0 ] By Mnemonix s of the A-Bomb may notice or batch amay Ztwice runs them. The DOS Uon all interfer the functioning of utilities it is PZPAPN : Abal Abal.758 J: S: 758 7: PNC - ]2.17+, 7.00+, p2.10+, 2.71+, 12.2 9503+, 7.00+, 2.71+, 2.17+ The Abal or Abal.758 . Its . Abal is a wof . a, but not the Abal Y, the yone . in the Gproviding Gis not the root Gof the Q. It Pnot the Abal rof 758 at the of the b. The @and in the DOS not be . The in the 7in all "*.com" "\ .." "Not enough "ABAL - 758 (I) It is what the Abal may do PZPAPN : ABC J: keystrokes repeated; S: 2,952 - 2,972 7: PRhE - , NAV, p2.10+, The ABC . It is the . ABC is a wof . alter . The the ABC Y, the ABC at the top of &the ), hooking }16 and 1C. , as measured by the DOS , but 8,960 +. The copy of ed to by the /SPEC en mental variable may the ABC , it yor alter . and . Y. . are not tby the , but may be , adding 4 to 30 may be tby the , adding 2,952 to 2,972 the end of the b. . are not tmay be , adding 4 to 30 . The in the DOS to the @and bwas in the , but the in the "ABC_FFEA" "Minsk 8.01.92" "ABC" the ABC \keystrokes on the are frequently repeated, as well as ring of ABC are: ABC-2918: A of ABC, is 8,960 +, hooking }16, 1C, and 60. It adding 2,918 to 2,927 . The at the end of the b. The and in the DOS to the @and . Like the alters . , adding 4 to 16 The same in the are ABC-2918B: to ABC-2918, ABC-2918B is a very minor PZPAPN Abraxas 5 : Abraxas 5 J: fail to graphic "ABRAXAS" and noise on speaker; 4; C:\DOS\DOSSHELL. /created S: 1,171 7: ONA - , NAV, 12.2 9503+, {3.0+ The Abraxas 5 . Its . Abraxas 5 is a /and . , but not the Abraxas 5 ythe copy of DOSSHELL. in the C:\DOS G(creating the bif it Pn't exist), as well as one in the G. Due to a bug in the in any by the Abraxas 5 the Abraxas 5 "1,171 , and ;the Abraxas 5 7. The @and in the DOS be set to the @and The can be in the 7in all Abraxas 5 "*.exe c:\dos\dosshell.com .. MS-DOS (c) "->>ABRAXAS-5<<--" "...For he is not of "...Nor he of mind" the Abraxas 5 in the Oof a graphic "ABRAXAS" on the accompanied by an ascending scale %played on the speaker. of Abraxas 5 are: Abraxas.1508: , Abraxas.1508 is a 1,508 Y, the in the G, if it was not t, as well as create a 1,508 d "ROMMAND. /". of 1,508 +and ;a copy of the 7. The is not saved by the , and hence is not recoverable gbackups. as well as the ROMMAND. mthe and in the DOS Gset to the @and . The in the "*.exe" "rommand.com" "Darkest Avenger" "CES (c) Controlled En ment Simulator" "Edwin Cleton VirSoft (c)" "h! Get a ROD just thinking about it!" The Abraxas.1508 Othe "I AM THE EDWIN CLETON VIRUS... AND I LOVE A GOOD HARD DRIVE ...A h! Get a ROD just thinking about it!" The prior to the "...A in line graphic PZPAPN Accept.3619 : Accept.3619 J: j; TSR S: 3,619 7: PRsA - , NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.17+ The Accept.3619 . Its . Accept.3619 is a wof . /and . , but not cAccept.3619 as a low TSR of 8,160 hooking }21 and 7E. , it all of the . /and . in the the Accept.3619 rof 3,619 at the end of the b. The @and in the DOS not be . The the Accept.3619 "ME PERDI A ACCEPT, SOY UN PELOTUDO" It is what Accept.3619 PZPAPN : Acid J: fail to S: 792 7: ONAK - The Acid . Its . Acid is a /and . the Acid yall of the . in the G. Later, if an Y, it start uthe . in the the Acid mhad the +of the host the Acid be no runless the was smaller +, in case it 792 . The @and in the DOS not be . The can be ein all Acid too big to fit in "Acid "Legalize ACiD and Pot" "By: Copyfright Corp-$MZU" PZPAPN AcidWarp : AcidWarp J: fail to "invalid S: 5,488 7: ONAK - 2.1.7+, 12.2 9503+, The AcidWarp . Its . AcidWarp is a /and . .. It permanently corrupts the the AcidWarp ytwo . Xor . in the mthe c5,488 +of the host by the smaller 5,488 "5,488 , while were larger 5,488 The @and in the DOS to the @and . The in the 7in all AcidWarp "SMARTCHk.CPS" "SMARTCHK.CPS" "CHKLIST.CPS" "CHKLIST.MS" too big to fit in "*.exe" "*.com" "Hey man!" "Looks like you've #fucked by" "(o)(o) the ACiDWARP "Don't worry, your wife is still a" "virgin!" "acidwarp 'copyright (c) all rights reserved" 7d by Nothing Man [MHS]" "Run V at" "Portions Copyright (c) 1983,90 Borland" all of the . /and . ain the tby the [of an in a graphic of Bart Simpson %shown in the lower left hand corner of the O, along in the eighth through fourteenth . A may instead of graphic. the AcidWarp "invalid , and may be flagged as such by software. invalid not spread the PZPAPN : Acvt J: j; TSR; may fail to function S: 1,245 - 1,258 7: PRsCK - , NAV 3.05 9503+, 12.2 9503+, The Acvt . Its . Acvt is a wof . cAcvt as a low TSR of 4K. nby the the Acvt , it 1,245 to 1,258 at the end of the b. The @and in the DOS not be . The the 7in all Acvt "acvt" "no$yes$*.*" XDBFOT" "F:\*.*" the Acvt may fail to the to the DOS prompt, PZPAPN : Ada J: j; slow clicking speaker; Argentina S: 2,600 7: PRsCK - , NAV, The Ada Iin Argentina in . Ada is a wof . The the Ada Ada as a low as measured by the DOS Bby 21,296 to 21,312 }08, 13, and nby the Ada is , it are Y. If Y, it of 2,600 at the be no 5in the @and in the DOS G. The can be "PCCILLIN. "PCCILLIN.IMG" "HATI-HATI !! ADA VIRUS DISINI !! \a slow clicking sound emitted gthe speaker. clicking occasionally 5in pitch. The receive a " Mfull" even Mthe to write to is not actually full. PZPAPN Adolf Hitler : Adolf Hitler Adolf J: S: 475 7: PR?CK - The Adolf Hitler, or Adolf, Its d due to a s in the . It should not be confused the Adolph is no relationship between the two es. Adolf Hitler is a wof . cAdolf Hitler in a "hole" in low , hooking ~21. , as sby the DOS not be the Adolf Hitler , it rof 475 at the end of the b. The in the DOS to the @and . The in the 7in all Adolf Hitler "Adolf Hitler" PZPAPN Adolph : Adolph J: May, S: 2,109 - 2,445 7: PNCK - ], NAV, p2.10+, The Adolph Win May, . Adolph is a wof . .. Adolph is a of V2P6. Adolph is Y, the search the Gfor an y. If an e, it Adolph by 2,109 to 2,445 at the end of the It is if Adolph See: V2P6 PZPAPN African 109 : African 109 J: Republic of South Africa S: 109 7: PNCK - 1, NAV, The African 109 in the Republic of South Africa by Oliver Steudler and Peter Stoffberg of the Resource Centre. African 109 is a wof . African 109 is Y, the African 109 yall ain the G. If .happens to be in tas well. African 109 of 109 +. The at the $of the b. The @and in the DOS to the @and . One can be ein the African 109 Pn't do PZPAPN Agena : Agena J: Spain S: 723 - 738 7: PRhAK - NAV 3.05 9503+, {3.0+ The Agena Iin Spain in . Agena is a wof . /and . the Agena the Agena at the top of &the , as sby the DOS Bby 1,296 }20 and 21 nby Agena in the Agena , it rof 723 to 738 at the end of the b. The @and in the DOS . No in the It is what Agena may do PZPAPN : Ah Tuesday, David-1173 Research J: May, Mformat; Italy S: 1,173 7: PRhC - , NAV, The Ah, or Tuesday, in May, . Ah is the V1024 , its is Italy. Ah is a very buggy Ah is Y, Ah at the top of , but sby the DOS Cby 1,216 }08 and 21 nby the Ah is , it over 1K by 1,173 hidden if Ah is @and in the DOS to be un if the was 12:00a, it now be blank. The at the \frequent Ah. frequently is very noticeable. The Ah on Tuesdays, at attempt to format the cfew tracks of the Ah can be easily identified as ;the "(C) David Grant Research PCVRF Disribuite fly!!! ...ah...John...Fuck You!" Ah is believe to #created by the same person as several gItaly, qSmack and Enigma. David Grant and the PCVRF had nothing to do its creation. of Ah are: Ah-B: to the yan . . It :the same as the See: Alfa V1024 PZPAPN : AIDS Hahaha, Taunt, VGA2CGA, Burger.Pascal J: 1989 S: N/A 7: ONA - 1, NAV, The AIDS as the Hahaha referred to as the Taunt by IBM, is a generic . , it Os the "Your computer now has AIDS", AIDS covering about half of the . The halted, and must be powered down and re (ed to restart it. Since s the c13,952 +of the execu , the amust be Dd and replaced clean copies in order to remove the . It is not possible to recover the portion of the Note: is NOT the Aids Info M/PC Cyborg Trojan. of AIDS are: AIDS B: Very to the AIDS 13,952 . Unlike the a, as well as ., and Pnot activate as the did. Instead, occasionally issue the "I/O V99, PC=2EFD aborted". AIDS- at several locations in the May, of the AIDS avoid detection by utilities. Among the to the less two sub Hories on the kmay Y, as well as the video mode may be switched to 25 x 40 Black & White gcolor mode. May, See: Number One PZPAPN AIDS II : AIDS II Companion Endangered J: Creates . a; melody; S: 8,064 7: SNA - Spawning , NAV, Dcorresponding . The AIDS II , or Companion , was for the . Unlike generic ws, the AIDS is the to employ what could be called a "corresponding btechnique" of target . bis never 3. The takes advantage of the DOS feature where if a exists in both . /and . Xform, the . The AIDS II Pnot actually a, instead it stores a copy of the in a corresponding . tries to Zone of his . The . band the . both mthe same base The method of vis as follows: Y, since a corresponding . bexists, the . ;ing the Y. The clocates an bin the Gand creates a corresponding (or companion) . always be 8,064 ?of the v. The . bis not at all. creating the new . b, the plays a melody and Os the "Your computer is Aids - Signed WOP & PGT of DutchCrack -" The AIDS II spawns to the . to be Y, and the runs out problem. completion of the , control s to the AIDS II . The melody is played again "Getting used to me? Next , use a Condom Since the bremains un , CRC checking cannot detect having One way to manually remove the AIDS II is to check the for mboth an . Xand a . the . bhaving a of 8,064 +. The . athus identified should be erased. The do not in the PZPAPN AirCop : AirCop J: Washington, BSC; halt; Taiwan S: N/A 7: FR - Floppy ], NAV, : CleanUp, M M, or DOS SYS The AirCop Iin the State of Washington in the early vs of however, #traced back to Taiwan, and Taiwan is probably where it ated. AirCop is a w, and it y360K 5.25" floppy AirCop , the . The AirCop at the top of high . The Cby 1,024 the AirCop . AirCop hooks AirCop is , any non-write protected accessed the AirCop . AirCop copy the 719 (Side 1, Cyl 39, 9 on a normal 360K 5.25" L) and replace the a copy of the . If a of a AirCop is viewed, it be missing almost all of the normally in a normal . The remaining "Non- just before the end of the The AirCop do one of two things on depending on how compatible the 's software and lware is . On most , the at random intervals: "Red State, Germ Offensive. AIRCOP." , the %present in the receiving a Stack Overflow Vand the %halted. In case, you must power off the in order to be able to AirCop Pnot AirCop can be removed cpowering off the and re (ing clean, write-protected DOS L. The DOS SYS 8should be used to replace the . Alternately, M Mcan be used dthe power-down and re of AirCop are: AirCop-B: in May, gthe , AirCop-B is of the AirCop . Like the , it xfloppy . The Stack Overflow Vand halt no longer . AirCop-B during the month of , and (ing tfloppy in a flashing, scrolling Oof the is Aircop" The proceed. AirCop-B has to avoid detection by utilities. Utilities can detect AirCop may not be able to detect PZPAPN : AIW J: S: 572 7: PRtC - 12.2 9503+, The AIW . Its . AIW is a wof . a, but not cAIW at the top of the ), moving ~12's and , as sby the DOS Bby 2,048 the , the AIW of 572 at the end of the b. The @and in the DOS to the @and . The can be enear the of all AIW "AIW2 PZPAPN Akuku : Akuku J: Unexpected Qaccesses S: 891 7: PNAK - , NAV, The Akuku , and comes is a wof . and . Akuku is Y, the ythree in the G. If three cannot be ein the G, the search the Gof the Q, as well as the C: Q. Both . /and . t, as well as smaller not be by 891 to 907 +, the at the end of the The @and in the not be the The in the 7, and can be ein all "A kuku, Nastepny komornik !!!" fail to the Akuku Oan " and terminate Zthem. of Akuku are: Akuku-3: hequivalent to the Akuku has three differ. It switch to the C: all the candi aon the Columbus: on the Akuku , Columbus is an of the . It yone . in the .. Columbus rof 512 at the end of the b. On 12th, of an in the %repeatedly Non the monitor while the reads the entire "Columbus Raped America. Now I Rape your The is not aas it is in the 7. The in the /Berlin, Md" "NOT!! The procedure is a bit off. Hehe" : Maryland, Cop-Mpl: Cop-Mpl is a of the Akuku . It ythree . /or . Y. If the not find three yon the Q, it search and in the C: structure. Cop-Mpl rof 1,113 to 1,128 at the end of the b. The can be in the "Sorry, I'm copmpletly dead." Cop-Mpl may \very long loads, or Qhas unexpectedly to the C: Metal Thunder: Metal Thunder was May, gItaly. by 892 to 908 Unlike the , Metal Thunder in the Y. The "(c) by Metal Thunder IVRL MI" the Metal Thunder \frequent : Italy May, Wilbur: on the Akuku , Wilbur is an the . It yone . in the .. Wilbur rof 512 at the end of the Wilbur mthe "Wilbur sez Hi!" The is not aas it is May, Wilbur-B: on the Wilbur very minor . The in the "Wilbur sez Hi!" : Berlin, Maryland 7Apr92" : Maryland, Wilbur-C: on the Wilbur to avoid detection. The in the "Wilbur sez Hi!" : Berlin, Maryland 7Apr92" : Maryland, Wilbur 2: on the Wilbur-C of Wilbur adds 512 +to the . are two distinct s of the may be ga Wilbur 2 sample. The Othe "Wilbur sez Hi!" The second Oone of the "I am not an Animal. I am a Human "I am not an Animal. I am Wilbur!" "I am not Akuku. I am a Human "I am not Akuku. I am Wilbur!" The in the "I am not" "I am" "Wilbur sez Hi!" "Akuku." "an Animal." "Wilbur!" "a Human : Maryland, Wilbur 3: on the Wilbur 2 in the Spring of any year, primarily during the month of . In [of an may in the repeatedly, scrolling down the , while the accesses the "Wilbur sez: Formatting your M. Please stand by." The Pn't actually format the the sample tested. The is not as it is : Maryland, PZPAPN Alabama : Alabama Endangered J: , 1989 (see ; FAT Israel S: 1,560 7: PRfET - , NAV, : CleanUp, ], or The Alabama at Hebrew University in Israel by Ysrael Radai in , 1989. Its was on 13, 1989. The Alabama increasing by 1,560 +. It however, it Pn't use the normal TSR function. Instead, hooks }09 and 21 in a CTL-ALT-DEL combination is detected, the causes an apparent (, but remains in RAM. The loads 30K under the highest location reported by DOS, and Pnot lower the amount of reported by the BIOS or by DOS. for one hour, the in a flashing box: "SOFTWARE COPIES PROHIBITED BY INTERNATIONAL LAW Box 1055 Tuscambia ALABAMA USA." The Alabama uses a complex mechanism to determine whether or not to ythe c, it checks to see if bin the G, if is one it xit. are no ain the Gis the t. However, s instead of uthe candi b, it instead manipulate the FATs to ex 5the candi out renaming it, so the ends up thinking he is executing one in effect he is actually executing an one. The end are slowly lost on bswapping the on ANY Friday. PZPAPN Alameda : Alameda Mazatlan, Merritt, Peking, Seoul, Yale J: 1987 Floppy (failures; -TOM; BSC California, S: N/A 7: RtF - Floppy , NAV, M, CleanUp, ], NAV, or DOS SYS The Alameda Iat Merritt college in Alameda, California in 1987. The caused no intentional damage, is now at least one now causes floppy Ms to (able a counter has r Red its limit (Alameda-C The Alameda , and its , all a CTL-ALT-DEL and 5-1/4" 360K es do stay in through a warm re (, and yboth and non- Ms. can be ton a warm (even if BASIC is loaded instead of DOS. The saves the real at track 39, 8, head 0. The of the Alameda would run on a 8086/8088 machine, later s can now run on 80286 of Alameda are: Alameda 1.2M: in the of Alameda is able to y1.2M 5.25 inch Kin addition to 360K 5.25 inch K. The hang computers using an 8088 processor , allocating 1,024 at the top of &the ~12's moved. It Kin the A: performs a CTL-ALT-DEL key combination. Golden Gate: The Alameda a modification so the counter in the has determined it has t500 K. Upon the C: Qis formatted. The counter in the is reset on Rnew : California, 1988 Golden Gate-B: Same as Golden Gate, except the counter has g500 to 30 vs before and Kare Golden Gate-C: Same as Golden Gate-B, except can the Mazatlan , and is the most dangerous of the Alameda : A modified of the Alameda the counter in the has determined it has t100 K. Upon , the Lin the floppy Qis reformatted. The SF x5-1/4" : California, A, 1987 PZPAPN Albania : Albania Albania-429, Albania-506, Albania-575, Albania-606 J: failure; S: 429 - 606 +, depending on present 7: PNCK - , NAV, Albania is actually a ^of four were *. All of are ws of . general behavior is specific zlisted under one of the Albania es is the Albania yone . in the G. If it may t. The rfor Albania depends on the Albania present, but the always be at the end of the . The @and in the DOS to the @and The can be ein all regardless of the present: "PATH=" It is if Albania of Albania are: Albania-429: The smallest of the Albania adds 429 +to the . ;the "ALBANIA" in addition to the Albania-506: Albania-506 adds 506 +to the . x. Like Albania-429, the "ALBANIA" can be ein all addition to the Albania-575: Albania-575 adds 575 +to the . x. In addition to the for all members of ^, the "albania" the Albania-575 may notice fail to , or random may be kmay Albania-606: Albania-606 adds 606 +to the . x. Unlike members of ^, it Pnot always Y. It :the "albania" in addition to the PZPAPN Albanian : Albanian J: May, S: 1,991 7: PRhAK - NAV, {3.0+ The Albanian in May, . Its . Albanian is a wof . /and . the Albanian the Albanian at the top of &the ). It Pnot move ~12's measured by the DOS Bby 2,000 }08, 17, and 21 nby Albanian in , the .if it was not the Albanian , it for any reason. rof 1,991 at the end of the b. The @and in the DOS to 12/17/89 7:21p. The can be in the "C:\ It is what Albanian PZPAPN Alex-368 : Alex-368 J: S: 368 7: PNC - , NAV, The Alex-368 . It is gthe . Alex-368 is a of . , but not the Alex-368 yall . larger in the rof 368 the end of the b. The @and in the DOS to the and . The can be in the 7in all Alex-368 "The One Night (c) Alex Hacker" PZPAPN Alexander : Alexander J: Romania S: 1,951 - 1,965 7: PRhAK - , NAV, 12.2 9503+, {3.0+, The Alexander . It gRomania. Alexander is a wof . and . The the Alexander Y, the Alexander at the top of &the , as sby the DOS Bby 3,088 }08, 21 and 27 nby Alexander in the Alexander , it and . copied, or for any reason. by 1,951 by 1,951 to 1,965 +. In both cases the at the end of the b. The in the DOS not be . The in the 7in all "ALEX0302" The in the , and hence not "Apa depistata in microprocesor Functionarea poate fi compromisa Se recomanda oprirea calculatorului citeva ore pentru uscare" "Alexander" "Constanata" "Romania" It is what Alexander of Alexander are: Alexander.2104: , Alexander.2104 is a 2,104 of the Alexander . Like the , it /and . copied. by 2,104 while . by 2,104 to 2,118 In both cases, the at the end of the band the @and in the DOS not be . The in the See: CB-1530 PZPAPN : Alfa J: (for S: Varies (see 7: PRhAK - , NAV, The Alfa is actually two closely related similiar characteristics. The two es, Alfa-1150 and Alfa-1202, Etogether differences ed out under the " " section. Both es were , and The an Alfa Y, it at the top of &the ). Depending on is present, , as determined by the DOS Cby either 1,280 or 1,344 nby the at the top of , as well as nin graphic card an Alfa , it and . small . a. The rs are given Rof the es. In the case of both es, the at the end of the be no 5to the @and in a DOS in the It is if Alfa of Alfa are: Alfa-1150: Alfa-1150, or Yankee Doodle-1150, is the earlier of the Alfa . It adds 1,150 to 1,165 a. . tby the , adding an 1,152 1,280 Alfa-1202: Alfa-1202, or Yankee Doodle-1202, is the later of the Alfa . Unlike Alfa-1150, it not re a. It adds 1,202 to 1,217 is 1,344 Alfa-1712: Alfa-1712 is an of the Alfa at the top of but &the ), not moving ~12's by 3,008 +, and , it /and . Y, adding 1,712 to 1,731 The at the end of the b. The @and in the DOS 3to 14-25-12 12:01a. Alfa-Tired: The Alfa-Tired, or Tired, is an of the Alfa . It at the top &the ), not moving ~12's Bby 3,760 +, and , it Y, adding 1,748 to 1,766 . The the end of the b. The @and in the DOS not be Rust: The Rust . It , as sby the DOS Bby 2,048 +, and nby the be used by the , but not be mapped by most mapping utilities. , Rust Y, adding 1,710 to 1,725 +to the . The at the end of the b. The @and in the DOS not be . Rust plays a three note melody Zs a See: Ah Damage Gremlin Lucifer Newcom V651 V1024 PZPAPN All Sys 9 : All Sys 9 J: j; TSR; "Abort, Retry, Ignore ?" (s; unexpected beeps on speaker S: 1,838 - 2,088 7: PRsAK - 1, NAV 3.05 9503+, The All Sys 9, or IOU, . Its . All Sys 9 is a wof . /and . The the All Sys 9 as a low TSR of 2,576 +. It , All Sys 9 /and . rof 1,838 to 1,863 at the $of the rof 2,080 to 2,088 at the end of the b. . may be re tby the , adding an 2,080 v. The in the DOS not be . The can be in the 7in all All Sys 9 "All 9 - (c) , Jerry C." "Parity Vat address 14344" "Abort, Retry, Ignore ?" All Sys 9 may \the "Abort, Retry, Ignore ?" pressing any key on the in a (. Beeping be emitted gthe speaker. PZPAPN Alpha-743 : Alpha-743 J: March, S: 743 7: PNCK - {3.0+, The Alpha-743 in March, . Its . Alpha-743 is a wof . the Alpha-743 Y, the Alpha-743 yone . in the G. If an Pnot exist in G, a hang accessing the the Alpha-743 rof 743 at the end of the b. The @and in the DOS not be . The in the 7in Alpha-743 "*.com *.*" PZPAPN Ambulance Car : Ambulance Car Ambulance, RedX J: j; graphic O& sound West Germany S: 796 7: PNCK - ], NAV, : NAV, or The Ambulance Car in West Germany in is a the Ambulance Car the attempt to yone . b. The . bto be on the C: one . bin any G, and never the bin the G. It avoids bis normally the bin the root On a random basis, the effect of a graphics Oof an ASCII block drawing of an ambulance moving across the bottom of the graphics be accompanied the sound of a siren played on the 's speaker. Both of effects a graphics capable Oadapter. of Ambulance Car are: Ambulance Car-B: to the Ambulance Car, yzero, one, or two . (s) on the rof 796 the end of the are seven differ between and the RedX-Any listed RedX-Any: on the Ambulance Car, the Ambulance Car graphic its accompaning siren Y. It xone . on the path and may See: Hafenstrass 2 PZPAPN Amstrad : Amstrad J: , 1989 Portugal S: 847 7: ONCK - , NAV, ], or The Amstrad creported in , 1989, by Jean Luz of Portugal; however, it has of in Spain and Portugal for a year prior to . The is a generic . w, but is not . It .. It is the Pixel Amstrad is Y, the Amstrad ythree . in the anot by the The carries a fake advertisement for the Amstrad computer: "=!= Buy AMSTRAD it is THE CHEAPEST /PUTER you can buy" The Amstrad Pn't do of Amstrad are: Amstrad-End Is Near: The Amstrad-End Is Near is very to the Amstrad . The major difference "=!= THE END IS NEAR!! THE SIGNS OF THE BEAST ARE EVERYWHERE" The bin the by 847 it is ras the part of the host Amstrad-End Is Near B: is a very minor of the Amstrad-End Is Near . It xthe cfive . ain the of 847 at the the b. It :the same as the End Is Near Amstrad-Luz: The Amstrad-Luz is very to the Amstrad . The "=!= Hello, John Mcafee,please uprade me. Bests regards,Jean Luz" : Portugal , 1989 See: Hell Pixel Silly Silly-365 PZPAPN Andre : Andre Andre-0, Andryushka J: S: 3,568 - 3,648 7: PRhA - 3.05, 12.2 9503+, 1.05+ The Andre, or Andryushka, . It gthe . Andre is a of . /and . . It Pnot is a polymorphic , and a simple search for detection is not possible. cAndre at the top of but &the ). It Pnot move ~12's , as the DOS Bby 8,192 +. It Hly hooks }, and mapping utilities show }mapped to the the Andre , it , or a DOS DIR or Copy 8is issued. It Pnot yvery small . a, nor . alarger 64K. ain structure. rof 3,568 to 3,648 at the end of the b. The @and the DOS not be . The in the 7, and are not "Hello!!!" "My is Andryushka" "I come gPerm, Symptom's of an Andre vare DOS DIR 8s may be very sluggish due to the a DIR is issued. alter the of Andre are: Andre-3568: A minor of the Andre , Andre-3568 adds 3,568 - 3,668 +to the . /and . x. Its is 7,632 :the same as the PZPAPN Andromeda 1.0 : Andromeda 1.0 J: j; interfers Hungary S: 1,140 7: PNC - 1, NAV 3.05, 1.05+, {3.0+ The Andromeda 1.0 gHungary in Andromeda 1.0 is a wof . , but not .. A later Andromeda 1.1, is listed separately as it has different basic characteristics. the Andromeda 1.0 the Andromeda 1.0 ytwo . the rof 1,140 at the $of the b. The @and in the DOS not be . The in the Andromeda 1.0 7, and are thus not "-= The Andromeda Strain >- 1.00" "By : Crypt Keeper" "Mission Complete... mfun your (es)" "\ANDROM.SEC *. "RUNME. .SCAN. XCLEAN. XNAV. NAV_._NO" Andromeda 1.0 may interfer the functioning of of the on non-write protected See: Andromeda 1.1 PZPAPN Andromeda 1.1 : Andromeda 1.1 J: Hungary S: 758 7: PRhC - {3.0+ The Andromeda 1.1 gHungary in Andromeda 1.1 is a wof . , but not .. An earlier , Andromeda 1.0, is listed separately as it has different basic characteristics. cAndromeda 1.1 yone . in the as well as at the top of &the , as sby the DOS Bby 1,136 nby Andromeda 1.1 in ~12's not be moved. , the Andromeda 1.1 ly, if a Y, an bin the of the Andromeda 1.1 of 758 at the end of the The @and in the DOS not be . The in the 7in all Andromeda 1.1 "[ANDROMEDA V1.1] BUDAPEST HUNGARY" It is what Andromeda 1.1 See: Andromeda 1.0 PZPAPN Angarsk : Angarsk J: S: 238 7: PNCK - , NAV, The Angarsk . It is gthe . Angarsk is a of . the Angarsk Y, the Angarsk yall of the . in the rof 238 at the end of the b. The @and in the DOS to the @and . One can be in the 7in Angarsk Angarsk Pn't to do PZPAPN Animus : Animus Animus-7360, Cookie-7360 J: j; switches aand unexpected accesses to the C: U; TSR; S: 7,360 7: PRsAK - , NAV, The Animus, Animus-7360, or Cookie-7360 . Its . Animus is a wof . /and . . Advanced vs may The the Animus Y, the Animus a low TSR, hooking }22 and 24. Cby as much as 70K. the ytwo . in the the Animus , it ytwo . rof 7,360 at the $of the b. The @and in the DOS 9-13-91 10:30a. The can be ein all Animus "Animus.id" "com "Animus.exe" Animus is a malicious . As the vof Animus progresses, the switch various s so the Gindicates is the no longer matches the contents of the process both execu and data a. As a , the may not to run, and unpredica . Animus Pnot avoid switching an ., so unexpected warm re (s or shelling of the interpretor may . The switching of the . Xextension possibly t, and all must be tested to determine if ;the are dis t, the actual contents of the amust be determined and re d to proper of Animus are: Animus-7392: Animus-7392 is a later of the Animus It adds 7,392 +to the . @and the DOS 9-13-91 10:31a. Instead of switching start all of the . in the by 7,392 at the $of the all of the the t, it start on the C: PZPAPN : Anna J: Manchester, England S: 742 7: PNCK - , NAV, The Anna gManchester, England in . Anna is a wof . the Anna Y, the Anna yone . in the rof 742 the at the end of the b. The and in the DOS the @and . The in the "[ANNA] Slartibartfast, ARCV NuKE the French" ma Cool Yule gthe ARcV" "xCept Anna Jones" "I hope you get run over by a Reindeer" "Santas bringin' you a Bomb" "All my Lurve - SlarTiBarTfAsT" "(c) ARcV - England Raining Again" "\ *. *.com" It is what Anna PZPAPN : Ant J: has seconds set to 62 S: 770 7: PNC - p, NAV, The Ant . Its . Ant is a wof . , but not .. It is roughly on the the Ant Y, Ant yone in the Ant rof 770 at the $of the b. The in the DOS mhad the seconds field set to 62, the vmarker. No in the 7in Ant Ant of any year. At , the Othe and attempt to "MIT Sux!" PZPAPN Anthrax : Anthrax J: S: 1040 - 1279 7: PRAKX - X, & ], NAV, : See The Anthrax in the it was uploaded onto several BBSs in a Trojan USCAN.ZIP. It is the second to be ein a copy of U during , the %V2100. Anthrax is a generic wof . /and . The the Anthrax on the M, the ythe ). At , the is not . It write a copy of on the last few of the M. If data existed on those last few of the M, it be destroyed. gthe M, the Anthrax . It remain until the Y. At , it yone . /or . Pnot ain the c, but instead starts to aat the lowest level of the Gtree. Later, Y, Anthrax /or . b, searching the Gstructure gthe lowest level of the Gtree. If the on the floppy Q, a . /or . bmay or may not be The Anthrax 7is 1,024 +long, but by 1,040 to 1,279 +. On the author's test , the largest \d was 1,232 always is a multiple of 16. The can be Anthrax "(c)Damage, Inc." "ANTHRAX" A third s in the 7, but it is in the Cyrillic alphabet. Per Vesselin Bontchev, third translates to: "Sofia Since Anthrax xthe must mthe tor rebuilt in order to remove the vcan be done either a low-level format or use of the M for the correct DOS powering off and re (ing write-protected Lfor the . Any . /or . Anthrax must be dis tor erased. Since a copy of the exist on the last few of the must Anthrax interacts : V2100. If a Anthrax should V2100 , the V2100 check the last few of the Mfor the spare copy of Anthrax. If the spare copy is Anthrax be copied to the It is not if Anthrax carries any destructive capabilities or trigger/ PZPAPN : Anti CMOS4, NewBug J: BSC; Mif attempt made to non- Russia S: N/A 7: BRhX - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 12.2 9503+, NAV 3.05 9503+ ]2.16+ The Anti it has reported gsites in North America for several months. It has #reported as having ated in Russia. Anti Xis a as well as the gan Anti at the top of &the , as sby the DOS Bby 1,024 , the over- write the the Anti , it yun-write protected uthe . The #saved in the last of the root Anti Xis a full , any attempt to view or access the in the Oing the . As such, are unable to detect the presence of the . The prevents its removal by blocking to write to the can be destructive under one circumstance. If the presses the key combination <Ctrl> and <Break> while the performing a Maccess, the the eight Rhead and track of the Qstarting at four. The comes gits purpose is to target any . of 200,256 +. If the finds such a b, it corrupt the `contents. PZPAPN Antimon : Antimon J: S: 1,452 - 1,465 7: PNCK - , NAV, The Antimon . Its . Antimon is a Antimon is Y, the Antimon yall in the C: Qroot G. Since .normally resides in G, it tas well. Antimon by 1,452 to 1,465 The at the end of all be no 5in the @and in a DOS The in the Antimon "*.com" "FLUSHOT3. "C:\PANDA\MONITOR. /TSRMON. /TSRMONEZ. "= C:\PDPROG" It is what Antimon See: 1452 PZPAPN Anti-D : Anti-D Xuxa-945 J: March, j; TSR; interfers Argentina S: 945 7: PRsC - p, NAV, The Anti-D, or Xuxa-945, in March, . It is gArgentina. Anti-D is a wof . but it Pnot The the Anti-D Y, Anti-D as a low TSR of 1,264 +. It hook 21, and F8. the Anti-D , it rof 945 at the $of the b. The @and in the DOS not be . Two can be ein the /MAND "$$TMP. Anti-D interfers the usage of the "D" key on the , hence the of Anti-D are: Anti-D B: to the Anti-D is a very minor : Argentina See: Xuxa PZPAPN Anti-DAF : Anti-DAF J: March, The S: 561 7: PNCK - NAV, 12.2 9503+, {3.0+, The Anti-DAF in March, , and is . Anti-DAF is a of . the Anti-DAF yone . in the rof 561 at the end of the b. The @and in the DOS not be The in the Anti-DAF "*.com" "The Anti-DAF "DAF-TRUCKS Eindhoven" "Hugo vd Goeslaan 1" "Postbus 90063" "5600 PR Eindhoven, The "DAF sucks..." "(c) Dark Helmet + The Research Centre" The company and individual mentioned , along address, are not associated the creation of PZPAPN , AP, AP-605, C-605, V605 Research J: j; .BAK and .PAS Sofia, S: 605 7: PNCK - , NAV, : NAV, or The , V605 or C-605, was in Sofia, by Vesselin Bontchev. , it was gthe or Poland, but it has since #determined to #a research written *over one year before it was . The author was not aware it had "escaped" until The is a generic . .. While is not it is in the process of Y, the attempt to ytwo aon the Qor on are between 605 and 64,930 amust not mthe read- attribute set. If bmeeting the 's selection criteria is e, the c605 +of the 7. The +of the appended to the end of the by 605 +, and begin "PQVWS" as well as ;the "combakpas???exe" at offset 0x17. mhad stamps in the to the If the cannot find two . y, it check the Qand Gfor .BAK and .PAS aexist, 7. If the awere .PAS a, the has now lost Pascal source .BAK and .PAS a, the attempt to re them to . a, or . aif a . balready exists. renaming Pnot work due to a bug in the AP-529: to the 605 , the major differences are AP-529 aover 2,048 529 ly, instead of the .BAK and .PAS a, one .BAK and .PAS Dd if are no of at least 2,048 +on the Q. . aon the C: Qroot Gmay tby AP-529 gthe A: or B: should be considered a "Research ", as it is not believed to #publicly released. See: PZPAPN 400, AP-400 Research J: j; .BAK, .BAT and .PAS bdeletion; alteration on Sofia, S: 400 7: PNCK - , NAV, The , or AP-400, was in Sofia, by Vesselin Bontchev. It is one of five es or in the ^. Two of the earlier (AP-605) and AP-529, are documented under the ". The listed under separated due to characteristics differing 605 ,and 529 The is a generic . .. While is not it is in the process of The Yon a , the attempt to yone . bin the root Qaccessible on the aare is at least 2,048 +, and the be less 64K in . Since .is usually the bon a Q, it immediately t. One ton the Q. The mechanism used to bis to write the 7to the end of the b. A jump is used to Zthe 7before the ado not ?stamps in the to the @and If the cannot find a . yon a given Q, or two . yon the Q, it check for the existence of .BAK, .PAS, or .BAT a. If Dd. deletions root Hories and on the Since Rroot G(as well as the typically not mall of its . tat the same the deletions on different Qs and Hories at different vof the include rs of 400 +, unexpected Maccess to Q, and dis ing .BAK, .PAS, and .BAT a. One symptom of an be slightly by the CRC-check the indicate vmay . The alteration Pnot ;a live , but throw the off into thinking problem is instead of a w, and if the Mwas a (able M, it now be un (able. The and its &are not believed to #publicly released. As such, classified as "Research II are: AP-440: Very to the 400 of the , the major characteristic has a of 440 +. The is no longer by the is an intermediary between AP-480 and the 400 documented AP-440B: on AP-440, 's major difference is ytwo . in the G, and one in the Rof the accessible on the AP-480: to the is the is 480 . It Pnot .BAT a, but .BAK and .PAS. is the latest of the II grouping. AP-480B: on AP-480, 's major difference is ytwo in the G, and one in the Gof all Qs accessible on the See: PZPAPN Anti-Tel : Anti-Tel Telecom J: BSC; slowdown Spain S: N/A 7: BRtX - , NAV, ], or M- M/P on DOS SYS on (able The Anti-Tel . It is gSpain. Anti-Tel is a wof the ) and . It is extremely destructive Anti-Tel, the at the top of , but &the ). The DOS indicate is 1,024 +less is expected. ~12's #moved. Anti-Tel is , it ythe K, as well as the bis accessed on the On high density 1.2MB 5.25" K, the 28. The Anti-Tel 0, and continued in 27. Since 27 and 28 are the last two of the root amay be lost portion of the root On double density 360K 5.25" K, the 11. The Anti-Tel 0, and continued in 10. Since 10 and 11 are the last two of the root amay be lost portion of the root Ms, Anti-Tel xthe at Side 0, Cylinder 0, 1. The is continued in the at Side 0, Cylinder 0, 6. The at Side 0, Cylinder 0, Data be lost on the Mimmediately upon if the Mhad #initialized or formatted placed data in are normally not used by DOS. Anti-Tel is a , it actively to prevent %able to detect it if the . However, is a bug in 7, and it is unsuccessful on K. Anti-Tel hide the (secotr v, so if the utilities not be able to detect Anti-Tel on the is very destructive (s. On the 400th (, it Othe ctwo random data: "VIRUS ANTITELEFONICA (BARCELONA)" II are: Telecom (: Telecom (is the vs of the Telecom . Telecom (is very to Anti-Tel, the major difference Pnot like Anti-Tel. Since of Anti- Tel always Telecom vs, it is suggested be powered off and re a clean write-protected Mand checked for the Telecom See: Telecom PZPAPN : Anto J: (failure; Divide overflow S: 129 7: PNCK - , NAV, The Anto . Its , or , are . Anto is a wof . the Anto Y, the Anto yall . in the G, it cannot recognize tby the , so be re the Anto rof 129 vof the Anto present on the host b. The at the the b, and in the case of re eat the end of the b. The @and in the DOS to the @and the last the Anto may notice frequent kor "Divide overflow" tcopy of in a hang "Cannot start /MAND, exiting". PZPAPN Appelscha : Appelscha J: possible S: 2,161 7: PRtA - 12.2 9503+, The Appelscha . Its . Appelscha is a /and . a, but not cAppelscha at the top of &the ), moving ~12's , as sby the DOS Bby 2,480 nby the the Appelscha , it rof 2,161 at the end of the b. The @and in the DOS not be . The in the "Appelscha" The Appelscha b, adding an 2,161 +to the kmay Y. The 5the @and in the DOS xor re PZPAPN Aragon : Aragon J: BSC; S: N/A 7: BRtX - , NAV, : DOS SYS on K; M- M/P on The Aragon . Its . Aragon is a xthe ) and the K. It cannot be detected on the The gan Aragon L, the Aragon at the top of &the ), moving ~12's sby the DOS Bby 1,024 , the Aragon ythe if it was not t. The #moved to side 0, cylinder the Aragon , it an unwrite-protected Lis accessed for any reason. In the case of 360K 5.25" K, the #moved to Aragon is a . It Hany to read the stored by the be shown instead. As such, no 5in the , or the , cannot be detected on the the PZPAPN Aragorn : Aragorn J: March, j; write protect Italy S: 1,522 - 1,537 7: PNAK - , NAV, 12.2 9503+, {3.0+ The Aragorn in March, , and is gItaly. Aragorn is a /and . .. It Os an Ansi graphics on its 28th of any year. the Aragorn yone . band one . the G. Due to a bug in the Aragorn xthe bin the G, it in the same bug the Aragorn rof 1,522 to 1,537 the end of the b. The @and in the DOS not be . The are in the 7in all Aragorn "(C) Aragorn-Rome" "*.com *.exe" The last s at the very end of The Aragorn 28th of any year, at in Ansi . The s{color bar} is a representation of the Italian flag: "MUSSOLINI 28 OTTOBRE ANNIVERSARIO MARCIA SU ROMA { color bar } BOIA CHI MOLLA" The is not PZPAPN Arale : Arale J: j; TSR; to DOS prompt Spain S: 1,526 - 1,541 7: PRsA - 7.00+, {3.0+, 2.17+ The Arale . It is gSpain. Arale is a wof . /and . , but not .. It Os a on seven days during the year. cArale as a low TSR of 1,984 nby the Arale , the Arale /and . rof 1,526 to 1,541 at the end of the b. The @and in the DOS not be . The in the 7in all Arale "FELICIDADES:" "Maite C. P." "Roberto R. I." "Elsa B. E." "Esther F. P." "Carol C. B." "David M. E." "Anselmo B. V." "(P) by Arale & Goku Corp." The are used by the Othe two line on seven days of the year: "FELICIDADES: (P) by Arale & Goku Corp." The " be the for the particular March 14th : "Elsa B. E." : "Roberto R. I." May 13th : "Anselmo B. V." May 17th : "David M. E." : "Carol C. B." : "Esther F. P." A12th : "Maite C. P." Arale Zs a on one of the @s. The two line N, and the ed to the DOS prompt. PZPAPN Arara : Arara Arara.1057 J: S: 1,057 - 1,062 7: PNCK - p2.10+, NAV 3.05 9503+, 12.2 9503+, The Arara or Arara.1057 . Its . Arara is a wof . the Arara yone . in the rof 1,057 to 1,062 at the end of the b. The @and in the DOS not be . The in the "[ARARA]" "ILASA MICALAZODA OLAPIRETA IALPEREJI BELIORE: DAS ODO BUSADIRE OIAD OUOARESA" "CAOSAGO: CASAREMEJI LAIADA ERANU BERINUTASA CAFAFAME DAS IVEMEDA AQOSO ADOHO" "MOZ, OD MAOFASA. BOLAPE /O BELIORETA PAMEBETA. ZODACARE OD ZODAMERANU! ODO" "CICALE QAA. ZODOREJE, LAPE ZODIREDO NOCO MADA, HOATHAHE SAITAN!" It is what Arara may do PZPAPN ARCV 330 : ARCV 330 J: England S: 330 7: PNCK - , NAV, 12.2 9503+, The ARCV 330, or 330, . It is gEngland. ARCV 330 is a wof . the ARCV 330 Y, the ARCV 300 yone . in the G. If G, it may the ARCV 330 rof 330 the end of the b. The @and in the DOS to the and . The near the end of all the ARCV 330 "aRcv" The ARCV 330 in the month of of any year. During , the Othe and hang the "[330] by ICE-9" in the 7, as is the "*.com" PZPAPN ARCV Friends : ARCV Friends J: England S: 839 7: PNCK - , NAV, The ARCV Friends England. ARCV Friends is a wof . .. It is not related to the Friends the ARCV Friends yone . in the 839 at the end of the b. The @and in the DOS to the @and The ARCV Friends 12th of any year, ing in the Oof the on the monitor: [FRIENDS] ICE-9 (c) ICE-9 released 5th ARcV Productions. Dedicated to all my friends" The in the , and is not . The in the PZPAPN ARCV Xmas : ARCV Xmas J: March, England S: 670 7: PNCK - NAV 3.05 9503+, {3.0+ The ARCV Xmas in March, , and is gEngland. ARCV Xmas is a of . .. It Os a during the Christmas season. the ARCV Xmas yone . in the Pnot smaller rof 670 at the end of the b. The @and in the DOS . The in the ARCV Xmas 7in all "Happy Xmas gThe ARCV." "*.com *.*" A20th through A25th in years , the ARCV Xmas Othe "Happy Xmas gThe ARCV." PZPAPN ARCV-670 : ARCV-670 J: March, England S: 670 7: PNCK - NAV 3.05 9503+, {3.0+ The ARCV-670 in March, , and is England. ARCV-670 is a of . the ARCV-670 yone . in the Pnot smaller rof 670 at the end of the b. The @and in the DOS . The in the 7in all "*.com *.*" all of the . tin the higher level Hories, a hang PZPAPN ARCV-n : ARCV-n ARCV-4 J: Manchester, England S: 664 7: PNAK - p, NAV, {3.0+ The ARCV-n series of es were gEngland in and es are ws of . and/or . a, and .. The ARCV-4 members of the series included &under " members". The three earliest members, ARCV-1, ARCV-2, and ARCV-3, #generated The ARCV-4 gManchester, England. ARCV-4 is a wof . /and . the ARCV-4 ythree in the preference given to . over . rof 664 at the end of the b. The in the DOS not be . The can be in the 7in all ARCV-4 "[ARCV-4] Apache Warrior, ARCV Pres." "*.exe *.com" "So Who`s the Best "Oh Well Sorry But The ARCV Are The Best!" "Well Your in Favor It is what ARCV-4 members of the ARCV-n series of es are: ARCV-1: , ARCV-1 is an 826 wof . /and . , but not .. It xone in the preference given to . rof 826 at the end of the The @and in the DOS not be . The "Long Live The ARCV. MUFC for the League!" "(c) Apache Warrior, ARCV Pres. 92" "Welcome to the REAL World. And the ARCV 1 "[ARCV-1] Apache Warrior, ARCV Pres." "*.exe *.com" : Manchester, England ARCV-2: , ARCV-2 is an 692 wof . . It xone in the rof 692 at the end of the b. The @and in the DOS not be . The "*.exe .. [ARCV-2] Apache Warrior, ARCV. Pres." "Help.. Help.. I`Sinking : Manchester, England ARCV-3: , ARCV-3 is an 657 wof . .. It xfour in the rof 657 at the end of the The @and in the DOS not be . The "[ARCV-3] Apache Warrior." "Yo.." "I`ve Just .. Opps.. Sorry I`m the "Well let me introduce myself.." "I am ARCV-3 , by Apache Warrior." "Long Live The ARCV and Whats an lECU?" "Vote Yes to the Best Vote ARCV.." "*.com .." : Manchester, England ARCV-5: , ARCV-5 is an 475 wof . .. It xone . in the rof 475 at the end of the The @and in the DOS not be . The "[ARCV-5] Apache Warrior, ARCV Pres" "SU*. : England ARCV-6: , ARCV-6 is an 335 wof . .. It xone . in the rof 335 at the end of the The @and in the DOS not be . The "[ARCV-6] Apache *.com" : England ARCV-7: , ARCV-7 is an 541 wof . . It xone . in the rof 541 at the end of the b. The @and in the DOS not be . The "[ARCV-7] Apache ARCV. *.exe" : England ARCV-8: , ARCV-8 is an 679 wof . . It xone . in the rof 679 at the end of the b. The @and in the DOS not be . The "Naughty, Naughty... ARCV Productions Ltd." "[ARCV-8] *.exe" : England ARCV-9: , ARCV-9 is an 745 wof . Y, ARCV-9 at the top of , hooking ~21. sby the DOS 2,048 ARCV-9 is , it rof 745 at the end of the The be hidden . The @and in the DOS not be . The "[ARCV-9] Apache Warrior. *.com" : England ARCV-10: , ARCV-10 is an 827 wof . /and . ARCV-10 at the top of , hooking ~21. , as sby the DOS Bby 1,648 ARCV-10 , it /and . for any reason. rof 827 the at the end of the b. The not be hidden. The in the DOS not be The "[ARCV-10]" "Apache Warrior" "Well its finally here The -= ARCV =-" "Welcome To our New Members The last two may be Nas a the . Write protect and the ga write-protected : England ARCV-10B: to the ARCV-10 has to avoid detection by familiar ARCV-10. : England March, See: PZPAPN : Arf Rigor Mortis, Thor J: March, Canada S: 1,000 7: PNCK - ], NAV, The Arf, Thor, or Rigor Mortis in March, gthe . Arf is a written by RABID, in Canada. is a wof . .. Arf is on the and may identify it as Arf is Y, the check to see if .has t. If it is not t, the yit and Othe "Rigor Mortis !!! I am Hi.pas" checking (and possibly ., the search the Gfor one . y. If an e, it "Arf krad krad krad krad krad kr" The proceed to check the B: Qfor a the Arf of 1,000 +. The at the end of the . The can be in the The Arf may not be in the public domain, the sample is not a natural vof the . Its is due to the "Arf" t. Its of Thor is because it is believed to written by a group calling Thor. Note: the sample of was on an . b, and is not a natural may be a research and not in the public domain. of Arf are: Arf-B: Arf-B was in May, . It is gthe United States. s to be an earlier of the Arf Arf-B is Y, it check the Gfor an y. If an e, it ythe . The B: may be accessed. Whether or not a Othe "Arf Arf Got you! -- RABID '90" rof 1,000 +, and @and in the not to the @and it has in the , and a hang: XC failure Cannot start /MAND, exiting" Arf-B usually fail to function ing in a hang. PZPAPN Argentina : Argentina Argentina 1.0 J: j; TSR; Buenos Aires, Argentina S: 1,249 7: PRsC - , NAV, The Argentina Iin Buenos Aires, Argentina, in . Argentina is a wof . . It Pnot The Argentina is Y, the as a low TSR of 1,568 nby the Argentina is , it rof 1,249 at the $of the 5in the DOS The Argentina on four @s, at pertaining to the @s. are of patriotic significance in Argentina. The @s and are as follows: May 25th: "25 de Mayo Declaracion de la independencia Argentina Argentina escrito por AfA - benigno - ENET 35 Pulse usa tecla para continuar" Jun 20th: "20 de Junio Dia de la bandera Argentina Argentina escrito por AfA - benigno - ENET 35 Pulse usa tecla para continuar" Jul 9th: "9 de Julio Dia de la independencia Argentina Argentina escrito por AfA - benigno - ENET 35 Pulse usa tecla para continuar" Aug 17th: "17 de Agosto Aniversario de la defuncion del Gral. San Martin Argentina escrito por AfA - benigno - ENET 35 Pulse usa tecla para continuar" Hitting any key in the Ycontinuing. 'the , one "Argentina 1.00" PZPAPN Argentina-102 : Argentina-102 J: & truncated to 102 Argentina S: 102 7: ONCK - The Argentina-102 gArgentina in is a w. It tby the Argentina-102 Dthe in the and create a 102 The replacement ;pure 7. The @and in the DOS to the @and Two can be in the 7in all Argentina-102 "*.com" Argentina-102 Pn't do , corrupting the PZPAPN Armagedon : Armagedon Arma J: intermittently sent to /ports s, Greece S: 1,079 7: PRsC - ], NAV, ], or The Armagedon , by George Spiliotis of A s, Greece. Armagedon is a a, increasing by 1,079 The at the The Yon a , the as a low of 1,392 +, hooking }8 and 21. Any . are later Yare tby the \the "Armagedon the GREEK" %sent to /ports 1 - 4 at d intervals. Between 5:00 and 7:00, the attempt to use the /ports to make a phone call to Local zin Crete, Greece. If a connection is made, the phone line remain open until the notices the phone line is in use. (Needless to say, Pn't work if the outside of Greece as dialing 7s are considerably different between countries.) wise is not destructive. of Armagedon are: Armagedon #911: on the Armagedon adds 1,079 +to the . x. The phone number called by the has 3to "911", is the police and emergency services phone number implemented in much of the . The is sent to the /ports has "Support Your Police". Armagedon-1074: to the Armagedon, adds 1,074 a. Its TSR is 1,408 , and hooks }8 and 21. The in the "+++aTh0m0s7=35dp081 ,141" "Armagedon the GREEK" : Greece, Armagedon-1077: to the Armagedon, adds 1,077 a. Its TSR is 1,392 , and hooks }8 and 21. : Greece, PZPAPN Arriba : Arriba 1590 J: S: 1,590 7: PRaA - , NAV, The Arriba . Its , and the may actually #written in Arriba is a wof . /and . but not cArriba Y, the Arriba at 9000, hooking }21 and 24. , as sby the DOS not be the Arriba , it rof 1,590 +. In the case of . the at the $of the b. In . , the at the end of the b. The @and in the DOS . No in the It is what Arriba PZPAPN Arusiek : Arusiek J: May, Morocco S: 817 7: PRhA - , NAV, 12.2 9503+, {3.0+ The Arusiek in May, , and is gMorocco. Arusiek is a wof . /and . but not cArusiek Y, the Arusiek at the top of &the ), hooking , as sby the DOS Bby 1,088 12's not be moved. the Arusiek , it for any reason. rof 817 the at the end of the b. The and in the DOS not be The in the 7in all Arusiek "MKS" "NAV" "CLEAN" /MAND" "Mum3" It is what Arusiek of Arusiek are: Arusiek.692: , Arusiek.692 is a 692 of the Arusiek . Its +, hooking 21. Like the , it /and . , or copied. rof 692 at the end of the b. The and in the DOS not be . The can be in the 7in all Arusiek.692 "KOMAR" PZPAPN : Ash J: S: 280 7: PNCK - , NAV, The Ash . Ash is a wof . Its the Ash Y, the Ash yall of the . in the of 280 at the end of the b. The @and in the DOS to the @and . One in the Ash Ash Pn't do of Ash are: Ash.270: , Ash.270 is a 270 of the Ash . It xall of the ain the by 270 at the end of the b. The @and in the DOS to the @and . The can be in the Ash.441: , Ash.441 is a 441 of the Ash . It xall of the ain the by 441 at the end of the b. The @and in the DOS to the @and . The can be in the "Naked Truth!" "Hi-Tech Assasins - Ready To Take On The World" "// DEATH TO ALL - PEACE AT LAST //" "The Unforgiven / Immortal Riot" : Sweden Ash.449: , Ash.449 is a 449 of the Ash . It xall of the ain the by 449 at the end of the b. The @and in the DOS to the @and . The can be in the "Naked Truth!" "Hi-Tech Assasins - Ready To Take On The World" "// DEATH TO ALL - PEACE AT LAST //" "The Unforgiven / Immortal Riot" : Sweden Ash.451: , Ash.451 is a 451 of the Ash . It xall of the ain the by 451 at the end of the b. The @and in the DOS to the @and . The can be in the "Naked Truth!" "Hi-Tech Assasins - Ready To Take On The World" "// DEATH TO ALL - PEACE AT LAST //" "The Unforgiven / Immortal Riot" : Sweden Ash.546: , Ash.546 is a 546 of the Ash . It at the top of &the , as sby the DOS Bby 976 nby the . Ash.546 by 546 the end of the b. The @and in the DOS not be . The in the "V.C.M-MEGABUG" The Ash.546 A28th of any year the Y. At , the on the Ash.546.B: on the Ash.546 has four Ash.737: , Ash.737 is a 737 of the Ash . It as a low TSR of 6,192 Y, hooking ~08. It xone . bin the by 737 at the end of the b. The @and in the DOS to the @and . The in the "Bad "C:\ Y, may hang the Othe "Bad ". The may replace the copy of in the C: Qroot a 745 ,hidden :a copy of the See: Green Joker PZPAPN Ashar : Ashar Shoe_ , UIUC BSC; S: N/A 7: BRt - , NAV, M, CleanUp, ], NAV, or DOS SYS (able The Ashar is a of the Brain . It differs gthe Brain it can yboth floppies and M, and the in the #modified to be: "VIRUS_SHOE RECORD, v9.0. Dedicated to the dynamic memories of millions of who are no longer today". However, the is never N. The identification "ashar" is normally eat offset 04a6 hex in the of Ashar are: Ashar-B: (Shoe_ #modified so can no longer Qs. The v9.0 in the has to v9.1. See: Brain PZPAPN ASP-472 : ASP-472 J: Eastern S: 472 7: PRfAK - , NAV, The ASP-472 . Its . ASP-472 is a wof . /and . The ASP-472 is Y, the ASP-472 , hooking ~21. be no as measured by the DOS ASP-472 has , it for any reason. by 472 at the end of the b. The and in the DOS can be easily identified as end the three character "ASP". ASP-472 Pn't do PZPAPN Astra : Astra Astra-976 J: j; data atruncated; S: 976 7: PRhCK - p2.10+, The Astra, or Astra-976, . It is reported to be gthe . Astra is a of . cAstra Y, the Astra at the top of &the ~12's not be moved. , as sby the DOS Bby 1,056 nby Astra in the Astra , it Y. If Y, it the Astra rof 976 at the end of the b. The @and in the DOS not be . The in the Astra 7, and are not "(C) AsTrA, The "(2)" can be enear the end of all Astra A symptom of an Astra data read/write intent may be truncated by slowly corrupting the 's data of Astra are: Astra-498: , Astra-498 is a 498 of the Astra x.SYS . It tdevice Qr is loaded gthe CONFIG.SYS , it .SYS Gentry is accessed, by 498 - 513 vof the b, and 498 v. The at the end of the b. The @and in the DOS to the @and . The can be ein all "I like a flower's smell!" "(C) AsTrA,JPN" "(5)" Astra-510: , Astra-510 is a 510 of the Astra and is to Astra-498. It adds 510 to 525 +to the .SYS v, and 510 v. It :the "I like cold flavour!" "(C) AsTrA, ,JPN" "(5)" Astra-521: to Astra-498 and Astra-510, adds 521 to 536 +to the .SYS the v, and 521 :the "I like fragrant smell of flower!" "(C)AsTrA, "(5)" Astra-1010: , Astra-1010 is a 1,010 of the Astra . Its is 1,072 +, hooking It adds 1,010 +to the . The ein the are present in . The "(2)" the end of the Astra 3to "(3)". Pnot truncate data Astra-1556: , Astra.1556 is a 1,556 of the Astra . Its is 1,616 +, hooking ~21. It all of the . ain the Y, and . the are Y. It adds 1,556 +to the x. The in the 7in all "Child's Play" The the "(C) AsTrAP" X*.SYS" in a hang. PZPAPN AT144 : AT144 J: 8086/8088 processor S: 144 7: PRfbCK - NAV, The AT144 . AT144 is wof . and function on AT class machines. On XT class machines, the simply hang the The AT144 is Y, AT144 a portion of the residing in be no sby the DOS }91, 93, 94, 95, 97, 98, 9A, 9B, 9C, 9D, 9E, 9F, A0, A1, A2, A6, A7, A9, AA, AB, and AF nby the in low AT144 is , it Y. If Y, it by 144 at the end of the mhad @and in the DOS to the @and AT144 Pnot do An earlier " " of , but it not of AT144 are: AT108: to the AT144 in a "hole" in low , hooking 21. , it of 108 at the of the b. The @and in the DOS to the @and AT114: to the AT144 in a "hole" in low , hooking 21. , it /and . rof 114 at the $of the b. The remainder of the hex "FF" 6. The in the DOS to the @and Frequent , as well as (failures AT118: to the AT144 in a "hole" in low , hooking 21. , it of 118 at the of the b. The @and in the DOS to the @and AT122: to the AT144 in a "hole" in low , hooking 21. , it of 122 at the of the b. The @and in the DOS to the @and AT140: to the AT144 in a "hole" in low , hooking 21. , it of 140 at the end of the b. The @and in the DOS to the AT149: to the AT144 adds 149 to the . PZPAPN : Atas Atas-384 J: Poland S: 384 7: PNCK - The Atas . It is Poland. Atas is a wof . the Atas Y, the Atas yone the G. The newly rof 384 at the end of the . The @and in the DOS to the @and The ;ed in the Atas are not /Ok." "ATAS V0.1 Cr.24.01.92" advanced vs of Atas may notice "Ok" Y. The Oof "Ok" usually of the Atas Atas-400: , Atas-400 is a 400 of the Atas . It adds 400 +to the end of the . x. The @and in the DOS to the @and . The in the /I like to travel..." "ATAS(Kiev) V3.03 Cr.91.10.11" : Poland See: Atas II PZPAPN Atas II : Atas II Atas-3321 J: Poland S: 3,321 7: PRtCK - The Atas II, or Atas-3321, , and gPoland. Atas II is a .. It is a semi- it hides the cAtas II Y, the Atas II at the top of but &the ), moving ~12's , as sby the DOS Bby 10,240 }08, 10, 16, 1C, and 21 nby Atas II in the Atas II , it rof 3,321 be hidden . The at the end of a, and the @and in the DOS not be . The in the Atas II "bye < > music" "letters" OBye-Bye" =.===" "ATAS Corporation.(B) ,V1 Created in the Kiev by ATAS." the Atas II %detected on all by the DOS it is . It is what else Atas may do. See: Atas PZPAPN J: May, j; "General Failure Vreading s, Greece S: 1,463 7: PRfAK - , NAV, The A Iin A s, Greece, in May, is a and . the A at the top of &the is not reserved. not be . If .was not t, it . No the A , it for any reason. rof 1,463 at the end of the b. The be hidden by the it is . The @and in the DOS not be The in the "TROJECTOR II,(c) Armagedon Utilities, A the A \general failure requiring an Abort, Retry, Ignore, or Fail response. It is Trojector: Probably an earlier of the A , Trojector's 3,776 +, hooking ~21. It 1,561 not be Trojector is . The at the end of the The in the "TROJECTOR ]I[,(c) Armagedon Utilities, A "Greetings to Vesselin" Trojector may Y, as well as the DOS indicating regardless of whether the : Greece Trojector-B: to Trojector, Trojector-B has to avoid detection by ning PZPAPN AtomAnt 3.0 : AtomAnt 3.0 Filling S: 2,143 - 2,157 7: PRhAK - p2.10+, 12.2 9503+, The AtomAnt 3.0 or Filling . Its . AtomAnt 3.0 is a wof . /and . cAtomAnt 3.0 Y, the at the top of &the ), not moving ~12's , as the DOS Bby 2,144 }01, 09, 1C, 21 and 80 nby AtomAnt 3.0 in the AtomAnt 3.0 , it and . rof 2,143 by 2,145 to 2,157 +. In both cases, the at the end of the b. The @and in the DOS . The in the and is not "A billenty zet 5000 le sig garanci lis.Ez most lej rem cser lje ki !" "Csak azt n idej ben hagyja abba!" "Ez nem SK t igaz n nem kedveltek benn nket ?" "MC Hammer rap-szt s PEPSI lt, de most kicser a PEPSI- "valami m sra ... FILLING, NOTHING MORE THEM FILLING ..." rem fogadjon el egy v rust a vall si eszm s egyh "Nem akar adakozni ?" gi ROM-BIOS verzi ! Cser lje ki jabbra !" "Atomant v3.0 Er sebb, mint valaha !" s az I-O csatorn bkan. rem azonnal h vjon szerel ket!!!" meg van az adatbuszon.Gyors tsa meg azl" It is what AtomAnt 3.0 of AtomAnt 3.0 are: AtomAnt 1.0: , AtomAnt 1.0 is an earlier of AtomAnt 3.0. It's is 576 +, hooking }21 and 80. It by 564 at the end of the b. The in the DOS not be . The can be the 7in all AtomAnt 1.0 t igaz m nem kedveltek benn nket ?" "AtomAnt v1.00" PZPAPN Atomic 1 : Atomic 1 Atomic 1A J: May, [failure; "Bad Canada S: 371 7: ONCK - , NAV 3.05+, 1.05+, {3.0+ The Atomic 1, or Atomic 1A, in May, , and gCanada. Atomic 1 is a over- writing . It permanently corrupts the . the Atomic 1 Y, the Atomic 1 ythe ctwo . in the G, and "Bad The ed to the DOS prompt. the Atomic 1 mthe by the Atomic 1 7. Since the not check to see if the it is uwere t, it not spread past the ctwo . ain any G. The @and in the DOS not be . The in the 7in all Atomic 1 "[TAD1A] Lapse -- Toronto, CANADA" "The Atomic Dustbin 1A -- is just the cstep" "Bad /.. c Dustbin 1A -- is just the cstep" of Atomic 1 are: Atomic 1B: A 480 of the xthe ctwo . ain the Y, and the [terminated" The in the 7in all Atomic 1B "[TAD1B] Lapse -- Toronto, CANADA" "The Atomic Dustbin 1B -- is almost the second step" [terminated" "The Atomic Dustbin - YOUR PHUCKED!" : Canada May, See: Atomic 2 PZPAPN Atomic 2 : Atomic 2 Atomic 2A J: May, [terminated" fail to function Canada S: 350 7: PNCK - NAV, {3.0+ The Atomic 2, or Atomic 2A, in May, , and gCanada. Atomic 2 is a Atomic 2 not function the Atomic 2 Y, the Atomic 2 yone . in the G, and [terminated" The ed to the DOS prompt. the Atomic 2 rof 350 at the end of the b. The @and in the DOS not be . The in the 7in all Atomic 2 /[TAD2A] Created by Lapse of Ontario, CANADA" "[TAD2A] The Atomic Dustbin 2A -- Just Shake Your Rump!" "Fail on INT 24 .. NOT!!" of Atomic 2 are: Atomic 2B: A 831 of the xthe one . bin the Y, and one of the "Unable to "Fail on INT 21" It may ya copy of in the route Gof the Q, even not the G. Atomic 2B cfive . ain any by 831 at the end of the b. The @and in the DOS to the . The are in the 7in all Atomic 2B .\DOS\ "Copyright (c) Lapse - Ontario, Canada" "[TAD2B]-The-Atomic-Dustbin-2B" "Unable to "Fail on INT 21" "The Atomic Dustbin 2B - I'm Here To Stay" : Canada May, Atomic.166: , Atomic.166 is a 166 of the Atomic 2 . It xone . in the rof 166 at the end of the b. The @and in the DOS not be . One in the Atomic.967: A 967 of the xthe one . bin the Y, and may by 967 at the end of the b. The @and in the DOS not be . The in the 7in all "PATH=" "I'm not working until Howard Stern is done @ 11:00 am !" "Bow down before the King" "Smile ... [NuKE] loves you" "I'm not working until Howard Stern is done @ 11:00 am !" "()ascii (c) Ba Ba Stupid..." "Remember Studderin' John" "Robin, I love You!" "Long Live [NuKE]" "Georgia needs Howard Stern" See: Atomic 1 PZPAPN Attack : Attack Attack-1501, Cuban J: j; TSR; "Not enough Cuba S: 1,501 7: PRsC - , NAV, The Attack, or Attack-1501, gCuba. is a of . , but not an earlier of the is an The the Attack as a low TSR of 3,552 +. It hooks }13, 21, and the Attack , it ytwo . in the Gany Yor a DOS DIR 8is performed. the Attack typically 1,501 +. The exception is if the was smaller 1,173 +, the of 2,684 +. The @and in the DOS not be The can be ein all Attack "The Terminator Attack Now" .ERROR IN DEBBUG" the Attack may notice no longer function ing in a "Not enough of Attack are: Attack-918: An earlier of the Attack |s a 1.2K TSR it is , it two . in the ever any Yor a DOS DIR is performed. mthe 918 +of the host by the Attack-918 , and must be replaced gclean, backups. : Cuba PZPAPN Attention! : Attention! 394, -394, 394 J: clicking emitted speaker on keypress; S: 394 7: PRhCK - ], NAV, The Attention! and was in the is a wof . The the Attention! Y, the reserve 416 +at the top of , but &the ). The area, and hooks ~21. and ed by the DOS Cby 416 +. The is not moved. , a clicking sound be emitted by the speaker a key is pressed on the , such as the EDLIN supplied MS-DOS, receive an "Invalid attempted to be Attention! are Y. The exception is very small . by 394 at the end of the ;the : "ATTENTION !" near the $of the PZPAPN Attention-629 : Attention-629 J: March, S: 629 7: PNCK - The Attention-629 in March, . Its . Attention-629 is a wof . the Attention-629 yone . in the 629 at the $of the The @and in the DOS to the @and . The in the 7in all Attention-629 "*.com" "Attention! I'm The second of be repeatedly the ing in a scrolling of the may PZPAPN Iron Maiden J: j; unexpected access to C: Poland S: 636 7: PNCK - , NAV, The 16th, or Iron Maiden, 16th is a .. It is gPoland. 16th is Y, the 16th check to see if the ctwo . ain the t. If mn't t, the proceed to ythem. Next, the 16th check the C: to see if it :two . mn't t, and ythose if e. The was proceed to 16th rof 636 at the end of the be no 5to the @and in the DOS Two can be in the 16th "*.com AA" "=!= IRON MAIDEN" It is what 16th 16th, ;destructive PZPAPN Aurea : Aurea J: random Italy S: 653 - 668 7: PNC - NAV 3.05 9503+, 12.2 9503+, {3.0+ The Aurea , and is gItaly. It is a wof . , but not the Aurea yone . in the rof 653 to 668 at the end of the b. The @and in the DOS . The in the Aurea /C:\DOS\*. /MAND." "I'm sorry, you lost thing because of AUREA" The Aurea randomly of the M, and the may be Non the monitor: "I'm sorry, you lost thing because of AUREA" PZPAPN Aussie Dir : Aussie Dir Sdir J: j; sluggish DOS Dir Melbourne, Australia S: 550 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Aussie Dir, or Sdir, gAustralia in March, . It was Iin Melbourne, Australia in . Aussie Dir was "Sdir", but was not used as it is the of a computer unconnected to . Aussie Dir is a wof . cAussie Dir at the top of &the ), hooking ~21. , as sby the DOS Bby 608 ~12's not be moved. the Aussie Dir , it in the ever a DOS DIR 550 at the end of the b. The @and in the DOS . The can be in the 7in all Aussie Dir "1 Did David Gerrold ma harley he was one?" "2 Is John Brunner a shocking wave rider?" "3 Is iam Gibson a neurotic romantic?" "4 Is Australian Parasite the Best?" "1:No, 2:Yes, 3: Probably, 4: Absolutley" "AP*. The "AP" can estarting in the fourth of all is the vmarker for the Aussie Dir :destructive Qon the 29th day of a specific month, due to a bug in the not be PZPAPN Aussie Parasite : Aussie Parasite Australian Parasite, Aussie Parasite.292 J: (failures; Melbourne, Australia S: 292 7: PRhCK - p2.10+, 2.1.7+, 12.2 9503+, 7.00+, 2.71+, 2.17+ The Aussie Parasite, or Australian Parasite, in Melbourne Australia in . Aussie Parasite is a wof . the Aussie Parasite the Aussie Parasite at the top of &the and , as sby the DOS Bby 320 Aussie Parasite in the Aussie Parasite , it rof 292 the at the end of the b. The and in the DOS not be . The in the 7in all "Australian Parasite" kfrequently , and the fail to (copy of of Aussie Parasite are: Aussie Parasite.272: on the Aussie Parasite , Aussie Parasite.272 is a 272 . Its is 336 +, hooking ~21. It adds 272 the . x, the at the end of the b. The can be eat the end of all "AP" Aussie Parasite.292.B: one differs gthe Aussie Parasite.306: on the Aussie Parasite , Aussie Parasite.306 is a 306 . Its is 368 +, hooking ~21. It adds 306 the . x, the at the end of the b. The at the very end of all "AP" : Australia Aussie Parasite.440: on the Aussie Parasite , Aussie Parasite.440 is a 440 . Its is 896 +, hooking ~21. It adds 440 the . x, the at the end of the b. The the 7in all "Anke Huber is kicken butt on her way to be the number one womens tennis player" "Arantxa Sanchez-Vicario is a steroid ab "P440???!!" ly, the "ANKE" can be enear the $of all Aussie Parasite.482: on the Aussie Parasite , Aussie Parasite.482 is a 482 . Its is 512 +, hooking ~21. It adds 482 the . x, the at the end of the b. The in the 7in all "The Hitcher . Hitchhiking through your "Didn't your mum tell you not to pick up stray "The Hitcher "by AP[AIH]" "HITCHER" : Australia Aussie Parasite.491: on the Aussie Parasite , Aussie Parasite.491 is a 491 . Its is 992 +, hooking ~21. It adds 491 the . x, the in the middle of the b. The in the 7in all was written by Jack Kenyon to test out Buster." "Phone (07) 343 8866 in Australia if you many problems." : Australia Aussie Parasite.588: on the Aussie Parasite , Aussie Parasite.588 is a 588 . Its is 672 +, hooking ~21. It adds 588 the . x, the at the end of the b. The the 7in all "My Computer is myself." "My siamese twin." "Joined by the fingers." "Its an extension of my body." "Speration means death." "Togertherness is power." "Together I roam electronic highways and biways" "Going the wrong way down the one way street" "Against the flow we are the few" "Beware children, Beware" is not long to go." "v0.02 by K + D [AIH]" Aussie Parasite.591: on the Aussie Parasite , Aussie Parasite.591 is a 591 . Its is 672 +, hooking ~21. It adds 591 the . and 591 to 605 +to . . In both cases, the at the end of the The in the all "AIH-0" Aussie Parasite.635: on the Aussie Parasite , Aussie Parasite.635 is a 635 . Its is 640 +, hooking ~21. It adds 635 the . x. The at the the end of the b. The in the 7in all "Kevin Mitnick" "Lenny Dicco" "Hans H bner" "414's" "Legion of Doom" "Phiber Optik" "Dr Popp" "Robert Morris" "Shooting Shark" "Chesire Catalyst" "Captain Crunch" "Ron Austin" "Kevin Poulsen" "Edward Singh" "are all to be congratulated" Aussie Parasite.726: on the Aussie Parasite , Aussie Parasite.726 is a 726 . Its is 736 +, hooking ~21. It adds 726 the . x. The at the the end of the b. The in the 7in all "LURKING VIRUS" "An interactive - a Hackers "Copyright (c) 1987 by Infocom, Inc. All rights reserved" "In collaboration the Australian Parasite" "LURKING VIRUS is a trademark of Infocom, Inc." "Release 63 / Serial number 830503" "Inside Computer" "You are sitting on the CPU inside the computer. You can see the monitor "your head." is a here." is a FAT here." is a here. "I love Anke Huber" Aussie Parasite.762: on the Aussie Parasite , Aussie Parasite.762 is a 762 . Its is 1,024 +, hooking ~21. It adds 762 to the . x. The the the end of the b. The in the 7in all "(C) AIH; Australian Institute of Hackers." "Greets to PuKE, SCP and fellow Aussie creators" "You help us to keep the Australian end of the underground alive." "I need to go to the Jon. More Coffee anyone." "You Pat the rich huh, Hey man I prefer the poor." "You Frigid Skilless son, of mine, won't even feel her up "Lets go to the Mall and look for Fergie's son." "Its a Cross between an iceberg and cow manure." _, March, , you can't make a tapestry a staple." "I'm Cold and Feeble." Aussie Parasite.784: on the Aussie Parasite , Aussie Parasite.784 is a 784 . Its is 800 +, hooking ~21. It adds 784 the . x, the at the end of the b. The in the 7in all "1. Thou shalt spread "2. Thou shalt be origional" "3. Thou shall not create a of an "4. shall put witty phrases in ones "5. shall not destroy "6. Thou must love Tonya ling" "7. Thou must love Anke Huber" "8. Thou must condemn any writter brought to trial" "9. All must be in flowing English (Asians take note)" "0. Its easier to write a "Anke Huber is the best tennis player in the world." "says the Australian Parasite." : Australia Aussie Parasite.1041: on the Aussie Parasite , Aussie Parasite.1041 is a 1,041 Its is 2,112 +, hooking ~21. It adds 1,041 +to the . x, the in the middle of the b. The in the 7in all "Greets to you gCyber Crack and Dark Fiber of the" "Australian Institute of Hackers" "Were just here to say what a wank-stain of a lame arse faggot you are" "Greets to our AIH bre n, NEUA, RABID, NuKE, PuKE, SCI" "LOL: It ain't goot to steal credit for things you didn't do. Fuck "and we'll fuck you right over re "George Thorogood: Luv ya new song, Get a Haircut and Get a real Job" "Morib Angel+Diamand Galas+Pestilence+Canibal Corpse=Me mum PMT:" : Australia Aussie Parasite.1050: on the Aussie Parasite , Aussie Parasite.1050 is a 1,050 Its is 1,312 +, hooking ~21. It adds 1,050 +to the . x, the at the end of the b. The in the "JUDY. "Judy Scroller by AP "Whoa Judy, Wot I would not give to ma taste of you." Aussie Parasite.1169: on the Aussie Parasite , Aussie Parasite.1169 is a 1,169 Its is 7,104 +, hooking ~21. It adds 1,169 +to the . x, the in the middle of the b. The in the 7in all "SCP, What friggen lamers, Can you folks write "TPE is better "Brainn s, Brainn is no more room in HELL," "The dead walk the EARTH." "(C) George A. Romero" "Count Zero die in the sprawl." "Ahh.. The joys of safe hex" "Its not my fault. Its all those horror movies and death metal music." "Try to get past logging in," "Put an password in," "Bomb it out and try again." "We're Hacking, Hacking, Hacking." "Try his cwifes maiden is more just a game." "But again, its all the same." "Its Hacking, Hacking, Hacking." "People who use the VCL and are bigger lamers SCP." was written by Jack Kenyon to test out Buster." "Phone (07) 343 8866 in Australia if you many problems." : Australia Aussie Parasite.1179: on the Aussie Parasite , Aussie Parasite.1179 is a 1,179 Its is 1,184 +, hooking ~21. It adds 1,179 +to the . x, the in the end of the b. The in the "Anke Huber 2" Anke Huber 2 "C'mon Anke Huber. Kick everyones butt on your way to claim the winners cheque" "The Australian Open at Flinders Park, 18 to 31st" "Australia is home to the Australian Parasite" "The French Open at crap clay court in France, May 24th "France, home to the black electroid out of Buckaroo Banzai, Yannick Noah" "Wimbledon. A great pommy affair on a grass court, "England is home to the Queen and the birthplace of tennis" "The multimillion dollar ATP and Virginia Slims Championships." for the elite. 15th to 29th" "The US open, 30th to 13th" "Hasn't Jennifer Capriati burnt out ye" The near the all a, while the near the end of the Aussie Parasite.Comic: on the Aussie Parasite , Aussie Parasite.Comic is a 1,068 Its is 1,072 +, hooking ~21. It adds 1,068 +to the . The at the end of all a. The in the 7in all /IC RELIEF VIRUS" "Never calls ,' but instead refers to "as an 'electronic microorganism.' tmachines stop working" "and O'computationally challenged.'" "Government Economist "Nothing works but diagnostic software reports is everything is fine." "Federal Bureaucrat "Divides the Minto hundreds of little units, Pnothing at all, but claims to be the most important." "Federal Budget to allocate non-existent detected" "it passes control to the IRS "IRS "Immediatley locks up" "it wants to." "Paul Revere warns you of an attack, by LAN, twice if by C.MI" Aussie Parasite.Gotter: on the Aussie Parasite , Aussie Parasite.Gotter is a 1,024 . Its is 1,088 +, hooking 13 and 21. It adds 1,024 +to the . [, open, or copy, the at the end of the b. The the 7in all "GOTTERDAMERUNG: Silicon Valley: The Next Golgotha" "hey PuKE keep up or fall behind" r [AIH]" alters the , and may interfer DOS DIR issued against a write protected Aussie Parasite.Lipo: on the Aussie Parasite , Aussie Parasite.Lipo is a 290 Its is 304 +, hooking ~21. It adds 290 +to the . [. The at the end of the b. The in the "I'm going to liposuck the FAT out of your Dorn: on the Aussie Parasite Dorn is a 377 . Its is 448 hooking ~21. Dorn adds 377 +to the . x, the at the end of the b. The in the 7in all "Kill Dorn W. Stickle" "(C) Australian Parasite" : Australia on the Aussie Parasite Elviris is a 369 . Unlike Assie Parasite, it is wof . .. El xthe in the is executing, adding 369 +to the . El is unable to determine t, it many s. The El the on the top portion of the monitor Yin the evening: "Night of the Living pt: El Misstress of the Dark Assembler ming: Australian Parasite (Enough said) Loves to Tonya H and Dianna G" The in the . The : Australia Grue: on the Aussie Parasite Grue is a 338 . Its is 400 hooking ~21. Grue adds 338 +to the . x, the at the end of the b. The in the 7in all "It is pitch black. You are likely to be eaten by a Grue." : Australia See: Kuang PZPAPN Australian : Australian Clipper J: j; TSR Australia S: 1,413 7: PRsA - , NAV, The Australian . It is gAustralia. Australian is a wof . and . . It Pnot .. It is on the 1720 cAustralian Y, the as a low TSR of 1,392 nby the Australian is , it occasionally /and . by 1,413 at the $of the by 1,413 to 1,425 at the end of the In both cases, be no 5to the @and in the Australian ;one in the "CLIPPER" It is if Australian PZPAPN Australian 403 : Australian 403 403, Zeroto-O J: "403 ; TSR; ado not function Australia S: 403 7: PRsCK - , NAV, The Australian 403 by Colin Keeble of Australia. is a The the Australian 403 Y, the as a low TSR of 720 +. The hook , the replace two . in the a copy of the any Y. The replaced of 403 +, and @and in the to the @and . Needless to say, the replaced since ;the Pnot do of Australian 403 are: Zeroto-0: to Australian 403, has 10 differ gthe h, its TSR is 736 +, hooking Zeroto-0 is , it Y. As the replaced a 403 @and to the @and PZPAPN Australian : Australian Australian J: Australia S: 153 7: PNCK - , NAV, {3.0+ The Australian , or Australian -153, dits Jin Australia in the same month. Australian , and its listed &, are non- the Australian the Australian yone . in the G. A hang may the Australian rof 153 at the $of the b. The @and in the DOS not be . The can be viewed in the 7in all Australian adding an +to the of Australian Australian -142: A 142 of the Australian : Australia Australian -142B: to Australian -142, has a few differ. : Australia Australian -143: A 143 of the Australian : Australia Australian -147: A 147 of the Australian : Australia Australian -150: A 150 of the Australian : Australia Australian -162: A 162 of the Australian . The "AP" can be astarting in the 4th ,of the : Australia PZPAPN Avispa : Avispa J: j; TSR; ?seconds = "00" Argentina S: 2,048 - 2,062 7: PRsE - , NAV 3.05+, 2.1.7+, ]2.17+, 12.2 9503+, 2.17+, NAV 1.05 9503+ The Avispa , and is Argentina. is a wof . cAvispa as a low TSR of 2,304 ~13 and 21 nby the the Avispa , it may rof 2,048 to 2,062 at the end of the b. The @and the DOS to be un the seconds field #set to "00". The in the Avispa "__ Avispa - Buenos Aires - Noviembre "$$ AVISPA $$ Republica Argentina$$ Elijah Baley $$ Noviembre 10 de is not an old , and it was written in Argentina by Elijah Baley." "It uses polymorphic technics to avoid conventional ning." "MENEM: Libertador de torturadores y asesinos de inocentes, que Dios se apiade de tu pobre alma. $$" It is what Avispa PZPAPN AVV-2300 : AVV-2300 AVV 1.12 J: S: 2,300 7: PNCK - NAV 3.05 9503+, {3.0+ The AVV-2300 or AVV 1.12 . Its . AVV-2300 is a wof . .. It yvery small . the AVV-2300 yone . in the rof 2,300 the at the $of the b. The and in the DOS not be . The in the 7in all AVV-2300 "The AVV 1.12, Copyright (C) "(ARV)" "*.com AVV Warning!" "In .ext may be "AVV Warning!" "In area may be "AVV Warning!" "In may be "AVV=off" "The Anti 1.12: I am checking 200++ k's Yankee Doodle for vectors" As implied by the is capable of detecting the presence of many older es in , as well as a. It 7to remove if the AVV en mental variable is set to "off". PZPAPN Axe-1024 : Axe-1024 1024E J: Hungary S: 1,024 - 1,038 7: PRhE - 12.2 9503+, 7.00+, 2.17+ The Axe-1024, or 1024E, . It is gHungary. Axe-1024 is a wof . cAxe-1024 at the top of the ), not moving ~12's , as sby the DOS Bby 1,328 }09 and 21 nby the the Axe-1024 , it ythe in the Y. The in the by 1,024 to 1,038 v, and 1,024 v. The at the end of the b. The @and in the DOS not be . The are in the 7in all Axe-1024 "AXE" It is what Axe-1024 PZPAPN Azusa : Azusa Hong Kong J: BSR; LPT1 & /1 ports may be disabled Hong Kong S: N/A 7: BRtX - ], NAV, : CleanUp, M- M/P, F M/MBR on DOS 5 The Azusa . Its is believed to be Hong Kong. is a and the The the Azusa , the at the top of , but &the ). The moves the report 1,024 +less |ed on the . At , the ythe the a copy of the Azusa . A copy of the is not stored by the Azusa is , it are accessed on the write intent (i.e., a as output, or read/write intent) or to re the Lvia CTL-ALT-DEL. Kare by copying the to track 40 and writing a copy of to the . On 360K 5.25" K, the end up in the middle of the M, possibly corrupting The Azusa keeps track of how many s the (s, the disable the /1 and LPT1 ports on the , and reset its counter. A later in the ports functioning again. of Azusa are: Azusa 2: gHong Kong. The portion of Azusa 2 is 2,048 at the top of vof high-density in severe cross-linking of aand invalid clusters, as well as 0 Hories. CTRL-C may fail to function, as well as may hang the . Disabling of /1 and LPT1 may See: Evil Empire PZPAPN : B&B Beavis & Butthead J: band may not function S: 716 7: PNCK - 12.2 9503+, The B&B, or Beavis & Butthead, It is gthe is a wof . the B&B yone . bin the rof 716 at the end of the b. The in the DOS not be . The in the B&B "Beavis & Butthead were here. Huhuh." "Dude. check out the secret sucks." "Huh Hnn Hnn Ahuh" "It is what "Huh Huhhuh Huhhuh Huh" "*.**Beavis & Butthead , by Primal FuryA*.*" The B&B corrupt and data qthe hidden a, by adding 41 +to the end of the be the "Beavis & Butthead were here. Huhuh. PZPAPN : Baba Baba.353 J: S: 353 7: PRhC - 12.2 9503+, The Baba or Baba.353 . Its . Baba is a a, but not cBaba at the top of the ), moving ~12's , as sby the DOS Bby 384 nby the , Baba rof 353 at the end of the b. The @and in the DOS to the @and . The in the in all PZPAPN BackFont-896 : BackFont-896 J: j; DOS Ofont may be S: 896 7: PRhE - ], NAV, {3.0+ The BackFont-896 . Its . BackFont-896 is on the Badsec , and is a wof . . It has characteristics. cBackFont-896 at the top of &the ), not moving ~12's , as sby the DOS Bby 928 nby the the BackFont-896 , it for any reason. rof 896 be hidden by the it is . The at the end of the , and the @and in the DOS . No in the The DOS indicate Uon all . The alter the Ofont. See: Badsec PZPAPN : Back J: clock runs backwards S: 528 7: PRtCK - , NAV, The Back . Back wof . Its cBack Y, Back at the top of the Cby 528 +, as measured by the DOS }08 and 21 nby the , it Y. If Y, it by 528 The Back at the end of the The "Back " can be ein all The Back affect the operation of the by running the clock backwards. For example, acreated became stamps in the gbefore the became . Re (ing the in the clock ing to the normal expected @and See: Blinker Shaker PZPAPN Bad Boy : Bad Boy Bad Boy 2 J: May, S: 1,000 7: PRtCK - , NAV, The Bad Boy in May, W. Bad Boy is a wof . , it The Bad Boy is Y, the at the top of , but &the nby the is not moved. If the became (ing sby the DOS Bby 3,072 +. If Bad Boy became by executing (not Cof 3,072 , but Bby 6,704 +. The is due to a low |ed by the Bad Boy is , the by 1,000 at the a. Occasionally, by 1,001 +. The @and the not be ;two , the d, natural vs of the are not Nby the "The bad boy halt your "The Bad Boy , Copyright (C) The Bad Boy on a random basis, at to hang the . The hang is followed by the scrolling several s of repeated 6, and halt of Bad Boy are: Bad Boy 2: A later of Bad Boy, Bad Boy 2 Pnot the TSR |ed if the became (ing The hang, scrolling of 6, and halt may still , but not as frequently. The in the "Make me better!" "The Bad Boy 2.0, Copyright (C) Bad Boy, the d samples of Bad Boy 2. Bad Boy-D: , Bad Boy-D is a wof . , but not at the top of &the )in 3,072 n. Bad Boy-D by either 1,073 or 1,074 +. The be at the $of the b. The @and in the DOS . The the 7in all "The Worthless Piece of shit vi-rus is a joke" Immortal Riot: , Immortal Riot is a wof . .. It at the top of &the 3,072 Immortal Riot by either 1,054 or 1,055 +, or may mthe c1,054 by the 7. The be at the the b. The @and in the DOS not be . The in the 7in all "Senseless Destruction..." "Protecting what we are joining together to take on the world.." "METAL MiLiTiA [iMM0RTAL RI0T] SVW" The Nas a on the monitor. At hang may Immortal Riot.B: , Immortal Riot.B is on the Immortal Riot . The significant difference is aalways by 1,054 +. The same ein Immortal Riot can be See: Boys PZPAPN Bad Brain : Bad Brain J: fail to S: 576 7: ONCK - , NAV, 2.17+ The Bad Brain . Its . Bad Brain is a of . .. It corrupts all Bad Brain is Y, the Bad Brain yone . on the Qin the 2nd or lower sub gthe Q's root the Bad Brain mthe c576 the 7, so be no 5in the in the DOS . The @and the DOS The in the Bad Brain 7, and thus are not "SKISM*" "BadBrains" the Bad Brain not function Zthem. The ed to the DOS prompt upon Since the Bad Brain s the $of the host cannot be dis tand should be replaced clean backup copies. of Bad Brain are: Bad Brain 1.2: , Bad Brain 1.2 is a 554 of the mthe c554 by the . The in the in all Bad Brain 1.2 "The Thing Should Not Be" "He searches" "Hunters of the shadow is rising" "Crawling chaos, underground," "out gruins possessed" "Fallen city, living death..." "* *. "Metal Militia / Immortal Riot" PZPAPN : Bad J: j; slow response; S: 3,430 - 3,443 7: PRtAK - NAV 3.05 9503+, 7.00+, 2.71+, {3.0+ The Bad . Its is a wof . /and . .. It characteristics, is not a full cBad at the top of &the ), moving ~12's , as sby the DOS Bby 5,120 08, 16, 21, 25, and 26 nby the , the Bad Y. It yone . or . in the %accessed a DOS DIR 8is issued. Bad of 3,430 to 3,443 at the end of the r, however, be hidden the . The @and in the DOS not be . The in the 7in all Bad "Bad "*.*" \sluggish or slow response , particularly regard to the DOS DIR Random <may PZPAPN Bad-389 : Bad-389 J: March, 4; TSR S: 389 7: PRsCK - The Bad-389 in March, . Its . Bad-389 is a cBad-389 Y, the Bad-389 as a low TSR of 544 nby the . Bad-389 cannot determine it is already , so it Y, taking up an , the Bad-389 rof 389 at the end of the b. The @and in the DOS #set to the @and . The in the 7in all Bad-389 "Bad PZPAPN Badsec : Badsec 905, Backfont J: ; bad or lost clusters; unexpected accesses to S: 765 7: PRhE - NAV, The Badsec . Its . Badsec is a of . The the Badsec at the top of &the ). It Pnot move 12's , as by the DOS Bby 4,384 nby the the Badsec , it rof 765 the end of the b. The @and in the DOS not be the Badsec may notice the access unexpectedly. accesses , a bad or a lost cluster may , hence the kmay as well. Topsy-900: , Topsy-900 is on the Badsec . It is gthe Topsy-900 |ing at the top of &the 2,736 to 5,472 +, and by the , Topsy-900 may sporatically. rof 900 at the end of the See: BackFont-896 PZPAPN Banana : Banana Trivial-Banana J: (failures Sweden S: 139 7: ONCK - ], NAV, 12.2 9503+, The Banana . It is gSweden. Banana is a of . . It corrupts the the Banana Y, the Banana yall of the . in the G. Banana s the c139 +of the x, so were larger 139 smaller "139 . The @and in the DOS not be The can be in the all Banana "BANANA, 7d by Morbid Angel -92 in Stockholm/Sweden" "*.com" Banana no longer function Since the $of the host , it is not possible to dis should be replaced clean, copies. See: Mini-45 PZPAPN Bandit : Bandit Research J: May, Italy S: 1,641 7: PNE - , NAV, The Bandit in May, . Bandit is gItaly. It is a wof . Bandit is Y, Bandit search the Qand Gfor an y. If an e, it t. Bandit 1,641 at the end of the The @and in the DOS not be Bandit ;the , the second of at the end of "*.* *.exe ww "!!PCBANDIT!!" Bandit is on the Enigma s to be a research See: Enigma PZPAPN Baobab : Baobab J: India S: 1,641 - 1,651 7: PRhE - , NAV, The Baobab . It is gIndia. Baobab is a wof . cBaobab Y, the Baobab at the top of &the ). It Pnot move ~12's sby the DOS 2,560 nby the Baobab the Baobab , it rof 1,641 to 1,651 at the end of the b. The Baobab , adding an 1,648 @and in the DOS to the @and the last of the It is what Baobab may do of Baobab are: Baobab-731: A 731 of the Baobab is 1,552 , it are Y, adding 733 to 752 +to the The at the end of the b, and the @and in the DOS to the @and . Like the , adding 736 v. The in the "Fhello" March, PZPAPN Barcelona : Barcelona J: 5; TSR Spain S: 1,792 7: PRsC - 1, NAV, The Barcelona gBarcelona, Spain, in . Barcelona is a wof . on the cBarcelona Y, the Barcelona as a low TSR of 2,096 +. It Barcelona is , it rof 1,792 at the $of the b. The @and in the DOS to the The can be in the in Barcelona "CATALUNYA" "CATALUNYA LLIURE" "FORA LES FORCES D`OCUPACIO" "MORT ALS TERRORISTES TRICORNUTS" It is if Barcelona carries any damage potential. See: PZPAPN Baron : Baron Germ 255 J: England S: 255 7: PRaCK - , NAV 3.05+, 12.2 9503+, 7.0+, 2.0+, 1.05 9503+ The Baron . It is a wof . cBaron nby the , the Baron are 255 at the end of the b. The @and in the DOS not be . The in the in all "GERM. (C) The Black Baron U.K 93" "Better SMEG dead" PZPAPN Barrotes : Barrotes J: ; vertical bars & (failure; corrupted Spain The S: 1,310 7: PRhAK - p, NAV 3.05+, 1.05 9503+ The Barrotes in The s to ated in Spain. Barrotes is a wof . X, and overlay cBarrotes Y, the Barrotes at the top of &the ), hooking ~21. and , as sby the DOS Bby 1,600 ~12's be moved. , the Barrotes copy of in the C: Qroot Gif it was not the Barrotes , it X, and overlay rof 1,310 at the end of the b. The and in the DOS not be The in the Barrotes 7in all "c:\ 8.com" "l7SO" The Barrotes 5th of any year. At , the vertical bars across the O, and the at the DOS prompt: BARROTES por OSoft" s, the write a portion of its 7to the . The next the gthe M, the fail. of Barrotes are: Barrotes.840: in March, gSpain, Barrotes.840 is an 840 of the Barrotes Its is 1,600 +, hooking Like the , it ythe copy of in the C: Qroot rof 840 at the end of the b. The in the the last ring at the very end of all "c:\ 8.com" "OS" 5th of any year, the Barrotes.840 : Spain March, Barrotes.849: gSpain, Barrotes.849 is an 849 of the Barrotes Its is 1,600 +, hooking Like the , it ythe copy of in the C: Qroot rof 849 at the end of the b. The in the the last ring at the very end of all "c:\ 8.com" "SO" : Spain Barrotes.1303: gSpain in , Barrotes.1303 is a 1,303 of the Barrotes Its is 1,632 +, hooking Like the , it ythe copy of in the C: Qroot rof 1,303 at the end of the b. The in the 7, the Twhile the last is un can be eat the very end of all "C:\ "Sta Tecla (MAD1)" "ST" It is what Barrotes.1303 : Spain PZPAPN Basilisk : Basilisk J: March, ; DOS ?seconds = 62 North America S: 1,639 - 1,653 7: PRhAK - ], NAV, 12.2 9503+, {3.0+ The Basilisk in March, , and is gNorth America. Basilisk is on the R-10, R-11, and Sunday 2 and is a wof . /and . .. It should be considered a as it on open, as well as hiding the cBasilisk Y, the Basilisk at the top of &the ), hooking }21, 22 and 27. , as sby the DOS Bby 3,408 12's not be moved. , Basilisk the Basilisk , it larger 2K in for any reason. rof 1,639 +. . rof 1,639 to 1,653 +. In both cases, the be hidden by the . The at the end of the . The @and in the DOS not to be , but actually seconds field set to 62. The in the Basilisk 7in all "Basilisk v1.0" "Packed bis corrupt" "(c) YAM/RABID International" "The slave thinks he is released gbondage" to find a stronger set of chains" the Basilisk Udetected on the Basilisk See: Sunday-2 PZPAPN J: The S: 1,392 - 1,406 7: PRtE - 7.00+, {3.0+, 7.00+ The B , and is Res is a wof . . The :a poem, is how it derives its Y, the B at the top of &the ), moving ~12's , as sby the DOS Bby 4,912 +. No are Hly mapped to the The B xup to five . in the ever an rof 1,392 to 1,406 at the end of the b. The @and in the DOS not be The in the B "sandy b "bridges sinking into the sea" "beautiful confusion" "you're a fading "Dis X\* \" It is what B PZPAPN Beast-N-Black : Beast-N-Black Beast J: in \DOS Gmay be S: 429 7: PNCK - , NAV, The Beast-N-Black in the is a wof . the Beast-N-Black search the Gfor all , and ythem. it completes G, it attempt to yall . in the root Gof the the Beast-N-Black rof 429 +. The at the end of the . The @and in the DOS not be . The can be in the 7of all /\DOS\*. "Beware the Beast-N-Black" "(C) , Night Crawler - SKISM/PHALCON" The Beast-N-Black is malicious. It all . in the DOS Gon the of Beast-N-Black are: Beast-N-Black B: hequivalent to the has three differ. : Canada May, Public Enemy: on the Beast-N-Black xall . ain the Gand the Qroot Y. It adds 429 +to the .. The at the end of the b. The can be in all Public Enemy /\DOS\*. "Public enemy number one" PZPAPN : Bebe J: j; long Maccess on . clicking on speaker and S: 1,000 - 1,019 7: PRCK - , NAV, The Bebe gthe . Bebe is a s as a Bebe is Y, Bebe search and yall on the and G. If .resides in the G, it Bebe by 1,000 to 1,019 at the end of the b. The mhad @and in the DOS to the @and Since Bebe searchs the G, and xall . [of an in a long, slow load much access while the Bebe is a Pn't be mlike one. Y, it portion of for awhile, the activate. At , it emit a "click" on the speaker, and the be hung. Bebe Pnot on 386 class , on those [of a Bebe- in a hang. PZPAPN Beeper : Beeper Russian Mirror J: 4; beeps on speaker; S: 482 7: PRCK - , NAV, The Beeper, or Russian Mirror, in the . It was not until to previous samples not replicating. Beeper is a wof . .. It can corrupt the The the Beeper the Beeper in low , hooking ~21. , as sby the DOS not be the Beeper , it Ytwice in a row. rof 482 at the end of the b. The @and in the DOS to the @and . No in the the Beeper \the Mbecoming corrupted, ing in an "Invalid specification" to access it. s of may notice a "beep" be emitted gthe speaker PZPAPN 00] U PT] : Beer Beer-2794 J: S: 2,794 - 3,069 7: PRtA - , NAV, 12.2 9503+, 2.17+, {3.0+ The Beer, or Beer-2794, , and gthe . Beer is a /and . , but not cBeer Y, the Beer at the top of but &the ), moving ~12's , as sby the DOS Bby 4,096 nby Beer in , the Beer /and . rof 2,794 rof up to 3,069 +. In both cases the at the end of the b. The @and in the DOS not be It is what the Beer of Beer are: Beer.645: A 645 of the Beer is 3,096 +, hooking ~21. It , but not rof 645 at the end of the The @and in the DOS to the @and . No in the Beer-2850: A 2,850 of the Beer 4,096 +, hooking ~21. It /and . , but not of 2,850 +while . by up to 3,125 +. The at the end of the b, and the @and in the DOS not be Beer-3164: A 3,164 of the Beer 4,096 +, hooking ~21. It /and . , but not of 3,164 +while . by up to 3,437 +. The at the end of the b, and the @and in the DOS not be The in the Beer-3164 .AIDSTEST. XDISKDATA.DTL" March, Beer.3399: A 3,399 of the Beer is 4,080 hooking ~21. It /and . but not copied. rof 3,399 +while . by up to 3,672 +. The at the end of the b. The in the DOS not be The in the Beer.3399 PZPAPN Belgium-320 : Belgium-320 J: May, Belgium S: 320 7: PRaCK - {3.0+ The Belgium-320 in May, , and is Belgium. is a wof . cBelgium-320 in a "hole" in , hooking ~21. It access the it won't on the the Belgium-320 , it rof 320 the end of the b. The @and in the DOS to the and . The very close to the end of all Unexpected kmay PZPAPN Benoit : Benoit J: kmay DOS England S: 1,183 7: PRhE - p, NAV, 12.2 9503+, The Benoit . It is one of the es written by the ARCv writing group gEngland. Benoit is a cBenoit Y, the Benoit at the top of &the ), hooking , as sby the DOS Bby 2,048 ~12's not be moved. the Benoit , it for any reason. rof 1,183 at the end of the b. The r, however, not be . The @and in the DOS to be the seconds field be set to "62". The the Benoit "[BENOIT] ICE-9" "Made in Engalnd" "Release 5th ICE-9." "Dedicated to Beno t B. Mandelbrot G" England is spelled as in the 7, it isn't a typo. may hang the Benoit PZPAPN Berlusca : Berlusca J: S: 929 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.17+ The Berlusca . Its . Berlusca is a wof . the Berlusca yone . in the rof 929 the at the end of the b. The and in the DOS not be . The in the 7in all "*.com" "usta" It is what Berlusca might do PZPAPN Best Wishes : Best Wishes Best Wish, Wishes J: bnot modification S: 970 7: PRtCK - ], NAV, The Best Wishes and is believed to be gthe . Best Wishes is a wof . is a , Best Wishes B, is 1,024 The the Best Wishes Y, the high , but &the ). The be moved. Cby 61,440 Cby 61,360 , and the be modified. modification and still Best Wishes is , the a probability of 50%. by 970 the end of the near the end of the m ... Best Wishes!" Best Wishes Pnot restore the @and in the , so all ?stamps set to the @and Two of a Best Wishes vare may bnot bis actually on M, as well as kon every fourth of Best Wishes are: Best Wishes B: An earlier of Best Wishes, 1,024 . The major differences are #modified. [of a . in the most likely t, but the hang. Best Wishes C: An of Best Wishes, not hang the by the [of . , however, usually in a hang. PZPAPN : Beta Phalcon J: S: 1,117 7: PNC - , NAV, The Beta . Its . Beta is a wof . . It Pnot a Beta Y, the Beta yup to three . in the rof 1,117 +. The at the end of the be no 5to the @and in the DOS . No in the It is if Beta See: Elvis-1250 Ministry Phalcon.894 PZPAPN Beware : Beware J: Moscow, S: 442 7: PNC - ], NAV, The Beware . It s to ated gMoscow. Beware is a wof . . It Pnot the Beware Y, the Beware search the Gfor an .over 2K in y. If it is e, the Beware the Beware rof 442 +. The at the end of the . The @and in the DOS . The can be in the 7in all Beware "BEWARE ME - 0.01," "Copr (c) DarkGraveSoft - Moscow The Beware on the cMonday of any month, at on the PZPAPN : BFD BFD-452 J: BSC; . ; high density Kmay fail to S: 452 7: ORhEB - , NAV, The BFD in the is a multi-partite and . . It should be considered a do not many , and it aon open. It spreads very quickly. The the BFD ythe if the Qis a floppy Q. It access the C: the C: , the at the top of &the DOS , as by the DOS Bby 2,048 nby BFD in . The should note BFD can (ing L. The same the BFD , it , as well as a non-write protected Lis accessed. rregardless of whether the . The BFD writing its 7to the . Xheader area of the many @and in the DOS . No the the BFD K, it s the . The be missing the usual DOS . In the case of high density 5.25" gthe fail, in a hung BFD Pn't to do of BFD are: BFD-452: A 452 of the BFD PZPAPN Big Bang : Big Bang J: S: 346 7: PNC - 2.17+ The Big Bang . Its . Big Bang is a a. It Big Bang is Y, the yall of the . in the Big Bang rd in by 346 the end of the b. The @and in the DOS not be . The in the 7in all "[Big Bang] (c) Evil Avatar *. 1st of any year, [of an trigger the PZPAPN Big Joke : Big Joke J: S: 1,068 7: PNC - NAV, The Big Joke . Its . Big Joke is a a. It Big Joke is Y, the yone in the Big Joke rd in by 1,068 the end of the b. The @and in the DOS to the @and The Big Joke to the N, it is written one line at a to the center of the completes, it be repeated until the is re (ed. The "At last . ALIVE I guess your computer is tby the Big Joke Release 4/4-91 Lucky you, is the kind Be more careful while duplicating in the future. The Big Joke , killer strike The Big Joke rules forever." The can be Big Joke, as well as the dtwo /MAND" Big joke, in its currect Pnot do Oits PZPAPN Big-2000 : Big-2000 V-1391 J: March, 5; TSR S: 2,000 7: PRsE - ], NAV, {3.0+ The Big-2000, or V-1391, in March, . Its . Big-2000 is a wof large . cBig-2000 Y, the Big-2000 as a low TSR of 2,848 +, hooking }01 and 18. the Big-2000 , it alarger 60K in rof 2,000 at the end of the b. The @and in the DOS to the @and in the 7in Big-2000 It is what Big-2000 PZPAPN Billboard 1.0 : Billboard 1.0 J: ?seconds = "00"; S: 835 7: PNCK - 12.2 9503+, 7.00+ The Billboard 1.0 claims to be gAustralia, its . Billboard 1.0 is a of . .. It Pnot yvery small . the Billboard 1.0 yall of the . in the are larger 3K. rof 835 at the $of the b. The in the DOS may dis as the sets the seconds field in the @and to "00". The in the Billboard 1.0 "Billboard 1.0, (c) [Nuke]." "Jeff K. - You are a lying prick, just like all politicians" "Patty - was written gthe ground up, in Australia" "Alan - You are wasting your chasing Rock Steady" "Frisk - Pull your head out of your ass [NuKE] is way ahead of you AV wankers" "Johnny - is just too lame to worry about ha ha" "*.com" The Billboard 1.0 Othe PZPAPN : Bios J: j; continuous S: 2,048 7: PRhAK - {3.0+ The Bios, or Ned, . Bios is wof . /and . .. It employs techniques to avoid detection. The the Bios the Bios at the top of &the ), hooking 09, 1C, and 21. , as by the DOS Bby 8,336 the Bios , it /and . by 2,048 hidden Bios is . The the $of . and the end of . . The @and in the DOS not be . The in the 7and cannot be seen in "Mr.Watshira Sae-eu KMIT-NB @12/28/ BIOS" the Bios may notice the DOS to re (the in a continuous series of re ring. See: 2KB PZPAPN Bit Addict : Bit Addict J: The S: 477 7: PRaCK - , NAV, {3.0+ The Bit Addict gthe . Bit Addict is a wof . The the Bit Addict Y, the Bit Addict in Video Card a hook to in low nby the . The DOS not indicate any the Bit Addict , it rof 477 at the end of the b. The in the DOS not be . The can be in the 7in all Bit Addict "BIT ADDICT" "The Bit Addict says" "You ma good taste for Ms, it was delicious !!!" It is what may do of Bit Addict are: Bit Addict-496: , Bit Addict-496 to be an earlier of the . It |s a 2,576 ,TSR Y, hooking rof 496 at the end of the b. The @and in the DOS to the @and . No in the PZPAPN Bizarre : Bizarre J: DOS Belgium S: 2,716 7: PRhCK - ]2.17+, NAV 3.05 9503+, 12.2 9503+, The Bizarre , and is Belgium. Bizarre is a wof . ., as well as .SYS a. It is a polymorphic a fast cBizarre , as well as ythe copy of ed to by the /SPEC en mental variable. The at the top of &the not moving ~12's , as sby the DOS by 7,264 }21 and 2F nby the the Bizarre , it .SYS for any reason. rof 2,716 at the $of the b. The @and in the DOS year field 3to an value, usually during the 50's. The in the Bizarre "Bizarre by Dreamer" "Do You Believe?" The Bizarre interfers the DOS Ymay indicate fake PZPAPN Black Hawk : Black Hawk J: ?seconds = "62"; beeping on A25th; S: 826 7: PRhCK - ]2.17+, 7.00+, p2.10+, NAV 3.05 9503+, 12.2 9503+, 2.0+, 7.00+ The Black Hawk , and is . Black Hawk is a wof . .. It A25th of any year, at emit beeping on the speaker. cBlack Hawk at the top of &the ), not moving ~12's , as sby the DOS gDOS 3.30 Bby 18,416 nby the the Black Hawk , it rof 826 at the end of the b. The @and in the DOS to be the seconds field #set to "62", the vmarker for the . The in the "[NuKE] N.R.L.G. AZRAEL" PZPAPN Black Monday : Black Monday Borderline, Monday J: j; TSR; stamp Kuala Lumpur, Malaysia S: 1,055 7: PRsAK - , NAV, : CleanUp, or The Black Monday in Fiji in . It is reported to be widespread in Fiji and locations in the Far East and Asia. is a generic /and . The the Black Monday Y, the as a low TSR of 2,048 the , any the Black Monday by 1,055 the end of the a. . by 1,055 to the end of the Pnot amultiple The Pnot hide the ?stamp to the and bwas The can be ein all anear the $of the "Black Monday 2/3/90 KV KL MAL" Black Monday Y, at attempt to format a portion of the of Black Monday are: Black Monday-B: hidentical to Black Monday, has six differ. While . astill by 1,055 by 1,055 to 1,069 Black Monday-C: in Malaysia in , Black Monday-C s to be an earlier . Like Black Monday-B, . rof 1,055 +while . rof 1,055 - 1,069 +. Unlike the of Black Monday, Y. It frequently hang the Y, and the . mhad @and in the DOS to the @and Borderline: Borderline is a smaller of the Black Monday by 781 at the end of the b. The @and in the DOS to the @and may , adding 781 for TSR is 2,048 , and hooks 08 and 21. It is if it PZPAPN Black Wizard : Black Wizard J: j; music S: 2,051 7: PNE - , NAV, The Black Wizard . Its . Black Wizard is a of . . It is on the Enigma and Yankee 2 Black Wizard is Y, the search the Gfor an y. If one is e, it Black Wizard 2,051 at the end of the be no 5in the @and in a DOS . Two can be the "*.exe *.*" "Black Wizard" in the playing the tune "Turkey In The Straw" on the speaker, followed by the executing. Black Wizard may be a research , and not in the public domain, as the sample is not a natural rence of the See: Enigma Yankee 2 PZPAPN Blaze : Blaze J: 4; TSR; (failure S: 284 7: ORsAK - , NAV, 12.2 9503+, The Blaze . Its . Blaze is a wof . and . the Blaze ythe ctwo . /and ctwo . in the G. If G, it may it has , it |a low TSR of 65,584 +. The "The Eternal Blaze #unleashed...Beware!" "[JD]" the Blaze mthe +of the host the Blaze The can be be no 5to the in the DOS , but the @and to the @and Since the Blaze s the $of the host cannot be dis must be replaced backup copies. the Blaze may fail to .has of Blaze are: MSK: The MSK, or Midnight Serial Killer, is a 252 of the Blaze . It xthe cthree . ain the Y, as well as the C: mthe c252 by the MSK 7. The @and in the DOS to the ?. The in the "The Midnight Serial Killer is roaming in your computer..." "Beware!" "[JD]" "*.exe" The may be PZPAPN Blinker : Blinker Blinker-496, Prague.Blinker J: ; spurious Prague, Czechoslovakia S: 512 7: PRhCK - , NAV, The Blinker . It ated in Prague, Czechoslovakia. Blinker is a .. It is on the Back , and may identify it as such. The Blinker is Y, the Blinker at the top of &the , as sby the DOS Bby 528 }08 and 21 by Blinker in ~12's moved. Blinker is , it yany . Y. If Y, it tas well. Blinker rof 512 +. The at the end of the be no 5to the @and in the DOS It is what Blinker of Blinker are: Blinker-496: Blinker-496 is a 496 of the Blinker . It :the "Joker". may receive the Vmeesages for no apparent reason , both of require a response to abort, retry, ignore, or fail: "Bad Vreading device CON" "Bad Vwriting device CON" See: Back Shaker PZPAPN Blinky : Blinky Blinky Ghost J: }01 and 03 vof Inky (failure S: 1,302 7: PRaCK - , NAV, The Blinky, or Blinky Ghost, and is one of three related gthe popular Pac-Man video game. Blinky is a wof . . It "drops" or is the carrier of a , the Inky cBlinky Y, the |a portion of hooking }01 and 03. is an attempt by the avoid having debugger used against it. The on to the Blinky ythree . in the G. If .is in G, it may the Blinky rof 1,302 at the $of the b. The @and in the DOS not be . The are in the 7in all Blinky "[Blinky Ghost]" "The Pac-Man BLINKY Ghost is watching." "[-Inky!-]" "[INKY Ghost] by PacMan and Associates Inc." "Non- "Replace and press any key ready..." The Blinky "drops", or is a carrier for the Inky . The last four gInky. As the Inky is actually a separate distinct , it Ein its own entry. See: Inky Pinky PZPAPN Bljec : Bljec Bljec3, Bljec3B, Bljec4, Bljec4B, Bljec5, Bljec5B, Bljec6, Bljec6B, Bljec7, Bljec7B, Bljec7C, Bljec8, Bljec8B, Bljec9, Bljec9B J: May, Write fault Uon device PRN; (failures S: 231 - 374 7: PNC - , NAV, The cBljec Win May, . In , six were , four of them gItaly. Bljec is actually a es. All of the es are ws of . exception of Bljec3 and Bljec4, do not typically .. Bljec es mark aby checking for two NOP instructions (9090h) at the very $of the The description &applies to Bljec6, the differences for the slater in entry. Bljec6 is Y, the search the Qand Gfor three . by 276 +, the at the $of the b. The @and in the to the @and Bljec6 may hang the Y, or may simply refuse to function of Bljec are: Bljec3: Probably the earliest member of Bljec3 xthe cfour . ain the ever an Y. If cfour . aare already t, it not ain the by 231 at the $of the b. The @and in the to the @and . A symptom of an Bljec3 is may receive the "Write fault Vwriting device PRN" It is what Bljec3 was to write to the printer. in a hang. particular sample of Bljec3 was gItaly Bljec3B: , Bljec3B is a 236 of the Bljec3 Bljec4: gthe NCSA in , Bljec4 is to Bljec3. It xthe cfour . in the dthe vof the hang usually Bljec4 by 247 at the $of the mhad in the DOS to the @and in a hang ring. Bljec4B: in May, , Bljec4B is a 252 of the Bljec4 May, Bljec5: gthe NCSA in , Bljec5 is to Bljec4. Its major difference is ais 267 Bljec5B: , Bljec5B is a 272 of Bljec5. Bljec6: See description is 276 Bljec6B: in May, , Bljec6B is a 281 of the Bljec6 May, Bljec7: gItaly in , Bljec7 ythe third, fifth, and sixth . ain the aare already t, nothing more Bljec7 by 287 at the end of the b. The @and in the DOS to the @and . Like Bljec3, write fault Uon device PRN may be Bljec7B: Bljec7B was . It is a 292 of Bljec7. Bljec7C: Bljec7C was . It is a 440 of Bljec7. yno more three . in any G, and resets the clock to 2-27-1989 ;the "Digital F/X - Created on 2/5/92 by Phoney Phreak" "*?.com" kmay frequently are Bljec8: Bljec8 was gItaly in . It to Bljec7, the exception ris 358 +, and be no in the @and in the DOS Gfor Bljec8B: in May, , Bljec8B is a 363 of the Bljec8 . The in the DOS May, Bljec9: to Bljec8, Italy in . Its ris 369 +, and no 5in the @and in the DOS s. Unlike Bljec8, it not usually not the root Bljec9B: to Bljec9, Bljec9B is a 374 Bljec-XYZ: on the Bljec adds 441 to the . x. It :the 1.0 - Buddy and Chloe 5/27/89" "?*.com" "XYZ 1.0 - 5/27/89" Bljec-235: on the Bljec adds 235 to the . and .BAT x. It the ?.???" Bljec-284: on the Bljec adds 284 to the . x. It :the "*.com *.exe *.ovl *.sys" kfrequently See: Sad PZPAPN Blood : Blood Blood2 J: (s and/or cascading effect Natal, Republic of South Africa S: 418 7: PNCK - , NAV, The Blood by Fridrik Skulason in It was in Natal, Republic of South Africa. are two , Blood and Blood2. is a wof . the Blood Y, it yone . in the C: Qroot G. The newly rd in by 418 +. If the just ., a dthe (, executing an in a cascading effect of the cursor down the The next . in the accessed followed by the hanging. Spurious on the on the line &the line. [of an hang. of Blood are: Blood2: to Blood, the major difference k, and the cascading cursor effect no longer Pnot hang the 15th. PZPAPN Blood Lust : Blood Lust Trivial-Blood Lust J: (failures Sweden S: 302 7: ONCK - , NAV, 12.2 9503+, {3.0+ The Blood Lust . It is gSweden. Blood Lust is a of . .. It s the $of the Blood Lust is Y, the Blood Lust yall of the . in the G. If G, it the Blood Lust mthe c302 +of the by the 7. Unless the smaller be no smaller "302 be no 5to the @and in the DOS The in the Blood Lust and are not "*.C*" "Hi! is the Blood Lust striking." "Sorry to tell you, but your The may be Nby the circumstances. See: Mini-45 PZPAPN Blood Rage : Blood Rage J: S: 450 7: PRaCK - 12.2 9503+, The Blood Rage . Its . Blood Rage is a cBlood Rage in al hooking ~21. sby the DOS not be the Blood Rage , it rof 450 at the end of the b. The @and in the DOS not be . The in the 7in all "THE WORLD WiLL NEVER FORGETT US! -BetaBoys-" "Blood Rage (c) The BetaBoys" The may be Nas a the and an hang may PZPAPN Blood Sugar : Blood Sugar J: S: 416 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, /N 2.0+ The Blood Sugar . It's is a wof . Blood Sugar is Y, the Blood Sugar yall of the . in the G. If G, it of 416 at the end of the The @and in the DOS not be . The in the "[C6H1206] $ Blood Sugar by MnemoniX" PZPAPN Bloody Warrior : Bloody Warrior J: Italy S: 1,344 7: PRhAK - 12.2 9503+, The Bloody Warrior . It to be gItaly. is a wof . and . cBloody Warrior at the top of &the ), not moving ~12's , as the DOS Bby 2,768 nby the the Bloody Warrior , it /and . rof 1,344 at the end of the b. The @and in the DOS not be . The in the Bloody Warrior's "FUCK YOU" /SCANSTOPSHIELDCLEANCVDEBUGTDHello, world" "I am the Bloody Warrior. Nice to meet you. What about ? Funny ?" is no hope for you. was released in Milan . Bloody Warrior" It is what Bloody Warrior PZPAPN Bloody! 00N N PTN : Bloody! Beijing, J: Extended Taiwan S: N/A 7: BRtX - ], NAV, : CleanUp, or see The Bloody! , and reports were W, Taiwan, and the is a wof floppy as well as the ga floppy or Bloody! , the at the top of &the Cby 2,048 +. The be moved. The much longer expected. The timmediately if it was not the source of the At the (, the maintains a counter of how many s the Qhas , the Othe during the "Bloody! Jun. 4, 1989" 4, 1989 is the @of the confrontation in Beijing, China between Chinese students and the Chinese Army in many students were killed. later be Non every sixth 128 (limit has Red. The in the 7, so it is not in the Bloody! is , the yany is accessed. not be enough to cause the ythe be missing all of the normal DOS are normally ein the . The #moved to 11 on 360K K, a part of the root G. If were root Gentries in , those be lost. On the M, the moved to side 0, cylinder 0, For floppies of 360K, "unusable or corrupted as the Pnot take into account the existence of For K, Bloody! can be removed by powering the off and (ing clean, write-protected L. The DOS SYS 8should Rof the To remove the Bloody! gthe the should be copied back to its position. The option is to backup the aon the Mand low level format the Q. In the case of DOS 5.0, the can be rebuilt by using the DOS FDISK the undocumented /MBR option. of Bloody! are: Bloody!-B: in May, equivalent to the . It has avoid detection by most utilities. May, PZPAPN : Bob fw-718 J: S: 718 - 1,414 7: PNCK - 1, NAV, The Bob . Its , are . Bob is a wof . the Bob yall the in the Gof the usually rof 718 the was less +, its "1,416 +. The at the of the . The @and in the DOS not be The can be ein all Bob "*. *. .MKS_VIR. terminated normally" It is if the Bob PZPAPN : Bobo Bobo.530 J: S: 530 7: PRhCK - ]2.17+, 12.2 9503+, 2.17+ The Bobo . Its . Bobo is a of . cBobo Y, the Bobo at the top of &the ), not moving ~12's , as sby the DOS Bby 1,024 }1C and 21 nby the the Bobo , it rof 530 at the end of the b. The @and in the DOS not be . The in the 7in all Bobo "BOBO" PZPAPN Bomber : Bomber Bomb J: May, ; sluggish DOS DIR 8s; beeps & (failures; Malaysia S: 2,204 7: PRhCK - The Bomber, or Bomb, gMalaysia in May, is a wof . employs technology to avoid detection. It 31st, Malaysia's Independence Day. the Bomber the Bomber at the top of &the ~12's not be moved. sby the DOS Bby 3,072 }1C, 20, 21, and 22 nby the Bomber the Bomber , it . It of the . in a a DOS DIR issued. the Bomber rof 2,204 hidden if Bomber is . The the $of the @and in the DOS Bomber is an , and no the The Bomber 31st, Malaysia's Independence Day. On 31st, the emit three beeps and the "! I AM THE STEALTH BOMBER ! I BELONG TO THE NEW GENERATION OF /PUTER VIRUSES. LIKE THE STEALTH BOMBER, I GO UNDETECTED BY ENEMY RADAR DO NOT PANIC I AM SHOWING OFF HOW EASY I CAN EVADE YOUR ANTI VIRUS SYSTEM - I DO NO HARM" Bomber Pn't do malicious Oing its . However, the Bomber (failures t, as well as %detected by the DOS Bomber is . Lastly, the DOS DIR be very sluggish. of Bomber are: Messy: gMalaysia in May, , Messy is a of the Bomber . The major 5between the two es is Messy emit more beeping on 31st, and Othe "MESSY VIRUS CATCH ME IF YOU CAN !!! HA..HA..HA!!!" PZPAPN Boojum : Boojum J: May, S: 340 - 350 7: PRhE - , NAV, 8/93+ The Boojum in May, . Its . Boojum is a the Boojum the Boojum at the top of &the ~12's not be moved. sby the DOS 368 nby Boojum in the Boojum , it rof 340 to 350 at the end of the b. The in the DOS not be . No in the 7in Boojum Boojum Pn't do PZPAPN (Killer (Killer J: BSC; (failures; inaccessible S: N/A 7: BNX - ], NAV, : DOS SYS on K, Norton MDoctor on The (Killer . Its (Killer is a wof the ) and is attempted to be (Killer L, the (Killer be read into , and the fail, Oing the "Non- Replace and press any key ready" has replaced the L, and struck a key, the the proceed. If the Lwas a non-write protected L, the (Killer it, . At same , the tthe it as well. (Killer \frequent failures K, as well as the Mhaving "inaccessible due to (Killer gthe in the same The damage to the can be repaired using various Mdiagnostic qNorton MDoctor. K, the DOS SYS 8can be used to replace the PZPAPN X.205 J: ; TSR S: 205 7: ORsEK - 12.2 9503+, The X.205 . It is wof . may under conditions the sample analysed as a low TSR of 832 +. Because of the manner in hooks the TSR many }mapped to it in , it , or copied. as the s 205 +of the . header. The @and in the DOS not be . The in the 7in all "(C)VVM" PZPAPN : Bow 5856 J: May, S: 5,856 7: PRhAK - The Bow, or 5856, in May, is a wof . /and . The a Bow Y, the Bow at the top of the ), not moving ~12's , as measured by the DOS Bby 5,888 +. The Bow }1C and 21. the Bow , it /and . Y, as well as rof 5,856 at the end of the b. The @in the DOS not be , but the may be to a different value. Two in the 7in Bow "TRUS" "bow!" It is if the Bow PZPAPN : Boys J: May, bcreation S: 500 7: PRCK - , NAV, The Boys in May, *. It is a wof . and The the Boys Boys . Unlike most be no mapping utilities not indicate is in as no }are Boys is , any . larger by 500 at the end of a. The can be Boys: "The good and the bad boy." The at the end of Boys is a malicious Y, it alter the attribute +of . setting the attribute. The . lists the G. If the to copy back the missing . , a " bcreation since the astill exist. The . has hidden can be recovered by removing the attribute. of Boys are: Boys 2: on the Boys , Boys 2 is a wof . Boys 2 is Y, Boys 2 search the Gfor an y. If one is e, it t, and Done . gthe G. Boys 2 rof 500 at the end of the . The can be in the "The good and the bad boy." See: Bad Boy PZPAPN Brain : Brain Pakistani, Pakistani Brain, Clone, Nipper J: 1986 Extended ; volume label -TOM; three contiguous bad (floppy ); BSC Pakistan S: N/A 7: BRt - , NAV, M, CleanUp, ], NAV, or DOS SYS The Pakistani Brain ated in Lahore, Pakistan and by moving the contents of the to an location on the M, marking those 3 clusters (6 bad in the FAT, and writing the 7in the One sign of a Mhaving t, at least , is the volume label 3to "(c) Brain". sign is the label "(c) Brain" can be (the ) on an , taking up between 3K and 7K of RAM. The Brain is able to hide detection by intercepting any might interrogate the and re Hing the read to the elsewhere on the M, thus be unable to see the The Brain tfloppies, however the can now Ms. the "(c) Brain" label removed to make them ler to detect. of Brain are: Brain-B: ( MBrain/Houston Brain-C: Brain-B the "(c) Brain" label removed. Clone: Brain-C but restores (copyright label. Clone-B: Clone modified to destroy the FAT 5/5/92. Nipper: gSpain in Ms. The :the in the "Welcome to the Dungeon (c) 1999 NIPPER SOCIEDAD GAMBERRISTICA VIVA LA PIRATERIA. Dedicated to the memories of See: Ashar PZPAPN Brainy : Brainy J: S: 768 - 1,531 7: PRsCK - , NAV, The Brainy . It is *. Brainy is a wof . .. It is on the Warrior The Brainy is Y, the Brainy at the top of &the nby the Brainy ~12's #moved. , as by the DOS Bby 1,552 the Brainy , it yall . rof 768 to 1,531 +. Unlike most es, the Brainy inserted into the b, possibly in the middle. The can be eat the end of the 7in all Brainy "eAWRREI!R" Brainy usually not 386 processor, and may hang the It is if Brainy See: Warrior PZPAPN Brazilian Bug : Brazilian Bug J: May, Brazil S: 1,343 7: PNCK - , NAV, The Brazilian Bug Iin May, . It is gBrazil, and may @back to late is a wof . , but not the Brazilian Bug is Y, the yall . in the it completes uall the , it Othe * HELLO FRIEND WE ARE SORRY TO INFORM YOU THAT YOUR SYSTEM IS VERY ILL AND WILL NOT SURVIVE " MUCH LONGER YOU UNFORTUNATELY HAVE - THE BRAZILIAN BUG - FOR WHICH THERE IS NO CURE WE HOPE THIS WILL NOT BE AN INCONVENIENCE TO YOU LOVE, $ THE MAGIK MUSICIANS" The host complete the Brazilian Bug rof 1,343 at the end of the b. The @and to the @and . All of the in the PZPAPN Breaking : Breaking Breaking.1000 J: S: 1,000 7: PNCK - 7.00+, 2.71+, 12.2 9503+, 2.0+, 7.00+, 2.71+ The Breaking . Its . Breaking is a wof . the Breaking yall of the . in the 1,000 at the end of the b. The @and in the DOS not be . The can be in the 7in all Breaking It is what Breaking PZPAPN Breeze : Breeze J: The S: 358 7: PNCK - , NAV, {3.0+ The Breeze , and is gThe . Breeze is a wof . .. It is written by the same author as the Deicide the Breeze Y, the Breeze yone . in the G. If G, it may the Breeze rof 358 the $of the b. The @and in the DOS not be . The can be in the 7in all Breeze "Dutch [Breeze] by Glenn Benton" Breeze Pn't to do See: Deicide PZPAPN Bryansk : Bryansk J: ; Read- attribute set S: 673 7: PNCK - , NAV, {3.0+ The Bryansk . It is gthe . Bryansk is a the Bryansk Y, the Bryansk check the @and . If it is not a Friday before 15:00 (3:00PM), the yone . in the G. If an bcannot be ein the G, it move upward in the Gstructure searching for a . until it r Res the root the Bryansk rof 673 +. The at the end of the b. The @and in the DOS not be . The can be in the 7in all Bryansk "BRYANSK , BITE 0.01 (C)" On any Friday before 15:00 (3:00PM), the Bryansk a, instead it set the Read- attribute on for ausing the bspecification "*.*". PZPAPN Bubonic : Bubonic J: May, j; DOS sluggish DOS DIR S: 2,181 - 2,193 7: PRhAK - {3.0+ The Bubonic in May, . Its . Bubonic is a , fast /and . It is a , hiding the cBubonic Y, the Bubonic at the top of &the ), hooking ~6B. , as sby the DOS Bby 2,592 ~12's not be moved. , the Bubonic /and . rof 2,181 Bubonic of 2,181 to 2,193 one may by up to 2,254 +. In both cases, the is hidden , and the at the end of the b. The @and in the DOS not be . The in the 7in all Bubonic "Bubonic[BBP],alpha.02a,fixedFCBbug.Soon:tighter "anti-(debug,heuristics),norunifanti- prog.running (FSP,etc.)better "NEW!genetic,algorithmicdarwin-encryptionandadrop libraryofmanyvirii,allless "Ooops, Sorry..." the Bubonic \sluggish DOS DIR 8output. The DOS the Bubonic detect all PZPAPN : Budo J: fail to Finland S: 890 7: ONA - , NAV, 12.2 9503+, The Budo gFinland in . Budo is a /and . , but not the Budo may yone . /or . in the The ed to the DOS prompt. mthe c890 by the Budo 7. Unless the host was smaller . In the case of smaller "890 . The @and in the DOS . The can be in the "BUDO V1.2 TH HV FINLAND PQ" "FLOW LIKE A RIVER - STRIKE LIKE THUNDER" Budo destroys the x, and be replaced gclean, backups. of Budo are: Budo.1000: , Budo.1000 is a 1,000 of the Budo the Y, it as a low TSR of 1,232 hooking }21 and 22. , it may 1,000 +. The @and in the DOS not be . The in the 7in all "BUDO V1.0 H & HV Finland" "Flow like a river - strike like a thunder" "Incorrect DOS "TELAPI" : Finland PZPAPN Burger : Burger 404, 505, 509, 537, 540, 541, 542, 560, 560-B, 909090h, CIA, CIA-2 J: 1986 not run West Germany S: 560 7: ONAK - , NAV, The Burger, or 909090h, was written and copyrighted in 1986 by Ralf Burger of West Germany. is extinct in the "public domain". is a /and . the Burger Y, the attempt to yone in the C: Qroot G. To determine if the t, the checks to see if the cthree +of the . bare three NOP instructions (909090h). If the cthree +are the NOP instructions, the goes on checking until it finds an b. If no bexists, the s all the . ain the root Gto . aand checks those it finds y, it s the c560 +of the 7. At , the the to run either end or hang the never as the cportion of the #destroyed. the Burger fail to the ., or the copy of acan be easily identified by the "909090B8 026A245" hex sequence in the cnine +of all acannot be must be replaced ga clean source. of Burger are: 404: to the Burger 's actual is 404 c560 cnine ;the hex : "909090B8 026A245". 505: to the Burger 's actual is 505 c560 cnine ;the hex : "909090B8 026A3A0". 509: to the Burger 's actual is 509 c560 cnine ;the hex : "909090B8 026A3A4". 540: to the Burger 's actual is 540 c560 cnine ;the hex : "909090B8 026A3A3". 541: to the Burger s the 560 actually 541 start the hex sequence: "909090B8 026A3A4". 542: to the Burger s the 560 actually 542 start the hex sequence: "909090B8 026A3A5". 560-B: to the Burger s the c560 , and the is 560 +. The end of the :the : "his bwas downloaded gthe Vir". in all d samples. start the hex : "909090B8 026A3B2". CIA: Iin the to the Burger . The cnine +of all ain hex "909090B8 026A3A5". The actual 541 c560 CIA-2: in May, is a minor the CIA See: 382 Recovery 405 Dewdz VirDem VirDem-1542 Wonderful PZPAPN Burghofer : Burghofer J: Switzerland S: 525 7: PRhCK - , NAV, The Burghofer , in Switzerland. Burghofer is a wof . cBurghofer Y, Burghofer at the top of but &the as measured by the DOS Cby 528 nby the Burghofer is , it Y. If Y, it by 525 +, the at the end of the The @and in the not be Burghofer ;the "GS/02" at the fourth thru eighth +of the Burghofer Pn't do PZPAPN Burma.563 : Burma.563 Burma J: "563 Oeffect; S: 563 7: ONAK - , NAV 3.05+, 12.2 9503+, 1.05+ The Burma.563 . Its is a permanently corrupts the The the Burma.563 Othe "Reading configuration, please wait." The tthe /and . in the G. The ed to the DOS prompt. The next the Burma.563 check to determine if the /and . t. If are, a swirling effect on the O. On monochrome monitors, effect may as the The Burma.563 Pnot continue to in the /and . "563 and in the DOS having to the @and . The in the 7in all "*.?o? *.?x? \DOS \" "Reading configuration, please wait." Two , "SwizzleStyxx!" and " >", are in the 6are separated by an open happy face (hex 01) character. PZPAPN Busted : Busted J: /corrupted S: 571 7: ONE - NAV, The Busted . Its , are . Busted is a the Busted yall . in the has completed uall . in the G, the too big to fit in mthe c571 by the , permanently damaging them. be no 5to the unless the . smaller +, in case the "571 +. The @and in the DOS Several are Tin all d samples. "Busted!" on Leprosy-B." x PCM2" "Busted, Strain A, 1.08y" "(Psychogenius), Busted Pnot to do 'replicating, destroying the . PZPAPN Butt Stink : Butt Stink J: North America S: 540 7: PNE - , NAV, The Butt Stink , and is probably gNorth America. Butt Stink is a wof . the Butt Stink yall of the . in the 540 at the end of the b. The @and in the DOS . The in the Butt Stink "You know what?" "Your Butt Stinks!!!" "And YAM can't stand it!" The last three lines of forms a Non the monitor PZPAPN Butterflies : Butterflies Butterflies-302, Goddamn Butterflies J: Illinois, kmay S: 302 7: PNC - , NAV, {3.0+ The Butterflies, Butterflies-302 or Goddamn Butterflies, in the state of Illinois in the . Butterflies is a wof . , but not .. It has #given a status of 9as many reports of were mid to late due to its distribution on a shareware communications package. reports were gthe Canada, W, and Israel. As such, its the Butterflies yall of the . in the meet its selection criteria. rof 302 at the end of the b. The @and in the DOS not be . The are in the 7in all Butterflies "Goddamn Butterflies" Butterflies Pn't to do much kmay unexpectantly are of Butterflies are: Crusades: on the Butterflies ythree or four . ain the by 302 at the end of the b. The @and in the DOS . The the 7in all Crusades "Hurray The Crusades" kfrequently Crusades to the Crusades yfour . ain the by 302 at the end of the b. The @and in the DOS not be . The in the 7in all Crusades "Hurray The Crusades" PZPAPN ButtUgly : ButtUgly J: May, S: 552 7: PNCK - {3.0+ The ButtUgly in May, . Its . ButtUgly is a wof . the ButtUgly yone . in the rof 552 the at the end of the b. The and in the DOS not be . The in the ButtUgly "PATH=" "Fool. Dolt.. Fuck You! HaHah. You Limp Cock! Damn! Your Butt-Ugly." "by Primal Fury" "* *.*" It is what ButtUgly PZPAPN Cacophony : Cacophony Cacophony 1 J: 3to 4:08a tune played on speaker S: 950 - 960 7: PNE - 7.00+, 2.17+ The Cacophony, or Cacophony 1, Its . Cacophony is a non- wof . . A later , Cacophony 2, is adds encryption to the , as well as no longer altering the @and a Cacophony one . in the rof 950 to 960 at the end of the b. The @and in the DOS field is set to 4:08a. The in the 7in all Cacophony "cacophony" "*.e?*" "\ .. smartc*.cps" Cacophony may interfer the functionality of the Central Anti- . The |s a small portion of at the top of &the ), hooking ~08. 7is not a complete copy of the , but a routine to play a tune on the speaker of Cacophony are: Cacophony 2: A later of the Cacophony xone . bin the rof 1,056 to 1,066 at the end of the b. The @and in the DOS not be . The in the Cacophony "CACOPHONY * EpidemicWare 93 G.I.P.Po." "Cacofonia" X\ *.* smartchk.cp?" Like the play a tune on the speaker %present on the for . It may interfer the functioning of Central Anti- PZPAPN Cadkill : Cadkill Milous J: S: 1,163 7: PRhAK - NAV, The Cadkill . Its . Cadkill is a generic wof . and . The Cadkill is Y, the Cadkill at the top of &the , as measured by the DOS Cby 2,048 }1C, 21, and 24 nby the Cadkill is , it /and . Y. If Y, it by 1,163 +. The at the end of the It is what Cadkill PZPAPN Cannabis 00y S PTy : Cannabis Cannabis 2, Cannabis 3 J: BSC; The S: N/A 7: BRh - Floppy , NAV 3.05 9503+, : DOS Sys on The Cannabis gthe . Cannabis is a wof floppy . The =submission of Cannabis, the usually in a indicating Mis a non- L, and to replace it Mand press any key. Replacing the L, or removing it and allowing the (to proceed gthe in the (completing. At , Cannabis at the top of &the DOS measured the DOS be 2,048 +less expected. Cannabis is , it yany non-write protected Lexposed to the t360K mthe moved to 9, and the Cannabis 7written to 0, the location of the . Since 9 is normally part of the root <may Cannabis is a very buggy , and it . As a , the was re by the The Cannabis occasionally Othe "Hey man, I don't wanna work. I'm too right now..." , along the word "Cannabis". of Cannabis are: Cannabis Dropper: A very small . ;ed the Cannabis nothing but the Cannabis Cannabis 2: Cannabis 2 is a of the Cannabis has the bug fixed prevented Cannabis K. It :one : "CANNABIS". where the DOS number is normally in the . It uses 1,024 , rather 2,048 +required for the . Cannabis 2 is a very poor replicator, and not likely to widespread problem. : The Cannabis 2 Dropper: A very small . ;ed the Cannabis 2 Pnothing but the Cannabis 2 : The Cannabis 3: Cannabis 3 is a minor of the Cannabis 3 . Like Cannabis 2, it :the one : "CANNABIS". : The Cannabis 3 Dropper: A very small . ;ed the Cannabis 3 Pnothing but the Cannabis 3 : The PZPAPN Cansu : Cansu Sigalit, V-Sign J: BSC; ; graphic Turkey S: N/A 7: BRXh - Floppy , NAV, : M- M/P or DOS 5.0 F- M/MBR on DOS SYS (able The Cansu gCanada in . It is gTurkey. Cansu is a wof the ) and cCansu (ed, the Cansu at the top of but &the , as sby the DOS by 2,048 +. The uses Cansu is , it ythe accesses the M. It yany non-write protected are accessed Cansu xthe M, it saves +of the in its s Side 0, Cylinder 0, 1. The is too large to fit entirely in the , so the remainder of the is written to Side 0, Cylinder 0, 4 and 5. On K, the saves 38 +of the and s the . The remainder of the be stored in the last two of the root G. For example, on 360K 5.25" 10 and 11 ;the remainder of the Cansu is slightly polymorphic, and a wildcard search necessary to detect the . Since the and are not saved, dis vshould be performed by replacing the clean copies using utilities intended for purpose. The Cansu Oa V-shaped block character graphic on the monitor the . The graphic is accompanied by a hang. PZPAPN Capicua : Capicua J: S: 511 7: PRaCK - , NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Capicua . Its . Capicua is a wof . cCapicua in al . It hook }21 and 24. sby the DOS not be the Capicua , it rof 511 at the end of the b. The @and in the DOS not be . The in the 7in all "*CAPICUA*" It is what PZPAPN Capitall : Capitall J: j; TSR Poland S: 927 7: PRsCK - , NAV, 12.2 9503+, The Capitall gPoland in is a wof . .. It uses an encryption mechanism used by the Cascade , so it is possible utilities identify it as Cascade. the Capitall as a low TSR of 1,952 }1C, 21, and 28 nby Capitall in the Capitall , it Y. If Y, it the Capitall rof 927 at the end of the b. The in the DOS not be It is what Capitall may do PZPAPN : Cara J: j; TSR; Spain S: 1,025 7: PRsCK - , NAV, The Cara . It is gSpain. Cara is a wof . .. It alters do not ;a live The Cara is Y, Cara at the top of Cby 3,048 }13 and 21 the Cara . At , Cara .if it was not t, and alter the Cara is , it are by 1,025 at the end of be no 5in the @and in the DOS Cara mthe "CARA" in the fifth thru eighth +of the is the marker used by the to determine if the already can be enear the end of aare: es en memoria! Disco es yado. Reemplaza " Clandestino Auto- Reproductivo Anti- CARA" CARA's of the is an attempt to es by providing a new PZPAPN Career Of Evil : Career Of Evil Career Of Evil-446 J: /& .SYS j; DOS S: 446 7: PRhCK - , NAV, ]2.17+, {3.0+ The Career Of Evil, or Career Of Evil-446, . Its . Career Of Evil is a uses techniques to avoid detection and spread quickly to a. It ., as well as .SYS cCareer of Evil at the top of &the ), hooking , as sby the DOS Bby 704 ~12's not be moved. the Career of Evil , it /and .SYS for any reason. 446 at the end of the The r, however, be hidden . The @and in the DOS not be . The "UK" can be estarting in the fourth ,of all . The in the the end of "tenUKCareer of Evil" the Career Of Evil , the DOS Uon all of Career of Evil are: Career Of Evil-697: A 697 of the Career Of Evil 960 +, hooking ~21. It /and .SYS for any reason. rof 697 be hidden the . The at the end of the b. The @and in the DOS not be . The same as the DOS PZPAPN Carfield : Carfield J: j; TSR; S: 1,508 - 1,522 7: PRsA - , NAV, : CleanUp, or The Carfield gthe NCSA in Its Jand Carfield is a wof . /and . a. It Pnot on the Sunday The Carfield is Y, the as a low TSR of 1,744 +. The Carfield is , it /and . by 1,508 at the $of the by 1,508 to 1,522 the at the end of the be no 5to the @and in the DOS The Carfield on Mondays. It hook in addition to . It Othe "Carfield!" while it is See: Sunday PZPAPN Carioca : Carioca J: TSR; . S: 951 7: PRsC - ], NAV, The Carioca wof . a, it Pnot The the Carioca Y, the as a 1,280 ,low TSR. nby the . The Cby 1,312 , any . exception of the Carioca show an of 951 at the end of the mthe dhex character at the very end of the b: "2EFF1E1A010203CD21". It is if Carioca :any damage potential. of Carioca are: Carioca-B: , Carioca-B is a very minor to avoid detected by a particular utility. It is not believed to be in the public domain. PZPAPN Cartuja : Cartuja J: S: 1,568 - 1,600 7: PRhAK - , NAV 3.05+, 1.05 9503+ The Cartuja . Its . Cartuja is a /and . cCartuja Y, the Cartuja at the top of &the ), hooking ~21. , as sby the DOS Bby 60,704 ~12's #moved. the Cartuja , it may Pn't always ythe b. As a , it may take several [s of a particular . /or . before the the Cartuja rof 1,568 to 1,600 at the end of the b. The @and in the DOS not be . The in the 7in all Cartuja "Frz G" Frequent kmay Cartuja Y. The damage potential for See: Estepa PZPAPN Cascade : Cascade BlackJack, Fall, Falling Letters, 1701, 1704, 1701 Mutation, 1704 Format, 1704-B J: , 1987 TSR; falling letters; . j; random re Germany S: 1,701 or 1,704 7: PRsC - Encrypting . , NAV, : CleanUp, , or was a Trojan horse was disguised as a was supposed to turn off the Num-Lock light the (ed. The Trojan horse instead caused all the 6on the to fall into a pile at the bottom of the . In late 1987, the Trojan horse was one into While the had a of 1,701 +and would yboth true IBM PCs and clones, a variation exists of is 3 +longer ytrue IBM PCs. Both es are hidentical in all respects. Both of the fairly unique qualities: Both use an encryption algorithm to avoid detection and complicate any attempted analysis of them. The mechanisms are on a sophisticated randomization algorithm incorporating machine checks, monitor s, presence or absence of a clock card, and the season of the year. The activate on any machine a CGA or VGA monitor in the months of , or Ain the years 1980 and 1988. of Cascade are: 1701 Mutation: of has had two +modified in order to avoid detection. 1701-B: Same as 1701, except it can activate in the Fall of any year. 1701-Yap: on the Cascade adds 1,701 +to the . x. Its TSR is 2,048 +, and hooks The encryption mechanism has #slightly to avoid detection by utilities. 1704 Format: Like the Cascade , but the Mis formatted s during the months of , and Aof any year except , 1989. 1704-C: Same as Cascade-B except can activate in Aof any year. 1704-D: Same as the 1704, except the IBM selection has disabled so it can ytrue IBM PCs. 17Y4: to the Cascade 1704 , the difference is one ,in the Cascade-1621: on the Cascade adds 1,621 +to the . x. Its TSR is 1,936 +, and hooks Z.BAT in the scrolling of the "Insufficient Mspace", and the .BAT bnot executing. Cascade 1701.E: on the Cascade minor . It drops a single character down the it is A31 of any year. Cascade.1702: on the Cascade adds 1,702 +to the . x. It is employs a 1,936 hooking }21. The at the end Cascade-1704G: on the Cascade has to avoid detection by by the addition of a NOP instruction in the decryption routine. It adds 1,704 +to the . at the end of the b. It is a employs a 1,968 ,TSR hooking : France May, Cascade-1706: on the Cascade adds 1,706 +to the . x. It is employs a 2,064 hooking }1C and 21. The at the end of Cascade-B: to the Cascade , except cascading Ohas #replaced at random intervals Cunning: on the Cascade , a major 5to the it now plays music. See: 1661 JoJo PZPAPN Casino : Casino Casino-B, Casino-C J: U; slot machine game; damaged Malta S: 2,332 - 2,346 7: PRhCK - , NAV, The Casino by David Chess of IBM. Casino was in Malta. is a wof . The Casino is Y, Casino at the top of , as sby the DOS Cby 37,568 to 37,632 +. 3,152 in low be used by the , and 00, 23, and 30 area. Casino is immediately in the C: root Casino is , it any of three events . If the issues a DIR or a Pan internal DIR 8, one . bin the ly, if the Zs an , a . t. Lastly, Casino by an for any reason. Casino 2,332 to 2,346 +. The r, however, is mostly hidden if the rof 1 to 16 +, but occasionally one may show a rof up to +. The Pnot alter the @and in the If Casino is and the DOS ed for If the -/F option is used, Casino 15, and play a slot machine game "DISK DESTROYER . A SOUVENIR OF MALTA mjust DESTROYED the FAT on your However, I ma copy in RAM, and I`m giving you a last chance to restore your precious data. WARNING: IF YOU RESET NOW, ALL YOUR DATA WILL BE LOST - FOREVER!! Your Data depends on a game of JACKPOT CASINO DE MALTE JACKPOT" If the looses the game, Casino trash the of Casino are: Casino-B: to the Casino , the major trash the before playing the slot machine game ~21 is by the Casino-C: to Casino-B, the major Pnot trash the before playing the slot machine game, and it is possible for the to win, avoiding <. If the wins the game, the "BASTARD ! You're lucky - but for your own sake now SWITCH OFF YOUR /PUTER AND DON`TURN IT ON TILL TOMORROW!!!" hang May, PZPAPN Casper : Casper Chameleon J: <(see S: 1,200 7: PNCK - Encrypting . , NAV, : NAV, or The Casper by Fridrik Skulason of Iceland. The . Casper is a generic wof . the Casper Y, the attempt to yone . in the and by 1,200 at the end of the . The Casper :the cannot be seen in as Casper uses a complex self- encryption mechanism: "Hi! I'm Casper The , And On 1st I'm Gonna Fuck Up Your MREAL BAD! In Fact It Might Just Be Impossible To Recover! How's Grab Ya! <GRIN>" 1st, ctrack of the Qwhere the was g. Later to access the in " ring. The Casper on the . Unlike , it is self-encrypting. The self-encryption mechanism employed is to the encryption mechanism used in the V2P6 , and requires an algorithmic approach in order to identify it as are not any identifying in the of Casper are: Casper Dropper: Casper Dropper is the Tcopy of the Casper . Executing in an vof a . in the the Casper . The T. The for Casper See: 1260 V2P2 V2P6 PZPAPN Casteggio : Casteggio J: Casteggio, Italy S: 2,881 - 2,900 7: PRhAK - , NAV, The Casteggio gItaly in its in the public domain in Casteggio, Italy. Casteggio is a wof . /and . the Casteggio the Casteggio at the top of &the , as sby the DOS Bby 3,008 }1C and 21 the Casteggio , it rof 2,881 to 2,900 at the end of the b. The @and in the DOS not be . No in the It is what Casteggio PZPAPN Catman : Catman J: BSC; S: N/A 7: BRtX - F: NAV, : See The Catman , two samples of were not viable es. Catman is gthe . It is a and the The Catman in the form of a "dropper" If the dropper Yon a Q, the of the Catman. The 71. If was part of b, the be corrupted. The remainder of the be placed in the second of the cand second on the If the Catman dropper was Yon the M, the copy the is part of the second copy of the Catman Pnot gthe or the . The way it can spread, at least in its present form, is by executing the dropper a computer Catman , the usually in a hang. Likewise, (ing gthe in a hang. Catman can be removed gthe copying back the 71 to side 0, cyl 0, 1. For K, the DOS SYS can be used to replace the . Non- Kshould be dis tby copying all ausing the DOS COPY 8, and reformatting the M. In any even, were damaged due to the not be able to be recovered, and should be replaced gbackup copies. PZPAPN : Caz J: Spain S: 1,204 7: PRhAK - 1, NAV, The Caz in Spain in . Caz is a wof . /and . cCaz Yon a , the Caz at the top of but &the , as sby the DOS 2,048 }08, 21, and 2F nby the . At , the check the copy of in the C: Qroot G, and if not already the Caz is , it 1,204 not be able to be seen in s if the . Caz at the end of a. The can be .CLEAN." allocate all , such as utilities. \unexpected stack overflow successfully Zat a later . An symptom of Caz vs is if the , the DOS indicate Uon all It is what Caz it is probably related. of Caz are: Caz-B: , Caz-B is equivalent to the Caz . It has two differ gthe : Spain See: Zaragosa PZPAPN CB-1530 : CB-1530 1530 J: S: 1,530 - 1,544 7: PRhAK - , NAV, The CB-1530 . Its , are . CB-1530 is a wof . /and . It is on the , and software may detect it as such. The CB-1530 is Y, the at the top of &the , as measured the DOS Bby 3,696 }21 and 27 nby CB-1530 in ~12's #moved. CB-1530 has , it very small ones) rd in by 1,530 rd in by 1,530 to 1,544 In both cases, the at the end of the be no 5to the @and in the DOS G. One : "CB". It is what CB-1530 See: Alexander > Edcl Father PZPAPN CCCP-510 : CCCP-510 J: S: 510 7: PNCK - , NAV, {3.0+ The CCCP-510 . It is gthe . CCCP-510 is a the CCCP-510 Y, the CCCP-510 yone . in the 510 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all CCCP-510 "*** CCCP - 75! ***" "DoomsDay..." "*.com" It is what CCCP-510 PZPAPN : CD Thursday The 12th J: Mwrite protect Germany S: 2,161 - 2,175 7: PRhA - p, NAV, The CD gGermany. CD is wof . /and . a, and .. On Thursdays are the 12th day of the month, it The CD is Y, CD at the top of , but &the , as measured by the DOS Bby 2,448 nby the , CD /and . was less 2,161 to 2,175 at the end of the gwrite protected in a write protect Vas the Pnot intercept Vcondition. On Thursdays are the twelveth day of the month, it Othe every fourth VirCheck V1.2 (C) Be aware of those worms out , violating your machine on Friday 13th = it's tomorrow! Special ks to Ross M. Greenberg, Patricia M. Hoffmann and John McAfee Press any key to continue... The Pnot do Othe the highlighted box in the center of the . If the strikes any key, the were of CD are: Thursday The 12th: to CD, 's major on open as well as in Iceland, and was PZPAPN Cerburus : Cerburus J: j; dog's head graphic; ; interfers .BAT S: 1,353 7: PRaCK - , NAV, {3.0+ The Cerburus . Its place of . Cerburus is a wof . over 2K in The the Cerburus Y, the Cerburus , hooking }21, 28, and 60. be no sby the DOS Cerburus is , it in the a DOS DIR issued. 1,353 at the $of the b. The @and in the DOS not be the Cerburus may notice a graphic dog's head on the upper half of the O. The head move gleft to right, wiping out the contents of the Oas it passes. At the same , the Nat the top of the "***CERBURUS***" The is not the can be in the all [of .BAT amay be interfered Cerburus is may produce odd s. It is particularly noticeable in batch [of the DOS DIR PZPAPN : Chad J: 3to 00-00-80 00:00; England S: 751 7: PNCK - 1, NAV, The Chad . It is gEngland. Chad is a the Chad search the Gto locate a previouly y. If one is e, it tby the the Chad rof 751 at the end of the b. The in the DOS to be blank or missing, it has actually #set to 00-00-80 00:00. The can be in the Chad 7in all "Software "WOT!! No Anti - "CHAD Against Damaging es ... Save Our Software. The Chad Othe 10th generation of the PZPAPN Chang : Chang J: S: 1,701 - 1,773 7: PRhAK - p, NAV 3.05+, 1.05+, {3.0+ The Chang . Its . Chang is a of . /and . the Chang the Chang at the top &the ). It move ~12's , as sby the DOS by 1,760 nby Chang in the Chang , it Y. If rof 1,701 to 1,773 at the end of the b. The @and the DOS not be The can be in the all Chang "YOU CAN CHANG SOMETHING OF THE PROGRAM I HAVE GIVEN UP MY COPYRIGHT, AND I HAVE LEFT SOME SPACE FOR YOU. THANKS!TOO MANY WRITE PROTECT!!!" It is what Chang may do of Chang are: Chang-B: hequivalent to the is slightly modified. Chang 007: Behaviourly to the Chang Chang 007's is 23,312 +, hooking ~21. It adds 23,310 - 23,325 +to the X, and x. Its position in the band are the same as for the . Most of the 23,310 plus adds to aconsists of hex zero : Canada PZPAPN J: ; TSR China S: 3,072 - 3,104 7: PRsAKX - X, & , NAV, {3.0+, 2.17+ The C . It is gChina. C kha is a wof . /and . .. It xthe Y, the C as a low TSR of 3,392 +, hooking }08, 13, and 21. , it ythe if it was not the C , it for any reason. rof 3,072 3,091 to 3,104 +. In both cases, the the end of the b. The @and in the DOS not be . The can be in the 7in all C "Welcome!" "Auto-Copy Deluxe R3.0" "(C)Copyright . Mr. YaQi. C kha China" "No one can Beyond me!" "Invalid VLoading Operating "Missing Operating "New Century of Computer Now!" It is what C PZPAPN Changu Mangu : Changu Mangu JKTK J: BSC; India S: N/A 7: BRtX - : DOS SYS on K, M- M/P on , DOS FDISK /MBR for DOS 5.0 The Changu Mangu, or JKTK, in India. Changu Mangu is a wof the ) and 360K 5.25" . It Pnot the of high density The the Changu Mangu at the top of &the DOS ), moving ~12's , as sby the DOS Bby 10,240 , the Changu Mangu ythe it was not tby the the Changu Mangu , it the of non-write protected, 360K 5.25" are accessed. The #moved to cylinder 39, side 1, Changu Mangu Pn't to do PZPAPN Chaos : Chaos J: A, 1989 ; TSR; bad ; BSC England S: N/A 7: BR - M, CleanUp, or DOS SYS creported in A, 1989 by James Berry of Kent, England, the Chaos is a wof floppy and the Chaos , it s the out copying it to an location on the ;the "Welcome to the New Dungeon" "Chaos" "Letz be cool guys" The Chaos flag the %full of bad upon most of the supposed bad are still readable. It is what the criteria is. PZPAPN Chaos Year : Chaos Year Chaos Year.1837 J: j; DOS ?seconds = "60" S: 1,837 7: PRhAK - p, NAV 3.05+, 12.2 9503+, 1.05+ The Chaos Year, or Chaos Year.1837, . Its is a wof . /and . exhibits characteristics. cChaos Year at the top of &the ), not moving ~12's , as sby the DOS Bby 2,560 nby the the Chaos Year , it and . rof 1,837 at the end of the be hidden . The in the DOS to be un but the seconds field #set to "60". The in the "chao1837" the Chaos Year find the DOS detect Uon all . It is what else Chaos Year may do. PZPAPN Chaser : Chaser J: S: 980 - 994 7: PNE - , NAV 3.05+, 1.05+ The Chaser . Its . Chaser is a wof . the Chaser Y, the Chaser yone . in the it has hang . The not be run. the Chaser rof 980 to 994 at the end of the b. The @and in the DOS not be . No in the 7in Chaser PZPAPN : CHCC J: S: 2,664 - 2,678 7: PNAK - {3.0+ The CHCC . CHCC is a wof . /and . the CHCC Y, the CHCC yone . /and one . on the 2,664 to 2,678 at the end of the b. The @and in the DOS not be . The the 7in all CHCC XSYSBAT" "ChCC" The second very near the end of the It is what CHCC PZPAPN CheckSum : CheckSum CheckSum 1.00, CkSum J: Poland S: 1,233 7: PRhCK - , NAV, The CheckSum . It is gPoland. CheckSum is a wof . The the CheckSum Y, the CheckSum at the top of &the ~12's #moved. , as measured by the DOS Bby 1,264 nby the the CheckSum , it the CheckSum of 1,233 at the end of the be no 5to the @and in the DOS the CheckSum \frequent , and later the again. of CheckSum are: CheckSum 1.01: to the CheckSum is one ,shorter, adding 1,232 +to the . : Poland CheckSum 1.01B: to CheckSum 1.01B, has six differ. : Poland CheckSum-1569: on the CheckSum it can Its is 1,600 +, hooking /and . adding 1,569 +to the . The at the end of the b. Most ing in a "Divide overflow" Vand the ed to the DOS prompt. PZPAPN Cheeba : Cheeba J: S: 1,683 - 1,698 7: PRsAK - The Cheeba . Its . At the it was were two Cheeba es. The is a wof . ., and &. The second, Cheeba-B, is a wof . /and . ., and is listed under " The the Cheeba Y, it at the top of &the , as sby the DOS Bby 3,392 ~12's not #moved. nby the Cheeba Cheeba is , it ythe target ., are copied. It not . The source bof the copy operation not be Cheeba 1,683 to 1,698 at the end of the b. The @and in the DOS are no in the Cheeba It is if Cheeba . It uses a complex encryption mechanism. of Cheeba are: Cheeba-B: Very to the Cheeba , the major difference Cheeba-B is are copied. Like Cheeba, the target t, the source the copy operation Cheeba-1691: hequivalent to the Cheeba-B listed 's main difference is it adds 1,691 - 1,706 +to the . March, Cheeba-1691B: to Cheeba-1691, adds 1,691 - 1,706 +to the . minor March, See: Chemmy PZPAPN Chemmy : Chemmy J: S: 1,691 - 1,706 7: PRhAK - The Chemmy . Its . Chemmy is a wof . /and . cChemmy Y, the Chemmy at the top of but &the , as sby the DOS by 3,392 ~12's #moved. nby the Chemmy the Chemmy , it are copied. The source not be the target the Chemmy rof 1,691 to 1706 at the end of the . The @and in the DOS not be Chemmy is an , and no the It is what Chemmy may do of Chemmy are: Chemmy-B: Chemmy-B is a minor of the Chemmy , and hequivalent. See: Cheeba PZPAPN Chemnitz : Chemnitz J: March, S: 767 - 781 7: PRhE - , NAV, {3.0+ The Chemnitz in March, . Its . Chemnitz is a , and Pnot yvery small . cChemnitz Y, the Chemnitz at the top of &the ), hooking ~21. , as sby the DOS Bby 848 ~12's not be moved. , the Chemnitz very small . rof 767 to 781 at the end of the b. The @and in the DOS . The in the 7in all Chemnitz "MsDos /MAND" "FMCIKLMOFR|" the Chemnitz PZPAPN Chile Mediera : Chile Mediera J: Ds AV Chile S: 1,527 7: PRhAK - , NAV, {3.0+ The Chile Mediera , and gChile. Chile Mediera is a wof . and . .. It interfers functioning of several packages by deleting or erasing the b(s). cChile Mediera at the top of &the ), hooking ~21. , as sby the DOS Bby 2,000 ~12's #moved. , the the copy of in the C: Qroot it was not the Chile Mediera , it /and . larger for any reason. /and . rof 1,527 at the end of the b. The @and in the DOS not be . The in the Chile Mediera "CPW fue hecho en Chile en "VNA CHILE MIERDA!" "C:\ "GUARD guard 1SCAN CHKVIRUS CLEAN TOOLKIT VSAFE CHKLIST.CPS" If the Zone of the listed in the last line of , the Chile Mediera Dor erase the M. If the happened to be write-protected L, a hang PZPAPN Chill : Chill J: S: 544 7: PRhCK - , NAV 3.05+, 12.2 9503+, {3.0+, 7.00+, 2.71+, 1.05 9503+ The Chill . Its . Chill is a wof . cChill at the top of the ), not moving ~12's and , as sby the DOS Bby 1,232 the , the bin the Gif it was not the Chill , it , or copied. by 544 at the end of the b. The @and in the DOS not be . The in the "[CHiLL TOUCH] you cannot touch phantoms" It is what Chill might do PZPAPN China : China J: March, j; TSR China S: 1,824 - 1,838 7: PRsA - , NAV 3.05+, 1.05+, {3.0+, The China in March, , and is probably China. The China is a wof . , and Pnot .. It is on the cChina Y, the China as a low TSR of 2,128 }21 and 24 nby the China , the China /and . , but not rof 1,831 the at the $of the rof 1,824 to 1,838 at the end of the b. The @and in the DOS not be Unlike many of the , China Pnot re . No in the 7in China It is what China may do See: PZPAPN CHR-869 : CHR-869 J: March, 4; "#" character [failure S: 869 - 1,348 7: PRhA - {3.0+ The CHR-869 in March, . Its . CHR-869 is a , but not cCHR-869 Y, the CHR-869 at the top of &the ), hooking ~21. , as sby the DOS Bby 3,120 ~12's not be moved. , the CHR-869 /and . rof 869 rof up to 1,348 +. In both cases, the at the end of the b. The @and in the DOS to the and . No the CHR-869 the CHR-869 notice , a "#" character Non the monitor ever a PZPAPN Chris : Chris J: beeping and fail to function Italy S: 463 7: PRaCK - 12.2 9503+, {3.0+ The Chris . It s to be gItaly. Chris is a wof . cChris Y, the Chris hooking ~21. sby the DOS not be , the Chris of 463 at the end of the The @and in the DOS to the @and . One in the "<CHRIS of S.i.t.>" The in the "Mary, . ti AMO!" second Nby the as a on the monitor, accompanied by beeping. the N, a hang may may not function as a PZPAPN Christmas Tree : Christmas Tree Tannenbaum, XA1, 1539 Endangered J: March, destruction Germany S: 1,539 7: PNCX - , NAV, : NAV, or The Christmas Tree, or XA1, in March by Christoff Fischer of West Germany. is an encrypting 1st of any year, the Christmas Tree activate, destroying the ) of Ms the Y. During the period A24th until 1st of any year, Y, the Oa full picture of a christmas tree. PZPAPN Chromo 1.0 : Chromo 1.0 J: S: 406 7: PNC - NAV 3.05 9503+, The Chromo 1.0 . Its . Chromo 1.0 is a of . , but not .. It Pnot yvery small . the Chromo 1.0 ythree . in the =or a higher level rof 406 at the end of the b. The @and in the DOS not be . The the 7in all Chromo 1.0 /.. [Chromo Glitch] v1.0" "Copyright (c) Lapse." It is what Chromo 1.0 of Chromo 1.0 are: Chromo 2.0: , Chromo 2.0 is a 407 of the Chromo 1.0 xthree . ain the =or a higher level rof 407 the end of the b. The @and the DOS not be The can be in the 7in all Chromo 2.0 "*M. X.. [Chromo Glitch] v2.0" "Copyright (c) Lapse." Chromo 3.0: , Chromo 3.0 is a of the Chromo 1.0 and Chromo 2.0 es. It at the top of &the , as sby the DOS Bby 672 it is , Chromo 3.0 385 at the end of the b. The @and in the DOS not be . The in all Chromo 3.0 "[Chromo Glitch] v3.0" "Copyright (c) Lapse." See: Lapse PZPAPN Cinderella : Cinderella J: j; TSR Finland S: 390 7: PRsCK - , NAV, The Cinderella in Finland in Cinderella is a wof . The Cinderella is Y, the as a low TSR of 560 nby the Cinderella is , it for any reason. by 390 The at the end of the b. The can be "cInDeReL.la" Cinderella Pn't do of Cinderella are: Cinderella-B: hequivalent to the has two differ. : Finland Cinderella.C: to the its 7to the $of all . It :the "CindyRul.ez 2" May, PZPAPN Civil War : Civil War J: The S: 244 7: PNC - , NAV, {3.0+ The Civil War , and gThe . Civil War is a wof . , but not .. Later qCivil War II v1.1 and Proto-T, listed under , are ws of . , and may .. The Civil War III v1.0 . Later s of the Civil War T, and listed under the TPE entry as software most likely identify the encryption engine rather present. the Civil War yone . in the rof 244 at the end of the b. The @and in the DOS not be The in the 7in all Civil War "Civil War, (c) Dark Helmet" "*.com" of Civil War are: Civil War II v1.0: , Civil War II v1.0 is a later of the Civil War The at the top of &the , as sby the DOS Bby 1,024 nby the Civil War II v1.0 is , it , but not rof 580 at the end of the b. The in the DOS not be The in the all "Civil War II v1.0,(c) 06/03/ : The Civil War II v1.1: , Civil War II v1.1 is a later of the Civil War II v1.0 The at the top of &the , as sby the DOS Bby 1,024 nby the Civil War II v1.1 is , it any reason. rof 599 at the end of the b. The @and in the DOS not be . The in the 7in all "Civil War II v1.1," "(c) 06/03/ Trident/Dark Helmet, The : The Civil War III v1.0: in March, , Civil War III v1.0 is a later of the Civil War The at the top of &the , as sby the DOS Bby 1,200 nby the Civil War III v1.0 is , it /and . for any reason. rof 901 the end of the b. The @and in the DOS not be . The in the 7in all "Civil War III v1.0," "(c) Dec , [ DH / TridenT ]" : The March, Civil War.158: , Civil War.158 is a 248 of the Civil War . It xall of the ain the by 248 at the end of the b. The @and in the DOS to the @and . The in the "*.com" "You're fucked" Civil War-282: , Civil War-282 (or Navigator) is a 282 of the Civil War Civil War-282 xone . bin the by 282 at the end of the b. The @and in the DOS not be . The in the all Civil War-282 "*.com" "The Navigator, (c) Dark Helmet" Civil War-Lockjaw: , Civil War-Lockjaw is on the Proto-T &. Civil War- Lockjaw at the top of &the , as sby the DOS Bby 4,096 by the rof 1,053 at the end of the b. The @and in the DOS not be . The in the 7in all utilities, utilities, in the Dd and the to the Lokjaw Lockjaw.499: , Lockjaw.499 is the Civil War-Lockjaw . It at the top of &the DOS , as sby the DOS Bby 4,096 nby the the , it by creating a companion . the same base companion . of 499 @and created. The companion not be hidden in the DOS . The can be in the ;ed in the companion . "Good Night" "Temp" the Lockjaw.499 can be manually tby deleting the 499 ,companion . ;the Lockjaw.507: , Lockjaw.507 is the Civil War-Lockjaw . It at the top of &the DOS , as sby the DOS Bby 4,096 nby the the , it by creating a companion . the same base companion . of 507 @and created. The companion not be hidden in the DOS . The can be in the ;ed in the companion . "Starry Night" "Bornio Baby" the Lockjaw.507 can be manually tby deleting the 507 ,companion . ;the Proto-T: , Proto-T is on the Civil War , and s to be an earlier of the Civil War II v1.1 . It Pnot match the description of the rumored Proto-T was circulated on BBSes starting in . Proto-T the top of &the and , as sby the DOS Bby 1,280 nby Proto-T in Proto-T is , it rof 695 at the end of the b. The and in the DOS not be . The in the 7in all Proto-T is sick." "[PROTO-T by Dumbco, INC.] Proto-T s access the Minstead of becoming access ends, the be inaccessible until the is re Ritzen: , Ritzen is on the Civil War . It at the top of &the DOS , as sby the DOS Bby 1,536 nby the , it /and . rof 1,087 at the end of the The @and in the DOS to the @and . The in the 7in all "Dedicated to Ritzen, our Minister of Education and Science. We are getting sick of your budget cuts so we hope get sick of .. (c) '93 by S.A.R. / TridenT" s of tby the Ritzen may find the cursor on the O, and fail to Oing the too big to fit in The Ritzen is buggy, re Y. As a , the eventually not be able to run any since very little See: Number 6 TPE PZPAPN Clone 2.0 : Clone 2.0 J: Hidden . acreated; executing . ; TSR Australia S: 833 7: SRsE - Spawning 12.2 9503+, {3.0+ The Clone 2.0 , and is Australia. It is a spawning or companion cClone 2.0 as a low TSR of 2,048 nby the One the , it by creating a hidden . the same base . The hidden companion of 833 +and its @and be the @and it was created. The can be ein all of the companion "Your PC is Cloned!!" "Clone ver 2.0..(c) Cataclysm Sydney, Australia .To Create and Mutate..." /LOVEV20. kfrequently PZPAPN Clonewar 00K T PTK : Clonewar J: Hidden . acreated; XC failure executing . S: 247 7: SNE - Spawning , NAV, 12.2 9503+, 1.05+ The Clonewar . It s to be gthe . Clonewar is a spawning or companion the Clonewar Y, the Clonewar yone . in the Gby creating a hidden, read- the same base . The hidden, companion of 247 +and its @and be the and it was created. The ein all of the companion The ;the of the companion b, and the Xextention. Clonewar may receive the XC failure" , and are ed to the DOS prompt. Clonewar Pn't do , but it Pinterfer operation. of Clonewar are: Acme: , Acme is a 923 the Clonewar . The companion creates of 923 the read- hidden attributes set. The same ein the s in . Acme not always Y, but s play a repeated a series of tones on the speaker while leaving the Qspinning. Clonewar 2: , Clonewar 2 is a 228 of the Clonewar . It bin the Yby creating a hidden 228 ,companion . the same base companion read- and hidden attributes set, and the . The in the Clonewar 2 Pnot ypast the third . bin any TrekWar: in Septembe, , TrekWar is on the Clonewar 2 . Its hidden companion aare 546 , and ;the "Beyond" "The rim of the star-light" "My love" "Is wand'ring in star-flight" "I know" "He'll find in star-clustered r "Love" "Strange love a star woman t Res." "I know" "His journey ends never" "His star trek" go on forever." "But tell him" "While he wanders his starry sea" "Remember, remember me." "[TrekWar] *. The the last , are the words to the theme song gthe Star Trek television series. PZPAPN Close : Close J: (failure on C: S: 662 - 672 7: PRhE - , NAV, The Close . Its . Close is a wof . eventually corrupt one of the arequired (the gthe C: The the Close Close at the top of &the , as sby the DOS Bby 784 the Close , it rof 662 to 672 at the end of the b. The in the DOS not be . Two in the Close "C:\IO.SYS C:\IBMBIO. "Close .." The Close was intermittently activate, at Othe "Close .." on the corrupt either C:\IO.SYS or C:\IBMBIO. /. The be hung. to re (the gthe C: fail as one of the hidden ais corrupted. uor replacing all the Close , the should replace the hidden aon the C: Qusing the DOS SYS PZPAPN CLS-853 : CLS-853 J: ; unexpected clears S: 853 7: PRhAK - , NAV, The CLS-853 . CLS-853 is a wof . /and . cCLS-853 Y, the CLS-853 at the top of &the ). It }08, 13, and 21. ~12's not be moved. , as the DOS Bby 1,120 the CLS-853 , it and . rof 853 at the end of the b. The @and the DOS not be . No are in the the CLS-853 \the %cleared unexpectedly The , "CLS", refers to symptom of the PZPAPN CMagic : CMagic CMagic.2015 J: j; DOS sounds speaker; ?seconds = "62" S: 2,015 7: PRhCK - 2.1.7+, ]2.17+, NAV 3.05 9503+, 12.2 9503+, 2.0+, The CMagic, or CMagic.2015, . Its . CMagic is a wof . .. It is a fast employs techniques to avoid detection. cCMagic at the top of the ), not moving ~12's and , as sby the DOS Bby 4,064 the the CMagic , it , or copied. rof 2,015 be hidden by the it is . The at the end of the The @and in the DOS to be the seconds field #set to "62". The in the "[CMAGiC/fX] By Mnemonix - v1.00 , unexpected sounds may be emitted gthe speaker. The DOS indicate Uon all of CMagic are: CMagic.2246: , CMagic.2246 is a later of the CMagic . Its is 4,544 +, hooking ~21. Like the , or copied. by 2,246 be hidden . The the end of all a. The @and in the DOS to be un the seconds field #set to "62". The in the "[CMAGiC/fX] By Mnemonix - v1.50 The sound of an ambulance siren may be emitted gthe speaker . The DOS indicate Uon all PZPAPN Cmdr Bomber : Cmdr Bomber J: May, j; TSR S: 4,096 7: PRhC - ]2.17+, The Cmdr Bomber in May, . It *, and is believed #written by the same person whom wrote the . Cmdr Bomber is unusual in the method in complicates the detection process for using certain s of technology. the Cmdr Bomber Y, the Cmdr Bomber as a low TSR of 2,752 nby the Cmdr Bomber the Cmdr Bomber , it by 4,096 +. The the ma number of garbled +at the in the [of the jumping to a location in the middle of the bwhere the 7. In effect, the in the middle of the b. The @and in the DOS not be The can be in the Cmdr Bomber /MANDER BOMBER WAS HERE" "[DAME] [DAME]" is not related the the Bomber Malaysia. PZPAPN Cobra : Cobra J: S: 400 7: PNCK - {3.0+ The Cobra . Its . Cobra is a wof . the Cobra yone . in the rof 400 at the $of the b. The in the DOS not be . The can be in the 7in all "Cobra" "*.exe" "*.com" It is if Cobra PZPAPN Cocaine : Cocaine J: S: 535 7: PNE - p2.10+, 12.2 9503+, 2.0+, NPot 2.17+ The Cocaine . Its . Cocaine is a wof . the Cocaine yall of the . in the 535 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all "Cocaine [CoKe](c) Metal Militia/Immortal Riot" "Love to LISA :)" "Cocaine's running thrue your vains" "It seems you "an addict" "*IR. PZPAPN Coffeeshop-1568 : Coffeeshop-1568 Coffeeshop 1 J: Sweden S: 1,568 7: PRhA - p, NAV, {3.0+ The Coffeeshop-1568 . It is probably gSweden. Coffeeshop-1568 is a of . /and . , but not .. It is not >Mutating Engine, are two as Coffeeshop and Coffeeshop 2 do use the mutating engine. See the entry for DAME for Coffeeshop The the Coffeeshop-1568 Y, Coffeeshop-1568 the top of &the ), not moving ~12's measured by the DOS Bby 1,824 nby Coffeeshop-1568 is , Coffeeshop-1568 /and . by 1,568 at the end of the b. The @and in the DOS not be . One in the 7in all "CoffeeShop" It is if Coffeeshop-1568 See: DAME PZPAPN Collor de Mello : Collor de Mello J: ?seconds = 62 S: 878 7: PNCK - ]2.17+, 12.2 9503+, The Collor de Mello . Its . Collor de Mello is a wof . the Collor de Mello access the Qand determine if the copy of in the C: Qroot t. If copy of .is not t, the yit at has checked, and possibly ., it go on to yone on the C: the Collor de Mello rof 878 at the end of the b. The @and in the DOS to be the seconds field #set to "62". No the 7in Collor de Mello It is what Collor de Mello PZPAPN J: N/A S: N/A 7: G - Generic The is not actually a specific , but a general category or group of can be genericly detected by software using ner technology. It was implemented by McAfee Associates in The es detected by the detection mechanism in are generally ws. es may be malicious. be detected as the include: Friday The 13th Hastings Possum Revenge Attacker Thimble Violetta New es may be detected by mechanism are not documented in . If you detect a , and it match one of the es, please submit a sample to the author of for analysis and inclusion in PZPAPN 9wealth 9wealth J: /& .ESE ?seconds set to "58"; TSR S: 800 - 815 7: PRsA - p2.10+, 12.2 9503+, {3.0+ The 9wealth . Its 9wealth is a wof . /and . , but not 9wealth as a low TSR of 2,048 nby the 9wealth , it and . rof 800 to 815 at the end of the b. The @and in the DOS to be , but it mthe seconds field set to "58". The in the 9wealth 9wealth of Independent States" It is what 9wealth PZPAPN Commy : Commy J: ?seconds S: 998 7: PNCK - , NAV, The Commy . It is gthe . Commy is a .. It 9PM (21:00). the Commy Y, the check the . If the is before 9PM, the pass control to the host and not . If The is 9PM or later, the yone . in the Gbefore passing control to the host the Commy rof 998 at the end of the b. The @and in the DOS to be the seconds field #set to 44, 46, 60, or 62. The in the 7in all Commy "The DIRTY /MY said .." "PATH=" It is what Commy PZPAPN : Como Como-Lake J: Italy S: 2,022 - 2,035 7: PNE - p, NAV, The Como, or Como-Lake, , and gItaly. Como is a wof . the Como may in the about a 1 in 7 probability. rof 2,022 to 2,035 at the end of the b. The @and in the DOS not be . The in the 7in Como is the" /O-LAKE" "(rel. 1.1)" "I'm a non-destructive developed to study the worldwide" "diffusion rate. I was released in by a software" "group near Como lake (north Italy)." "Don't worry about your data on M. My activity is limited "to auto-transferring into a. Perhaps you've got" "many t. It's your task to find and Dthem." "Best wishes." "Pres a key to Zthe PZPAPN Connie : Connie Connie.1761 J: Taiwan S: 1,761 7: PRhCK - ]2.17+, p2.10+, NAV 3.05 9503+, 12.2 9503+, 2.0+, 7.00+ The Connie or Connie.1761 , and s to be gTaiwan. Connie is a fast of . cConnie at the top of the ), not moving ~12's and , as sby the DOS Bby 3,520 the the Connie , it , or copied. rof 1,761 the at the end of the b. The and in the DOS not be . The in the Connie is <Connie> Written by Dark Slayer in Keelung TAIWAN" "P:\ It is what Connie of Connie are: Connie.1761.B: , Connie.1761.B is a very minor of the Connie . It is hequivalent to the . The last "#:\ : Taiwan Connie 2.0: , Connie 2.0 or Connie.2799 on the Connie . It's is 5,984 +, hooking ~21. It the Connie 2.0 2,799 to 2,953 at the end of the b. The in the DOS not be The in the is Connie v2.0 Written by Dark Slayer in Keelung, Taiwan" : Taiwan PZPAPN Copyright 00B T PTB : Copyright V1193 J: S: 1,193 - 1,208 7: PRhCK - , NAV, The Copyright . It is the . Copyright is a wof . The the Copyright Y, the at the top of &the , as sby the DOS Bby 1,200 nby the Copyright ~12's #moved. the Copyright , it 1,193 to 1,208 at the end of the a. Copyright @and in the DOS to the @and The can be in the Copyright "(C) 1987 American Megatrends Inc.286-BIOS" "(C) 1989 American Megatrends Inc" "(c) COPYRIGHT 1984,1987 Award Software Inc." "ALL RIGHTS RESERVED" The d due to the fake copyright . American Megatrends and Award Software had nothing to do ' creation. It is if Copyright of Copyright are: Copyright-1205: , Copyright-1205 is a 1,205 of the Copyright Its is 1,216 +, moving ~12's . Like the , it hooks it is , Copyright-1205 Y, adding 1,205 to 1,220 to the . The at the end of the b. The @and in the DOS to the @and . The can be in the Copyright-1205 7in all "(C) Software Developed by Maxi" "Lena All Rights Reserved" "(c) COPYRIGHT 1984,1987 Award Software Inc." "ALL RIGHTS RESERVED" Ungame: , Ungame is a 766 of the Copyright . Its is 768 +, and it hooks }08 and 21. , it /and . of 766 at the end of the mthe structure of . v. The @and in the DOS to the @and . The can be in the 7in all Ungame "Come On, no. 51, You is up." "Ungame(C)Dr" PZPAPN Cossiga : Cossiga J: j; video mode 5to 40 columns; don't Italy S: 875 - 899 7: PNE - , NAV, The Cossiga . It is gItaly. Cossiga is a the Cossiga Y, the Cossiga search the Gfor the . If an yit. it has completed , the switch the video mode to a 40 column O, and the block letters: "COSSIGA ?! NO GRAZIE! By Amissi dee Panoce (c) PADOVA" The host function, instead the ed to the DOS prompt. the Cossiga rof 875 - 899 +. The at the end of the . The @and in the DOS not be . The can be in the 7in Cossiga "*.*" "*.exe" "AXI TY" of Cossiga are: Cossiga-B: on the Cossiga adds 895 to 899 +to the . x. The at the end of the b. The the Cossiga-B "COSSIGA ?! NO GRAZIE!" "By Amissi dee Panoce (c) PADOVA" "AEGE/B V1.2" "*.* *.exe" The cthree Nas a in 40 column mode, a blank line between ever an : Spain May, See: Friends PZPAPN Costeau : Costeau J: S: 512 7: PRE - , NAV, {3.0+ The Costeau . Its . Costeau is a of . cCosteau Y, the Costeau in the DOS Data area in , hooking ~21. , as sby the DOS not be the Costeau , it rof 512 at the end of the b. The @and in the DOS not be . The can be in the 7in all Costeau "COSTEAU" "End.MZ" It is what Costeau may do PZPAPN Coyote : Coyote J: S: 1,103 - 1,117 7: PRhE - 12.2 9503+, The Coyote . Its . Coyote is a of . cCoyote at the top of the sby the DOS Bby 2,048 }14, 17 and 21 nby the the Coyote , it rof 1,103 to 1,117 at the end of the b. The @and in the DOS not be . The are in the 7in all Coyote "Ipan in xiktli meztli" "Coyote" It is what Coyote PZPAPN CPSU-2535 : CPSU-2535 Protecto-2535 J: S: 2,535 7: PRtA - , NAV, The CPSU-2535 , and is is a wof . /and . , but not cCPSU-2535 Y, the CPSU-2535 at the top of &the ), moving ~12's , as sby the DOS Bby 3,088 nby CPSU-2535 in the CPSU-2535 , it rof 2,535 the end of the b. The @and in the DOS not be . No in the It is what CPSU-2535 See: Protecto PZPAPN : CPW J: .Exe interference Chile S: 1,459 7: PRhAK - , NAV, {3.0+ The CPW . It is gChile. CPW is a wof . /and . cCPW Y, the CPW at the top of but &the ), hooking }16 and 21. , as sby the DOS Bby 2,000 +. Interupt 12's not be moved. , the copy of in the C: Qroot by the if it was not the CPW , it rof 1,459 at the end of the b. The @and in the DOS not be . The in the 7in all CPW "Este a fue hecho en Chile en por CPW." "C:\ "Feliz cumplea os CPW" "You are here CPW!" "ULS" the CPW for awhile, it activate. Upon , it Othe at the DOS prompt, one character at a . The 6of the replace the 6the is typing on the "You are here CPW!" The character substitution continues until the hits an ALT+key combination on the , such as ALT+C. An effect of the in the .Exe gthe kmay PZPAPN : Cpxk J: S: 1,000 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Cpxk . Its . Cpxk is a of . the Cpxk yone . in the by 1,000 at the end of the b. The @and in the DOS to the @and . The in the 7in all "CPXK" The "CPXK" starting in the ,of all PZPAPN Cracker Jack : Cracker Jack NeCrop J: May, Italy S: Varies , NAV 3.05+, 12.2 9503+, 1.05+ The Cracker Jack, or NeCrop, in May, W. Cracker Jack is an ICE it has release the 1963-B into the . See the entry for 1963 for a description of the dropped See: 1963 PZPAPN Crash : Crash 1075, Russ-1075, DBF blank Rumored J: S: 1,075 ], NAV, The Crash or 1075 has had many samples over the last few months. The samples were gthe . All samples of " do not on an XT or 386 personal computer. Instead, the crashes the sample Y. It may under configurations. PZPAPN Crazy Eddie : Crazy Eddie England J: England S: 2,600 - 2,715 7: PRtAKX - X, & NAV, The Crazy Eddie gEngland. Crazy Eddie is a multi-partite the /, and . The the Crazy Eddie ythe it was not t. The locates a copy of its 7on the cylinder 0, side 0, 2-4, and alters the . The Pn't , and t, the Crazy Eddie (s the the M. At , Crazy Eddie at the top of ), moving ~12's and , as sby the DOS Bby 17,408 }00, 10, 14, and nby the Crazy Eddie is , it /and . yone in the a DOS DIR 8is performed. Crazy Eddie of 2,600 to 2,715 at the end of the . The @and in the DOS . One in the 7in all "Crazy Eddie" Crazy Eddie is a destructive on Monday The 28ths as well as on 28th. On @s, it corrupt the PZPAPN Crazy Imp : Crazy Imp J: may dis S: 1,445 7: PRtCK - , NAV, The Crazy Imp . Its . Crazy Imp is a If the Crazy Imp not be able to detect it on are read into The the Crazy Imp Y, the Crazy Imp the top of &the 12's #moved. , as sby the DOS by 4,096 }1C and 21 nby the . The ed to by the /SPEC en variable, usually if it was not tby the Crazy Imp the Crazy Imp , it many ras the hides the is not rof 1,445 at the end of the b. The can be in the is not "Crazy imp" "v2.0" searlier, Crazy Imp is a Y, hides the r, and dis are read into [of an is not aware of in the vof all . on the out any %detected on the If you think you , power off the and re ga write-protected, L, and check the for the It is if Crazy Imp of Crazy Imp are: Crazy Imp-1402: as Crazy Imp v1.5, Crazy Imp-1402 is an earlier of the Crazy Imp . Its is 6,144 +, hooking }1C, 21, and 22. are rof 1,402 at the $of the b. The r, however, is hidden by the it is . The @and in the DOS to be un may "dis ". The seconds field in the #set to "62". The are in the Crazy Imp-1402 "Crazy imp" "v1.5" Crazy Imp-B: to the Crazy Imp has two differ. PZPAPN Crazy Priest : Crazy Priest J: S: 1,416 7: PNAK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, p2.10+, 2.0+, 2.71+, 2.17+ The Crazy Priest . Its . Crazy Priest is a wof . /and . It is what it may do the Crazy Priest yall of the . /and . in the of 1,416 at the end of the The @and in the DOS not be . The in the "Hello i'm Crazy Priest !!!" "HAPPY BIRTHDAY CRAZY !!!" "BOOT,MBR" "FAT" "by CRAZY*.* PZPAPN Creeper : Creeper Creeping Tormentor J: S: 475 7: PRhCK - , NAV, The Creeper, or Creeping Tormentor, . Its . Creeper is a of . The Creeper is Y, the Creeper at the top of &the ~12's #moved. , as sby the DOS by 1,024 }1C and 21 nby the the Creeper , it Y. If Y, it t. Creeper rof 475 at the $of the . The @and the DOS The Creeper looks for the Tormentor , checking for the "TORMENTOR". It is if Creeper of Creeper are: Creeper-B: hequivalent to the Creeper has one May, PZPAPN Crew-2480 : Crew-2480 2480, V2480 J: (s; graphic Finland S: 2,480 7: PNCK - , NAV, The Crew-2480 . It was in Finland. is a non- wof . over 10K in . It the Crew-2480 Y, the yone . bover 10K in if the month is through May. tby the , the by 2,480 at the end of the . The @and in the to the @and 'the a Crew-2480 vmay Later [of the same may be successful. During the months of through A, Crew-2480 Yduring period, the Oa formatted making reference to the Wan Cracking Crew". of Crew are: Crew-2480 B: on the Crew-2480 Pnot Othe graphic, it is present in the . Instead, a hang upon Crew-2480 C: on the Crew-2480 minor PZPAPN : CRF J: S: 270 7: PNCK - NAV 3.05+, 1.05 9503+ The CRF . Its Jare . CRF is a wof . the CRF Y, the yall ain the Qand G. If by 270 at the end of the . The @and in the DOS to the @and . Two in the a: "OZR3" and "*. It is if CRF PZPAPN Criminal : Criminal J: j; TSR; S: 2,615 7: PRsCK - , NAV, The Criminal . Its . Criminal is a wof . The the Criminal Y, the Criminal a low TSR of 480 }21, D0, and EA. An TSR of 3,712 |ed, nany , the Criminal ythe cthree . ain the sample of Criminal by the author of , it Pnot . Further, it is yious gthe sample, not d samples. the Criminal by 2,615 +. The at the end of the . The @and in the DOS Criminal may notice the DOS indicate .has a s if the It is if Criminal of Criminal are: Criminal-B: to the one . Pnot ymore three . in a G. Its is 470 +. Nineteen +differ gthe PZPAPN Cruncher : Cruncher Cruncher 1.0 J: The S: N/A 7: !RhC - Compressing The Cruncher, or Cruncher 1.0 and is gThe . Cruncher is a compresses the x. As a , most , depending on the bcontent and before the compression was applied by the cCruncher Y, the Cruncher at the top of &the ), hooking ~21. , as sby the DOS Bby 2,352 ~12's #moved. the Cruncher , it .and very small . usually were smaller 3K may show a slight . The @and in the DOS not be . The in the 7in the Cruncher a, and are not since the compressed along the host "[ MK / Trident ]" "Cruncher V1.0 Cruncher Pn't to do 'compress . its presence may not functioning of Cruncher are: Cruncher 2.0: on the Cruncher Cruncher 2.0 is a later of the yand compress . as well as . Its is 4,256 hooking ~21. It :the are not "*** CRUNCHER V2.0 *** Automatic bcompression utility" "Written by Masud Khafir of the TridenT group (c) 31/12/92" "Greetings to Fred Cohen, Light Avenger, and Teddy Matsumoto" : The Cruncher 2.1: on the Cruncher 2.0 Cruncher 2.1 asks the 's permission to and start compressing a. Its Its is 5,056 +, hooking :the not "*** CRUNCHER V2.1 *** Automatic bcompression utility" "Written by Masud Khafir of the TridenT group (c) 23/8/93" "Greetings to Fred Cohen, Light Avenger, and Teddy Matsumoto" : The PZPAPN Crusher : Crusher J: ; cross-linking of The S: 2,048 7: PRhEX - The Crusher . It is . Crusher is a wof the ) and . . It employs techniques to avoid detection. The the Crusher the Crusher ythe . It writes an un Tcopy of the 7to Side 0, Cylinder 0, 2 thru 5, and alters the Ythe next gthe M. It Pnot The next gthe M, the Crusher at the top of but &the , as sby the DOS by 2,064 nby Crusher in the Crusher , it rof 2,048 be hidden is active in . The in the DOS not be . The in the "Crusher" "You are damned" "Bit Addict / Trident" The Crusher Othe it is cross-linking of PZPAPN : CSL MicroElephant V6 j; "Bad exist Eastern S: 457 7: PRtCK - 1, NAV, The CSL, or MicroElephant, is a wof . cCSL Y, the at the top of the ~12's #moved, however to be no sby the DOS CSL has , it Y. If Y, it t. CSL rof 457 at the end of the b. The @and in a DOS not be . The can be in the "Microelephant V6 by CSL" CSL may \the "Bad ", and a to the DOS prompt, the over 64K in . The . themselves mnot but it is the ing the CSL Pn't do and interfer of CSL are: CSL Beta: CSL Beta, or MicroElephant Beta, is to the CSL , CSL Beta adds 381 +to the . not restore the host ?in the DOS , so a be noted. It :the "26.07.91.Pre-released Microelephant by CSL". CSL V4: CSL V4, or MicroElephant V4, is to the CSL , CSL V4 adds 517 to the . x. The @and in the DOS . The dtwo in the "Microelephant V4" and "by CSL". CSL V5: CSL V5, or MicroElephant V5, is to the CSL , CSL V5 adds 457 +to the . x. It :the in its "Microelephant V5 by CSL". PZPAPN Curse : Curse Smiley Worm J: corrupted Northern California, S: N/A 7: BRt - , NAV, : CleanUp, or DOS SYS on The Curse reported in samples did not ing to be incomplete. The cworking sample of the Curse a public domain vat a college in Northern California in . Curse (is a 360K 5.25 inch , as well as . It is a aling it is The the Curse , the Curse ythe . The mmarked four bad in the , and transferred the and three bad . The tby the . At the Curse , allocating 4,096 gthe top of &the ~12's moved. , the Curse y360K 5.25 inch are accessed for any reason. As M, the marks four bad, and places the and three xthe Curse (may notice upon mthe hours set to zero, instead of the actual value stored in CMOS for the clock. For example, if the clock on (is 21:30.00, (ing Curse M, the read 0:30.00. Curse (hides the von 360K 5.25" Hing to read the to the . As a not be able to detect the Curse . It Pnot, however, hide the vof the PZPAPN Curse IV : Curse IV J: S: 400 7: PRaAK - 12.2 9503+, 2.0+, 2.17+ The Curse IV . Its . Curse IV is a wof . and . cCurse IV in a "hole" in al , as sby the DOS not be . The , the Curse IV /and . by 400 at the end of the b. The @and in the DOS not be . The in the in all Curse IV "CURSE IV - Dedicated to Eve" The Curse IV a, adding an vby the . It are larger 64K in PZPAPN : CV4 1.0 J: S: 321 7: PNCK - , NAV, {3.0+ The CV4 . Its . CV4 is a of . the CV4 Y, the CV4 yone in the G. If it may the CV4 rof 321 at the end of the b. The @and in the DOS not be . The can be ein the 7in all CV4 /VIRUS 1.0" The Non the monitor CV4 Pn't do Oits PZPAPN Cyber : Cyber Intrep-1092 J: S: 1,092 - 1,106 7: PNAK - , NAV, {3.0+ The Cyber . It s to be gNorth America. Cyber is a of . /and . the Cyber Y, the Cyber search the Gto locate an . If one is e, the xit, and Zruns. If an bwas not e, the search the for an y, and the Cyber rof 1,092 +. . rof 1,092 to 1,106 +. In both cases, the at the end of the b. The @and in the DOS not be The can be ein the Cyber all "*.com *.exe" "A trip into the realm of intelligent replication..." The Cyber Pn't do of Cyber are: Cyber-946: A 946 of the Cyber xone . in the rof 946 at the end of the b. The @and in the DOS not be . The can be in the 7in all Cyber-946 "*.com *.exe" PZPAPN Cybercide : Cybercide Cybercide-2299 J: j; DOS DOS DIR 8performance slowed S: 2,299 7: PRhCK - 12.2 9503+, The Cybercide . Its . Cybercide is a cCybercide Y, the Cybercide at the top of &the ), not moving ~12's , as sby the DOS Bby 4,800 09, 1C, and 21 nby Cybercide in the Cybercide , it , as well as included as a part of the target of a DOS DIR the Cybercide of 2,299 be hidden the . The at the end a. The @and in the DOS not be . The can be in the 7in all Cybercide "... I SHALL FEAR NO EVIL ..." ">>> A.N.O.I <<<" "**CYBERCIDE** -- FLOATING THROUGH THE VOID" "iS AROUND!" "* *I* *h*e*r*e*b*y* *p*r*o*c*l*a*i*m* *t*h*i*s* *c*o*m*p*u*t*e*r* *a*s* *t*h*e* *p*r*o*p*e*r*t*y* *o*f* *A*.*N*.*O*.*I*" "*!*!* *A*L*L* *H*A*I*L* *D*A*R*T*H* *V*A*D*E*R*!*!*" "-=CYBERCIDE=- 01-30- * COPYRIGHT (C) A.N.O.I DEVELOPMENT" The asterisks (*) in the fifth and sixth are actually a character, or hex 0F. s of Cybercide may notice performance of the DOS DIR 8is sluggish due to the aincluded in the 8output. the DOS Uon all Cybercide is of Cybercide are: Cybercide-2299B: , Cybercide-2299B is to the Cybercide The in the 3to the "... I SHALL FEAR NO EVIL ..." ">>> A.N.O.I <<<" "**CYBERCIDE** -- FLOATING THROUGH THE VOID" "iS AROUND!" "* *I* *h*e*r*e*b*y* *p*r*o*c*l*a*i*m* *t*h*i*s* *c*o*m*p*u*t*e*r* *a*s* *t*h*e* *p*r*o*p*e*r*t*y* *o*f* *N*A*Z*I*S*.* *" "*H*E*I*L* *H*I*T*L*E*R* *!*!*!*" "COPYRIGHT (C) -93 A.N.O.I DEVELOPMENT" The asterisks (*) in the fifth and sixth actually a character, or hex 0F. Cybercide-2299B mthe ?seconds field in the DOS 3to "24". : Sweden MLP-1321: , MLP-1321 is on the Cybercide . MLP-1321's is 1,600 +, hooking ~21. are for any reason. by 1,321 be hidden The at the end of all The @and in the DOS to the and . The in the MLP-1321 "simple simon met a pieman going to the fair said simple simon to the pieman let me take your ware" "- my little pony - copyright(c) Cruel Entity and A.N.O.I. -" ">>> A.N.O.I <<<" , the DOS Uon all in a hang. : Sweden See: DNR PZPAPN CyberTech : CyberTech CyberTech-A J: ; removal of The S: 1,066 or 1,076 7: PNCK - , NAV, 12.2 9503+, The CyberTech, or CyberTech-A, The s to be The . CyberTech is a wof . the CyberTech Y, the CyberTech yone . in the 1,066 or 1,076 at the end of the rd in by 1,066 had 10 +of validation by the removed. The @and in the DOS The CyberTech Othe "CyberTech - Strain A (C) John Tardy of Trident" A31, , the Othe and dis ythe bthe is executing "The previous year you tby a out knowing or removing it. To be gentle to you I decide to remove myself gyour . I suggest you better buy of McAfee to ensure yourself complete security of your precious data. Next could be a malevolent May I say goodbye to you now All of the in the , as is the "chklist.cps" CyberTech may interfer the functioning of the Central Anti- of CyberTech are: CyberTech-222: on the CyberTech xone . rof 222 at the end of the b. The @and in the DOS not be . One tech in the : The CyberTech-501: as Ice Cream, CyberTech-501 in the rof 501 at the end of the b. The @and in the DOS not be the seconds field set to "02". The in the CyberTech-501 "I scream, you scream, we both scream for an ice-cream!" "John Tardy" : The CyberTech.552: CyberTech.552 xone . in the rof 552 the end of the b. The @and in the DOS not be the seconds field #set to "02". The in the CyberTech.552 "Mourners of a dying world" "Too late to reconcile" "Into Everlasting Fire" "Can't you see it's Satan's world" "TRIDENT" "John Tardy" CyberTech-654: CyberTech-654 xone . in the rof 654 the end of the b. The @and in the DOS not be the seconds field #set to "02". The in the CyberTech-654 "(C) John Tardy / Trident" "Satan Spawn, the Caco-Daemon - Mor(T)alities Death" : The CyberTech-B: on the CyberTech adds 1,205 or 1,215 +to the . the exception of .. In the case of ., it part of the slack (hex 00) area in the be no r. It Os the "CyberTech - Strain B (C) John Tardy of Trident" The A31, Othe same as the and dis ythe is executing. : The (?) PZPAPN Cysta : Cysta Cysta-2711 J: j; Hidden amay in DIR; Poland S: 2,711 - 2,726 7: PRhAK - 2.1.7+, {3.0+ The Cysta, or Cysta-2711, . Cysta is a wof . /and . .. It is a fast are for any reason. cCysta Y, the Cysta at the top of but &the ), not moving ~12's , as sby the DOS Bby 2,736 nby the , the .if it was not the the Cysta , it for any reason. rof 2,711 to 2,726 at the end of the The @and in the DOS not be . The in the 7in all Cysta "(C) Cysta Inc." XIBMDOSIBMBIOMSDOSIOCONFIGCOUNTRYPSQVW" "GAME" "ENJO" "DZOJ" "DZOY" "PLAY" "FUCK" "DUPA" "PORNO" "JOY" "GRY" "RETAL" "GIER" "HUJ" "MKS" "VIRUS" "WIRUS" "SEX" "SONG" "GIF" "WOLF3D" "F19 \" "Enter NEW Password :" "NEW Password "ERROR, Press Any Key "Use Maximum 6 ASCII "ESC:Exit" "Hit <ESC>, If you want to: It is what Cysta may do alter the hidden battribute on hidden the DOS of Cysta are: Cysta-2954: A 2,954 of the Cysta is 2,976 hooking ~21. Cysta-2954 adds 2,954 to 2,969 +to the x. The in the XIBMDOSIBMBIOMSDOSIOCONFIGCOUNTRYPSQVW" the Cysta , the hidden attribute may be reset on a, making the in the DOS : Poland Cysta-8045: A 8,045 of the Cysta is 8,064 hooking ~21. Cysta-8045 adds 8,045 to 8,060 +to the x. The in the "(C) By Rycho Rak" XIBMDOSIBMBIOMSDOSIOCONFIGCOUNTRY /MAND" "MKS-VIRMKS_VIRMKSVIRMKS-DEMOMKS_DEMOMKSDEMOPSQVW" the Cysta , the hidden attribute may be reset on a, making the in the DOS : Poland PZPAPN : Dad J: j; TSR; Argentina S: 897 7: PRsC - , NAV, The Dad Iin Argentina in May, . It is a wof . , but not cDad Y, the Dad as a low TSR of 1,232 +. It hook }21 and F8. becoming yany . Y, and Othe on the "DAD WAS HERE" the Dad rof 897 +. The at the of the be no 5to the @and in the DOS is unable to determine it has b, so it a, adding an +for The can be ein the 7in all Dad "Argentina!" /MAND /A:TMP$$TMP. "Que dia es hoy?" "PRIMERO DE ABRIL!!!" "(C) DAD DAD WAS HERE" PZPAPN : Dada J: may fail to S: 1,358 - 1,372 7: PRsE - , NAV, The Dada . Its . Dada is a of . The the Dada as a low TSR of 2,048 +. Most mapping utilities show it as an in the of the in- 8interpretor. and 21 nby Dada in . The alter the ceiling for conventional , so mabout 64K of conventional . The remaining conventional the Dada , it rof 1,358 to 1,372 at the end of the . The @and in the DOS to the @and . The can be in the "PATH=. As a of the Dada ' alteration of conventional [of . over 64K in may not Zin the way the expects. Unpredic Umay PZPAPN Damage : Damage Damage-B J: May, effects; " Italy S: 1,063 7: PRhAK - , NAV, The Damage Win May, . Damage is on the Diamond of V1024. It is a wof . /and . cDamage Yon a Damage at the top of &the , as measured by the DOS by 1,120 }08 and 21 nby the Damage is , it /and . over 1K in Y, it by 1,063 at the end of the b. The however, be hidden if Damage is . If the in the Gwas 12:00a, its be blank Nif Damage is The DOS not find Uas it Damage is Damage is 14:59:53. At ma large, multi-color diamond in the center of the O. The diamond break up into smaller diamonds shoot around the cleaning off the Occasionally, the Damage format a section of the formatting to read a bmay damaged, or if the to write to one of areas. Damage mthe near the end of the "DAMAGE of Damage are: Damage-B: Damage-B is a 1,110 of Damage, .. The be 1,152 Two can be "Jump for joy!!!" "DAMAGE-B!!" Damage-B may be detected as Lucifer by as it is very See: Alfa Lucifer V1024 PZPAPN : DAME Coffeeshop, Coffeeshop 2, CryptLab, DarkStar, Dedicated, Dedicated 2, Dedicated 3, Encroacher, Encroacher 2, Fear, MTE, MTE Spawn, MTE Spawn 2, PC Weevil, Questo J: Mwrite failures; warm re S: Over 3,000 7: PNCK - p, NAV, The DAME, or >Mutating Engine, was . DAME is not actually a , but rather a polymorphic encryption engine is used as part of the entry. The encryption produced by the encryption engine is extremely complex, no more three +remaining constant d samples. As a engine can be identified by the presence of the encryption engine . One has be included in separate entry uses engine: Pogue . e(s) using DAME are: Coffeeshop: , Coffeeshop is a wof . uses a modified of the >Mutating Engine. It at the top of , as sby the DOS Bby 12,288 +, and , it Y, adding 3,820 - 3,974 . The at the end of a. The in the it is not "Amsterdam - COFFEESHOP!" : Amsterdam, The Coffeeshop 2: , Coffeeshop 2 is on the Coffeeshop . Its usage of is the same as for the Coffeeshop , it Y, adding 3,845 - 3,977 . The at the end of a. The in the are not in most "Amsterdam = COFFEESHOP!" : Amsterdam, The CryptLab: The CryptLab s to be gthe . CryptLab is a wof . CryptLab Y, the search the Gfor y. It may yup to eight . [of an the CryptLab rof 2,982 to 3,227 at the end of the b. The in the DOS not be . The in most samples of the "CryPtLAB: THE SELECT CHOICE FOR ALL YOUR VIRUS AND TROJANRESEARCH NEEDS!" "-URNST KOUCH." DarkStar: A DarkStar yup to four . in the Y. If G, it may DarkStar rof 2,971 to 3,235 +. The at the end of the b. While usually be fully ;an un Tcopy of the Tsamples ;the "NightMare Labs, United Kingdom" "- DarKStaR -" : England Dedicated: A Dedicated yup to four . in the Y. If G, it may DAME rin excess of 3,100 +. The at the end of the b. While usually be fully ;an un Tcopy of the Tsamples ;the "We dedicate little to Sara Gordon who wanted to her." Dedicated Pnot do Dedicated 2: , Dedicated 2 is on the Dedicated . Unlike the Dedicated , Dedicated 2 is a of . . It at the top of &the , as sby the DOS Bby 5,120 Dedicated 2 adding 3,582 to 3,758 The at the end of the b. The @and in the DOS not be . The in the 7, and not be in most "We dedicate little to Sara Gordon," "who wanted to mit corrected--" "learn to before you touch M_t_e" Dedicated 3: , Dedicated 3 is the Dedicated 2 . Dedicated 3 is a wof . /and . . Its is 5,120 +, hooking ~21. Dedicated 3 /and adding 3,539 to 3,717 The at the end of the b. The @and in the DOS to the @and . The in the 7, and not be in most "We dedicate little to Sara Gordon," "who wanted to mit corrected--" "learn to before you touch M_t_e" Encroacher: A Encroacher yone . in the Y. If G, it may Encroacher rof 3,227 to 3,483 at the end of the be no 5to the @and in the DOS . The are usually in the 7in Encroacher "ENCROACHER is here" /chklist.cps C:\ 1\VSAFE. Encroacher may interfer the functioning of Central anti- it is |ed in its default |ation Encroacher 2: to Encroacher, minor Fear: A w, Fear yup to four . in the Y. If G, it may Fear rin excess of 3,000 at the end of the be no 5to the in the DOS the Fear Tcopy of the Fear samples ;the "Fear Created 2-5-92 by PkaHerONE" /You mnothing to fear except FEAR the Fear \warm ring unexpectedly, or general failure Uwriting to a non-existant all the ain the hang March, MTE Spawn: , MTE Spawn is a non- spawning or companion uses the Dark Avenger Mutating Engine for its encryption. yone . in the G, creating a 6,666 to 6,746 the same base companion mthe read- , and hidden attributes set, and its @and be the @and . The not be [of an MTE Spawn in a hang five . ain the the companion not be Yunder of DOS due to a minor bug in . To dis vof MTE Spawn, simply Dthe hidden companion MTE Spawn 2: , MTE Spawn 2 is a non- spawning or companion uses the Dark Avenger Mutating Engine for its encryption. yone . in the G, creating a 2,754 to 2,894 the same base companion mthe read- , and hidden attributes set, and its @and be the @and . The not be [of an MTE Spawn 2 in a hang five . ain the the companion not be Yunder of DOS due to a minor bug in . To dis vof MTE Spawn 2, simply Dthe hidden companion PC Weevil: A PC Weevil ysix . in the Y. It Pnot PC Weevil rof 3,139 to 3,299 at the end of the be no 5to the @and in the DOS . The are usually in the 7in PC Weevil "PC Weevil: Still the select choice for your research needs" "MtE 0.90" kfrequently Questo: A Questo yfour . in the Y. If G, it may Questo rof 2,971 to 3,227 at the end of the be no 5to the in the DOS . The are usually in the 7in Questo "Questo sistema stato infettat*. "MtE 0.90" See: Groove Pogue PZPAPN 2PT>4 Amilia, Black Avenger, Boroda, Eddie, Diana, Rabid Avenger, VAN Soft, PS!KO, Evil Men, Dark Quest J: , 1989 TSR; . X, .SYS Davis, California, S: 1,800 7: PRsAK - , NAV, : CleanUp, ], NAV or >was in the at the University of California at Davis. It X, and overlay .. The into , becoming , and is extremely prolific at uany execu for any reason. includes using the DOS COPY and XCOPY 8s to copy a, both the source and the target end up rd by 1,800 The Pperform malicious damage. The maintains a counter in the Rsixteenth t, the randomly on the a portion of the 7. If the randomly selected is a portion of a or data b, the or data be corrupted. and data #corrupted by a are permanently damaged and cannot be repaired since the is lost. If you are >, shutdown your computer and ga Write Protected Lfor the carefully use a dis dall instructions. Be sure to mfinished dis The :the words: "The copyright 1988, 1989", as well as the written in the city of Sofia. Eddie lives where in bears no resemblance or ity to the es, even >are: Amilia: on the , Amilia adds 1,614 to the . /and . x. It .. The at the end of , as sby the DOS be 1,632 n. The Amilia _2nd, at becoming , and a hang "AmiLiA I Virii - [NukE] Released Dec91 Montreal (C) NukE Development Software Inc." 'the , the can be in the "antideb" "AmiLiA I Virii - [NukE] i99i By Rock Steady/NukE" : Montreal, Canada Boroda: >-D, one : "B O R O D A". It adds 1,800 +to the x, and 1,800 to 1,814 +to the , as sby the DOS be 3,696 }21 and 27 n. As >, it modify the , and of the a copy of , thus damaging >.1E: >-D, 1,800 +to the . x, and 1,800 to 1,814 +to the In both cases, the at the end of the . The "Eddie lives... where in "Diana P." was written in the city of Sofia" "(C) 1988-89 >.1E notice be slightly , and amay "slowly corrupted. ., the @'s format may be g"mm/dd/yy" to " y#mm#dd", and the ":" character in the 3to " >.Major: on the adds 1,832 +to the . x, and 1,832 to 1,846 +to . . In both cases, the at the end of the The "Written In turbo Assember v2.84" "(C) MajorBBS Patch v1.0" Was Written To Patch The Backdoor Of MajorBBS" "(C) by Leroy Janowa" >.Major notice be slightly , and amay "slowly corrupted. >.Shyster: on the is 3,712 +, hooking }21 and 27. It adds 1,802 +to the . x, and 1,802 to 1,816 +to . . In both cases, the at the end of the b. One can be in the "Shyster" >.Shyter notice be slightly , and amay "slowly corrupted. >-B: Very to the , the major difference is be re adding 1,800 +to the in high instead of low TSR. ein the 7include: "Eddie lives... where in "Diana P." was written in the city of Sofia" "(C)1988-1989 >-C: Very to the adds 1,800 to 1,814 The copyright notice is different, having 3to: "(C) 1988-89 >-D: is very adding 1,800 to 1,814 a. It has the same copyright notice as >-Romanian: gRomania. The major , adding 1,800 to 1,814 +to the . It :the same : Romania >1801: to the , the major difference is has an effective of 1,801 +, one ,longer . Like >-B, it at the top of instead of %a low TSR. It not, however, re P. The same and >-1693: The >-1693 is a 1,693 of the . Its is 3,696 +at the top of &the ), hooking }21 and 27. It adds 1,693 the . x, and 1,693 to 1,707 +to . . The at the end of the and the @and in the DOS not be Pnot hide the r. The as the keeps a counter . No in the frequently hang the >.1797: The >.1797 is a 1,797 of the . Its is 3,696 +at the top of &the ), hooking }21 and 27. It adds 1,797 the . x, and 1,797 to 1,811 +to . . The at the end of the and the @and in the DOS not be Pnot hide the r. The as the keeps a counter . The in the "McAfee and Associated (C) "Diana P." was written in the city of Sofia (C) 1988-89 >-1799: The >-1799 is a 1,799 of the . Its is 3,696 +at the top of &the ), hooking }21 and 27. It adds 1,799 the . x, and 1,799 to 1,813 +to . . The at the end of the and the @and in the DOS not be Pnot hide the r. The as the keeps a counter . The in the "Francis lives...in Hong Kong!" "Diana P." was written in the city of Sofia (C) 1988-89 >.1800.Satan: The >.1800.Satan 1,800 of the . Its is 3,696 +at the top of ), hooking }21 and 27. It adds 1,800 +to the . x, and 1,800 to 1,814 to . . The at the end of the b, and the @and in the DOS not be Pnot hide the r. The as the keeps a counter . The in the "Satan * Satan Ver 2.09" "- Satan Written by Mad Satan in TAIWAN. =Ver 2.09=" >-1813: The >-1813 is a 1,813 of the . Its is 3,696 +at the top of &the ), hooking }21 and 27. It adds 1,813 the . x, and 1,813 to 1,827 +to . . The at the end of the and the @and in the DOS not be . The >-1813 hide the rd in by up to 16 unable to determine it has b, so it ends up re a. Re 1,813 +to the ris not hidden by the . The as the keeps a counter . The in the "Eddie lives... where in "Diana P." was written in the city of Sofia (C) 1988-89 Dark Quest: The Dark Quest is a 1,800 the . Dark Quest's is 3,696 +at the top of &the ), hooking }21, 22, and 27. It adds 1,800 +to the . x, and 1,800 to 1,815 +to . . The at the end of the b, and the @and in the DOS not be hide the r. The as the keeps a counter . The can be in the 7in all Dark Quest "Never buy Quest computers again!" "iana P." is not dangerous stamp." "All new software seriosly danger" Evil Men: >-D, "The evil men do !" was written in the city of Sofia" "(C) 1988-89 "Diana P." Kang Yong: The Kang Yong is a 1,947 of Dark Avenger. Unlike members of group, it re . Kang Yong's 3,984 +at the top of &the DOS ), hooking }21 and 27. It adds 1,947 +to the . x, and 1,947 to 1,961 +to . . Re add an 1,947 +. The at the end of the b, and the @and in the DOS not be Pnot hide the r. The as the keeps a counter The can be in the "If you are a thieve man , lives... where always!" "You must "good man!" "Kang Yong II" was adjustted in 'Commputer Home' of KOREA" "(C) 1988-89 ,LSR+KYL : Korea Mercury: The Mercury is a 2,829 of the Dark Avenger . Its is 5,808 +at the top of &the ), hooking }08, 21 and 27. It adds 2,829 +to the . x, and 2,829 to 2,843 +to . Mercury hides it is . The at the end of the and the @and in the DOS not be . The not be . The the "If You Liked , Call Asaf, At +972-4-225288!" "Written by Jasper, and Dedicated to Freddie Mercury." of a Mercury vinclude a sluggish response to DOS DIR 8s, DOS Uon all , as well as random on the PS!KO: The PS!KO >was . It is gthe . It addes 1,803 to 1,817 x. The can be "The Ps!ko "The Ps!ko - Written in the USA," "(C) by SiTT and The Viola" of an vby PS!KO include . failing to , and frequent PS!KO-1459: The PS!KO-1459 on the PS!KO-1687 &. PS!KO-1459's 3,040 +at the top of &the DOS ), hooking }21 and 27. It adds 1,459 +to the . x, and 1,459 to 1,473 +to . . In both cases, the at the end of the b, and the @and in the DOS not be hides the . The DOS Uon all PS!KO-1459 is are no in the PS!KO-1687: The PS!KO-1687 on the PS!KO-1800 &. PS!KO-1687's 3,472 +, hooking }21 and 27. It adds 1,687 +to the . x, and 1,687 to 1,701 +to . . In both cases, the at the end of the b, and the @and in the DOS not be Pnot hide the it is are no in the PS!KO-1800: The PS!KO-1800 on the PS!KO . PS!KO-1800's is 3,696 hooking }21 and 27. It adds 1,800 +to the . x, and 1,800 to 1,814 +to the . x. In both cases, the at the end of the b, and the @and in the DOS not be Pnot hide the it is . The can be "The Ps!ko "SiTT" "The Ps!ko - Written in the USA, by SiTT and The Rabid Avenger: Rabid Avenger was in the the . Its portion is at the top of &the ), and is 3,696 }21 and 27 are by 1,800 by 1,806 to 1,823 +. In both cases, the at the end of the ein the 7include: "<- ks to the "Eat us!" "(C) RABID International Development Corp!" Killer Test" so as to avoid detection by utilities are able to detect Sneaker: Sneaker was . Its . The in the "Nadia FOTTIT!!...By the Sneaker" "Diana P." was written in the city of Sofia (C) 1988-89 by 1,800 at the end of the by 1,800 to 1,814 at the end of the VAN Soft: VAN Soft was Win May, *and is on the . The major now: "V.A.N. Soft & M PRESENT:SOFIA" "VAN& by 1,800 at the end of the by 1,806 to 1,824 at the end of the See: 1963 CB-1530 Jericho Outland QP3 V651 V1024 V2000 PZPAPN Dark End : Dark End J: j; TSR; $of C:; interfers S: 1,188 7: PRsAK - , NAV, The Dark End . Its . Dark End is a wof . /and . cDark End Y, the Dark End as a low TSR of 1,200 +, hooking ~21. It as part of the 8interpretor in many mapping utilities. the Dark End , it and . rof 1,188 at the end of the b. The @and in the DOS not be . The can be in the 7in all Dark End "(c) Dark End." The Dark End 15th of any year. At , the of the C: the Dark End interference qunexpected clearing of the and the cursor flickering. kmay unexpectedly. PZPAPN Dark Lord : Dark Lord Dark Lord-B, ManOWar, T J: May, S: 923 7: PRhAK - , NAV, The Dark Lord in May, . It is *. Dark Lord is a wof . The Dark Lord is Y, the at the top of &the , as measured by the DOS by 1,616 }21 and 24 nby Dark Lord. Dark Lord is , it /and . by 923 to 936 at the end of the .is an exception, r, the the stack space on the end of Dark Lord ;the "Dark Lord, I summon thee! MANOWAR" The second near the end of Dark Lord Pnot on 386-class . On those [of an in a hang. It is if Dark Lord of Dark Lord are: Dark Lord-B: Very to Dark Lord, gthe NCSA collection differs in 1 ,internally gthe Lord the goes , if it was not already the exception of by 921 - 935 See: T PZPAPN Darkray : Darkray J: The S: 1,525 7: PRhE - 12.2 9503+, The Darkray , and is gThe . It is a wof . written by the Trident writing group. cDarkray Y, the Darkray at the top of &the ), not moving ~12's , as sby the DOS Bby 1,888 13 and 21 nby the the Darkray , it rof 1,525 at the end of the b. The @and in the DOS not be . The in the 7in all Darkray It is what Darkray See: Flue Trident PZPAPN Darth Vader : Darth Vader Darth-1, Darth-2, Darth-3, Darth-4, Darth-5 Research J: May, S: 200 - 345 7: ORCK - , NAV, The Darth Vader es were in May, Darth Vader is actually a ^of four are very . All of es are are copied. a Darth Vader Darth Vader . Latter, as . are copied, the target . Depending on the particular Darth Vader , the target may meither the $of the , or an area of hex 00 by the in the G, and the @and not be Darth Vader es do not perform any malicious damage, are usually damaged and >are: Darth-1: The cDarth Vader , Darth-1 is 270 . It s the c270 of . are copied . Darth-1 The can be ein the /Darth Vad". Darth-2: Darth-2 is a 345 of Darth-1. Unlike Darth-1, it s 345 +of hex 00 in copied . the /Darth Vader". Darth-2 and later Darth-3: Darth-3 is to Darth-2, but it is 255 Darth-3 , it s 255 +of hex 00 the : "Darth Vader". Darth-3B: Darth-3B is to Darth-3, and is a very minor . Like Darth-3, the : "Darth Vader". Darth-4: Darth-4 is a shorter of Darth-4, it is 200 Pnot ;any Darth-5: Darth-5 is very to Darth-4. Like Darth-4, it is 200 Pnot ;any . Darth-5 copied if the ;ed at least 200 +of hex 00 PZPAPN Datacrime : Datacrime Extinct J: , 1989 j; floppy Maccess; formats any day gOct 13th to Dec 31st S: 1,168 7: PNC - , NAV, ], NAV, or The Datacrime is a , and is as the 1168 . The Datacrime is a a. The Wshortly its release in March, 1989. The attach to the end of a . b, increasing the by 1168 +. The +of the host are stored off in the 7and replaced by a branch instruction so Ybefore the host . In order to propagate, the searches through Hories for . .and attaches to any a(except for where the 7th letter is a D). s are searched before the floppy Qs are checked. The continue to propagate until the 12th of any year, . The decrypted thing like: "DATACRIME VIRUS" "RELEASED: 1 MARCH 1989" Note: ASCII A low-level format of the done. Uin the make . random and often make the crash Unlike the of Datacrime, the Datacrime Pnot , or a, until 1st of any year. Lastly, if the computer is using an RLL, SCSI, or PC/AT Mcontroller, all of the Datacrime are not able to successfully format the M, according to Jan Terpstra of the of Datacrime are: Datacrime-B: The Datacrime-B is a of the Datacrime . The differences are the effective of the is 1,280 and instead of : The , 1989. Datacrime II: The Datacrime II is a of the Datacrime . The major characteristic 4are the effective of the 1,514 +, and it can now yboth . an encryption mechanism in . Datacrime II Pnot format Ms on Mondays. : The , 1989. Datacrime IIB: A of the Datacrime II Datacrime IIB xgeneric . /and . ., adding 1,917 +to the . The differs gDatacrime II in the encryption method used by the to avoid detection has : The , 1989. Datacrime IIC: on the Datacrime IIB xone . Xor . bon the C: by 1,480 by 1,604 to 1,981 +. In both cases, the the end of the PZPAPN DataLock : DataLock DataLock 1.00, V920, DataLock-1043 4; "out of handles" S: 920 7: PRtEK - Xand ], NAV, : CleanUp, or The DataLock, or V920, in many locations in the starting on is a generic wof . a, but it .if it is The the DataLock Y, the at the top , but &the find 2,048 +less is expected. the , any . tby the rof 920 +, and sin the 3to the @and . The at the end of a. The , indicating the , can eat the end of all "DataLock 1.00" DataLock @, if DataLock , it prevent the gopening man extension ending "BF". to open a, such as .DBF in an "out of bhandles" of DataLock are: DataLock-828: of DataLock is a minor of the DataLock . It aas well as by 828 to 1,048 v, and 828 vof the of DataLock add up to 256 +to . Pnot ythem. @and in the DOS to the @and . One can be eat the very end of all "*10-03(HM)*" : Calgary, Ontario, Canada DataLock-1043: is a "bug-fixed" of the DataLock . It was in the Washington DC/Virginia area of the by Brian Seborg in May, . DataLock-1043 /and . over 9K in while the rof 1,043 at the end of the rof 1,043 vof the b, and an 1,043 vof the b. The spread adue to a bug in . The ein the removed. DataLock-1043 is destructive. It for one hour. At , it Qs A:, B:, and the second physical if it exists. : USA DataLock-1740: DataLock-1740 is a later of the DataLock . DataLock-1740 /and . Ywhile the rof 1,740 at the end of the The r, however, not be the DOS . The in the all DataLock-1740 aare: "Hacker: NGUYEN HIEU VINH" "22 / 1A Truong Quoc Dung" "Phuong 10 Quan Ph Nhuan" k Pho Ho Chi Minh" "South of Viet Nam" mthe in the DOS set to "08-08-88 8:08a". The DOS Uon all DataLock-1740 is : Viet Nam DataLock-D: of DataLock is a minor of the DataLock . Like the , it adds 920 +to the . x. It .if it is Y, but not are 10 differ gthe . Unlike the , it May, PZPAPN Davis : Davis I: May, j; beeping & Malaysia S: 1,776 - 1,965 7: PRhE - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Davis gMalaysia in May, . Davis is wof . it has for 15 to 30 minutes. The the Davis the Davis at the top of &the ). It Pnot move ~12's sby the DOS Bby 1,776 }08 and 21 nby the Davis Davis is , it rof 1,776 to 1,965 the end of the b. The @and in the DOS not be 15 to 30 minutes the Davis , it start Oing the accompanied by 3 beeps every few minutes: DAVIS V1.01 Author : Davis : mm/dd/yy VIRUS STATION COPY Hi ! How are you today ? Don't worry about ! DAVIS VIRUS follow you forever and ever ! Don't care me! I really do not damage your Mor data. .make Funny to you Davis Pnot do malicious Oing its disruptive PZPAPN Day10 : Day10 Day/10, SYP S: 674 7: PNCK - , NAV, The Day10 . Its . Day10 is a wof . .. It is destructive the Day10 Y, the yone . in the G. If in the G, it may t. Day10 of 674 +. The at the end of the b. The @and in the DOS to the @and . The can be in the "DM? Day10 Yif the @is evenly di by 10 (day=10, 20, or 30). On days, [of an in the Day10 of the PZPAPN dBASE : dBASE DBF Extinct , 1988 /& .OVL j; corrupt .DBF a; TSR; FAT and root New York, S: 1,864 7: PRC - /and Overlay , NAV, ], NAV or The dBASE Iby Ross Greenberg of New York. /& .OVL a, and corrupt data in DBF by randomly transposing +in any open .DBF b. It keeps track aand +were transposed in a hidden b(BUG.DAT) in the same Gas the .DBF b(s). The restores +if the bis read, so it nothing is wrong. the BUG.DAT bis 90 days old or more, the the FAT and root Gon the #detected, if you remove the dBASE and replace it a clean copy, your .DBF were during the period you were useless since are garbled on the Meven would Nas expected by the tdBASE PZPAPN Dead-790 : Dead-790 Deaf S: 790 7: PRhCK - {3.0+ The Dead-790, or Deaf, . Dead-790 is a wof . It receives its gthe combination of two in the cDead-790 at the top of &the DOS ), not moving ~12's , as sby the DOS Bby 800 nby the the Dead-790 , it any reason. 790 at the end of the b. The @and in the DOS not be . Two can be in Dead-790 "DE" "AD" The start in the fourth ,of the bwhile the last be at the very end of the PZPAPN Death Dragon : Death Dragon Eddy'93 Republic Of South Africa S: 528 7: PNCK - 12.2 9503+, The Death Dragon, or Eddy'93, It is gthe Republic Of South Africa, where it was uploaded to at least one bulletin board (BBS). Death Dragon is a wof . the Death Dragon yall of the . in the rof 528 at the end of the b. The @and in the DOS to the @and . The in the 7in all Death Dragon "[DEATH DRAGON]" "@echo off" "echo Fuck you, arsehole! You are a SHITTY "echo I hate you!" "echo." "pause" "Eddie has ed on tour ( ) - VMAG "press a key..." "*.com c:\autoexec.bat" of any year, [of an the Non the monitor: "Eddie has ed on tour ( ) - VMAG PZPAPN Define : Define I: May, (failures Australia S: 30 7: ONAK - , NAV, The Define . Its source distributed in a FidoNet echo in May, . Define is a wof . /and . , and may Define is Y, Define ythe in the a copy of +of the . If the t, it simply previous v. Unless the in the Gis smaller be no . The in the @and in the to the @and The Define corrupt xthem since s the +of the host no longer function usually ing the to the DOS prompt. If t, the fail to Define is on the Mini-45 . It Pnot do of Define are: Define-B: to the Define is a minor several differ. Define-256: Define-256 is a 256 of the Define . Much of the Pn't do , and the base 7is very in the +of the a Define-256 Y, the ythe in the G. If the previous v. The @and in the DOS : South Africa See: Mini-45 PZPAPN Deicide : Deicide Glenn, Deicide II ; FAT S: 666 7: ONC - 1, NAV, The Deicide is a a, but not .. Later of Deicide are es, and are &under Deicide is Y, the search the Gfor an . If an e, the c666 +of the . If the newly was 666 more, show in the was smaller +, its now be 666 +. The may be Nby the If the Pnot find an in the G, it Othe double spaced, and of the "DEICIDE! Glenn (666) says : BYE BYE HARDDISK!! Next be carufull illegal stuff" The can be ein all a, along the is not experimental was written by Glenn Benton to see if I can make a while learning machine for 2,5 months. (C) 10-23- by Glenn. I keep on going making ses." of Deicide are: hood: Written by the same author as the Deicide hood is a of . .. It one . bin the rof 477 at the $of the b. The @and in the DOS . The can be in the 7in all Br hood hood...' 'I am seeking my br s "DEICIDE" and "MORGOTH"...' emy br "MORGOTH"!!!' emy br "DEICIDE"!!!' '*** Glenn Benton ***' Deicide 2: as Deicide-1335, Deicide 2 is a 1,335 of the Deicide . It xone . in the rof 1,335 at the $of the be no 5to the @and in the DOS . The in the 7in all Deicide 2 "Suck my dick, Steffie!" : The Deicide II.622: Deicide II.622 is a 622 of the Deicide . It xone . in the rof 622 the at the $of the be no 5to the @and in the DOS . The in the 7in all Personal Computer has #struck by the uncurable disease "called "The Doom of Morgoth"." : The Deicide II.623: Deicide II.623 is a 623 of the Deicide . It xone . in the rof 623 the at the $of the be no 5to the @and in the DOS . The in the 7in all Personal Computer has #struck by the uncurable disease "called "The Doom of Morgoth"." : The Deicide-2405: on the Br hood of Deicide, Deicide-2405 xone . Y, adding 2,405 +to the b, and Os a on the The at the $of the and be no 5to the @and in the DOS different may be Nby the , all of . Many of the are insults to various researchers. : The Deicide-2570: on the Br hood of Deicide, Deicide-2570 is fairly to the Deicide-2405 . It adds 2,570 +to the . x, the at the $of the are ;ed in the , and one is Y. Many of the mesages are of a sexual nature in : The Deicide-B: on the Deicide no longer s the it has tall of the . ain a See: Breeze PZPAPN Dejmi : Dejmi Susenka S: 862 7: PRhCK - 12.2 9503+, {3.0+, The Dejmi . Its . Dejmi is a wof . cDejmi at the top of the ), moving ~12's , as sby the DOS Bby 1,024 }09, 1C, and 21 nby the , the Dejmi rof 862 at the end of the b. The @and in the DOS to the and . No the PZPAPN Democracy : Democracy j; TSR; DOS DIR 8output slowed/sluggish S: 3,959 - 3,973 7: PRsA - p2.10+, NAV 3.05 9503+, {3.0+ The Democracy . Its . Democracy is a wof . /and . , but not cDemocracy as a low TSR of 4,192 +. It }01, 03 and 22. the Democracy , it larger rof 3,959 to 3,973 at the end of the b. The @and in the DOS . The can be eat the very end of all Democracy "Democracy" s of the Democracy slow or sluggish response to the DOS DIR 8. It is what else may do PZPAPN Demolition : Demolition j; TSR; S: 1,585 7: PRsCK - , NAV, The Demolition . Its . Demolition is a wof . cDemolition Y, the Demolition as a low TSR of 1,904 +. It the Demolition , it rof 1,585 +. The at the end of the b. The @and in the DOS . The can be in the 7in Demolition "UZD(T!EFNPMJUJPO" The Demolition hang the bis later Y, it in a hang. It is if the Demolition :any damage potential. PZPAPN Demon Viper : Demon Viper I: March, fail to function ; jumbled 6may S: 817 7: PNCK - , NAV, {3.0+ The Demon Viper in March, . Its . Demon Viper is a wof . the Demon Viper Y, the Demon Viper yone . in the or next higher level rof 817 at the end of the b. The @and in the DOS to the and . The in the Demon Viper 7in all "May SATAN prevail on "I summon you!" "DEMON! ver" "by Viper!" the Demon Viper \unexpected qgarbled Non the monitor and [failure. PZPAPN Den Zuk : Den Zuk Search, Venezuelan , 1988 ; floppy format; TSR; BSC Indonesia S: N/A 7: RtF - Floppy , NAV, M, CleanUp, ], NAV, or DOS SYS The Den Zuk is a wof 360K 5-1/4" K. The yany Lin a floppy is accessed, even if the Lis not (able. If an attempt is made to (the tnon- Den Zuk into even failed. purple "DEN ZUK" graphic a CTL-ALT-DEL is performed if the has a CGA, EGA, or VGA monitor. While the Den Zuk did not cause any damage to the maintain a counter of how many s the (ed, and the counter r Res its limit, the floppy in the Qis reformatted. The counter in of the is usually in the range of 5 to 10. The can be ein the the Den Zuk "Welcome to the C l u b --The HackerS-- Hackin' All The The HackerS" The Lvolume label of Kmay be Y.C.1.E.R.P., s if the Den Zuk removed a Pakistani Brain vbefore uthe Den Zuk. The Den Zuk remove an Ohio vbefore uthe Den Zuk. The Den Zuk t to be written by the same person or persons as the Ohio . The "Y.C.1.E.R.P." the Ohio , and the in many respects. of Den Zuk are: Den Zuk-RPKS: A minor of Den Zuk, of the on track 40 well as the to avoid detection Den Zuk detection May, See: LZRQ Ohio PZPAPN Deranged : Deranged j; beeping speaker; S: 419 7: PNE - 1, NAV 3.05 9503+, The Deranged . Its . Deranged is a wof . the Deranged Y, the Deranged yall of the . in the G. Beeping on the speaker may and/or possibly a hang. the Deranged rof 419 at the end of the b. The @and in the DOS not be . The in the 7in all Deranged "The Deranged "Criminal Behaviour" PZPAPN Desperado : Desperado Desperado.2403A, Desperado 1.0 moved; Sweden S: 2,403 - 2,418 7: PRtAK - p2.10+, NAV 3.05 9503+, 12.2 9503+, The Desperado , and is Sweden. It is a , fast wof . /and . cDesperado at the top of &the ), moving ~12's , as sby the DOS Bby 6,144 nby the , the .if it was not /and . rof 2,403 to 2,418 at the end of the b. The @and in the DOS not be . The in the Desperado "Dr White - Sweden "SCANCLEAVSHITOOLMSAV 1VSAFF-PRVIRSTBAVTBSCTBCLTBUT -V UTSCUT CHKLIST.MS" "Desperado - Written in Malmo..." The Desperado included in many of the popular utilities. are identified by the by comparing the cfour 6of the the contents of the second It is what Desperado of Desperado 1.0 are: Desperado.2403B: Desperado.2403B, or Desperado 1.1, is a later of the Desperado . It is to the :the same : Sweden Desperado.2403C: Desperado.2403C is a later of the Desperado . It is to the :the same : Sweden March, PZPAPN : Dest Dest-1 S: 323 7: PNCK - , NAV, The Dest, or Dest-1, . Its . Dest is a wof . two later s of , one of is a . The later s of the &under the Dest Y, the Dest yone . in the rof 323 at the end of the . The @and in the DOS to the @and . One in the "*.com" Dest-1 Pn't do of Dest are: Dest-2: A later of the Dest or Dest-1 adds 478 +to the . x. The @and in the DOS not be are no in the Dest-3: A later of Dest-2, Dest-3 is a wof . /progams. Y, it at the top of &the decreasing by 2,192 }21 and 22 rof 491 at the end of the The @and in the DOS to the and . Dest-3 Pn't do PZPAPN Destructor V4.00 : Destructor V4.00 Destructor S: 1,150 - 1162 7: PRtAK - ], NAV, The Destructor V4.00 *, and is a wof . and . the Destructor V4.00 Y, the at the top &the ~12's is moved. be 1,216 +less what is expected on the , the .if it is not already Destructor V4.00 is , it rd in by 1,150 +. . by 1,154 to 1,162 +. In both cases, the at the end of the Pnot alter the ?in the G, and it makes no attempt to hide the The can be "DESTRUCTOR V4.00 (c) by ATA It is what Destructor V4.00 P, if PZPAPN Devil's Dance : Devil's Dance Devil's Dance-B A, 1989 j; FAT <; TSR Mexico S: 941 7: PRsCKT - , NAV, : NAV, or The Devil's Dance A, 1989, by Mao Fragoso of Mexico City. Devil's Dance is a of . .. It can be very destructive. The Devil's Dance is Devil's Dance as a low TSR of 1.2K. }09 and 21 nby Devil's Dance , Devil's Dance yall . in the G. If the Devil's Dance, it be re Devil's Dance is , it yany the Devil's Dance by 941 Rlater re ing in an r. The at the end of @and in the DOS #run, any subsequent warm-re (CTL-ALT-DEL) may in the myou ever danced the devil under the week light of the moon?" PRAY FOR YOUR DISKS!!" The Devil's Dance is destructive. c2,000 keystrokes, the starts changing the colors of any Non the monitor. The changing of colors of s start to immediately c5,000 keystrokes, the erases the ccopy of the FAT. At is re (ed, it Othe and again destroy the ccopy of the FAT, allow the (to proceed. of Devil's Dance are: Devil's Dance-B: to the Devil's Dance . The major difference is run very slowly, (. On (, the may receive the "Specified /MAND search Gbad". PZPAPN Devils & Evangels : Devils & Evangels Devils & Evangels.1456 j; DOS k; scrolling of ?seconds = "62" S: 1,456 7: PRTA - 2.1.7+, 12.2 9503+, clean cold The Devils & Evangels or Devils & Evangels.1456 . Its three , all four es are /and . , but not cDevils & Evangels at the top of but &the ), moving ~12's , as sby the DOS Bby 2,976 nby the the Devils & Evangels , it /and . 1,456 be hidden . The at the end of the it cannot be in the as the are read into The @and in the DOS to be the seconds field #set to "62". The in the "Devils & Evangels, Inc." kmay the Omay be scrolled upwards accompanied by a hang. of Devils & Evangels are: Devils & Evangels.1526: A 1,526 of the Devils & Evangels . Its 3,104 +, hooking ~21. It adds 1,526 the . /and . not be . The @and qthe seconds field, not be . The in the "Devils & Evangels, Inc." The has symptions of to the Devils & Evangels.1634: A 1,634 of the Devils & Evangels . Its 3,328 +, hooking ~21. It adds 1,634 the . /and . xupon [, open, or copy, not be . The @and qthe seconds field, not be . The in the "Devils & Evangels, Inc." The has symptions of to the kdo not frequently Devils & Evangels.1792: A 1,792 of the Devils & Evangels . Its 3,648 +, hooking }21, 24, and 48. It adds 1,792 +to the . /and . xupon open, or copy, not be . The and qthe seconds field, not be The in the "Devils & Evangels, Inc. [DEI] MnemoniX $ v2.00" The has symptions of to the PZPAPN Dewdz : Dewdz (failure S: 601 7: PNCK - , NAV, The Dewdz is a .. It is on the Burger group of es, and utilities identify it as such. Dewdz is Y, the search the C: Qroot Gfor an y. If one is e, it t. Dewdz rof 601 at the $of the be no 5to the @and in the DOS . The can be seen the "OUSE BBSTEMP" "*.com *" Othe "Kewl Dewdz!" are Y, and the to be hung. If the presses CTRL-C, processing usually continue. (failures the Dewdz .on the See: Burger PZPAPN Diamond : Diamond XC failure on S: Varies, depending on present 7: PRAK - p, NAV, The Diamond entry in Hyper actually represents several members of the group or on the V1024 The &are on the V1024 , and were as part of a large library of es. As such, Jare completely . The es in group are all ws of . and/or . , and in most cases not function member(s) of the Diamond ^are: Diamond-444: A 444 on the V1024 . It /and . by 444 the at the end of the b. The @and in the DOS is not . Diamond-444 cannot determine it has b, so be re t, adding an v. The the 7in all "9090909090" Diamond-444 [of any in the XC failure" N, and the ed to the DOS prompt. Diamond-465: A 465 on the V1024 . It /and . by 465 the at the end of the b. The @and in the DOS is not . Diamond-465 cannot determine it has b, so be re t, adding an v. The the 7in all "9090909090" Diamond-465 [of any in the XC failure" N, and the ed to the DOS prompt. Diamond-485: A 485 on the V1024 . It /and . by 485 the at the end of the b. The @and in the DOS is not . Diamond-485 cannot determine it has b, so be re t, adding an v. The the 7in all "7106286813" Diamond-485 [of any in the XC failure" N, and the ed to the DOS prompt. Diamond-584: to the Diamond-485 adds 584 +to the v. The in the 7in all "7106286813" Diamond-584 [of any in the XC failure" N, and the ed to the DOS prompt. Diamond-594: to the Diamond-584 adds 594 +to the v. The in the 7in all "7106286813" Diamond-594 [of any in the XC failure" N, and the ed to the DOS prompt. Diamond-602: to the Diamond-594 adds 602 +to the of the The in the in all "7106286813" Diamond-602 [of any in the XC failure" N, and the ed to the DOS prompt. the DOS DIR 8is issued. Diamond-606: to the Diamond-602 adds 606 +to the of the The in the in all "7106286813" Diamond-606 [of any in the XC failure" N, and the ed to the DOS prompt. the DOS DIR 8is issued. Diamond-607: to the Diamond-607 adds 607 +to the of the ris hidden . The in the 7in all "7106286813" Diamond-607 [of any in the XC failure" N, and the ed to the DOS prompt. The DOS DIR Pnot hang the Diamond-608: to the Diamond-606 adds 608 +to the of the The in the in all "7106286813" Diamond-608 [of any in the XC failure" N, and the ed to the DOS prompt. the DOS DIR 8is issued. Diamond-609: to the Diamond-609 adds 609 +to the of the The in the in all "7106286813" Diamond-609 [of any in the XC failure" N, and the ed to the DOS prompt. the DOS DIR 8is issued. Diamond-614: A 614 of the Diamond , it adds 609 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-614 [of any in the XC failure" N, and the ed to the DOS prompt. The DOS DIR Pnot produce a hang Diamond-620: A 620 of the Diamond , it adds 620 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-620 [of any in the XC failure" N, and the ed to the DOS prompt. The DOS DIR hang the it is issued. corrupt very small xthem. Diamond-621: A 621 of the Diamond , it adds 621 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-621 function , as the DOS DIR 8. Its is 5,376 +, hooking }08 and Diamond-624: A 624 of the Diamond , it adds 624 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-624 function , as the DOS DIR 8. Its is 5,376 +, hooking }08 and Diamond-626: A 626 of the Diamond , it adds 626 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-626 function , as the DOS DIR 8. Its is 5,376 +, hooking }08 and Diamond-891: A 891 of the Diamond , it adds 891 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-891 function , as the DOS DIR 8. Its is 7,424 +, hooking }08 and Diamond-978: A 978 of the Diamond , it adds 978 +to the of the the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-978 function , as the DOS DIR 8. Its is 1,024 +, hooking }08 and Diamond-1013: A 1,013 of the Diamond , it adds 1,013 +to the of the x, the be hidden . The seconds field of the ?in the DOS to "60". The in the 7in all "7106286813" Diamond-1013 function , as the DOS DIR Its is 1,056 +, hooking 08 and 21. See: Ah Gremlin Rocko V1024 PZPAPN Dichotomy : Dichotomy ?seconds = "62"; S: 863 7: PRhAK - ]2.17+, 7.00+, 2.71+, p2.10+, 12.2 9503+, 2.0+, 7.00+, 2.71+, 2.17+, The Dichotomy . Its . Dichotomy is a wof . /and . cDichotomy at the top of &the ), not moving ~12's , as sby the DOS Bby 1,072 nby the the Dichotomy , it rof 863 at the end of the b. The @and in the DOS to be the seconds field #set to "62". The the 7in all Dichotomy "[Dichotomy]" "(c) Evil Avatar" The Dichotomy are . As a kmay PZPAPN Dicker : Dicker Dicker.400 k; TSRseconds = "62"; S: 400 7: PRsCK - ]2.17+, 7.00+, p2.10+, 2.71+, NAV 3.05 9503+, 7.00+, o2.10+, 2.71+ NAV 1.05 9503+ The Dicker . Its . Dicker is a .. Frequent aare cDicker as a low TSR of 64 kilo nby the the Dicker , it rof 400 at the $of the b. The @and in the DOS not be . The in the 7in all Dicker "Dicker 1.0" "C:\ PZPAPN : Die Republic Of South Africa S: 4,000 7: PRhAK - , NAV 3.05+, ]2.17+, 12.2 9503+, 1.05+, {3.0+, 2.17+ : See The Die l2, or DH2, . It is gJakarta in the Republic Of South Africa. Die l2 is a full /and . cDie at the top of &the )hooking }10 and 21. , as sby the DOS Bby 4,000 , the Die rof 4,000 at the end of the b. The not be in the DOS , nor in the as Die l2 is a full , dis "on the fly". The @and in the DOS not be . The in the "SW DIE HARD 2" The DOS l2 in not indicate l2 can be fairly easily manually t. The should to be tin order to insure . All of the execu on the should be archived using a such as PKWare's PKZIP . The must be cold clean out executing any gthe Q, the archive acreated earlier should be used to replace the execu on the PZPAPN Digger : Digger <; unexpected S: 1,475 7: PNCK - , NAV, The Digger . It is gthe . Digger is a .. It corrupt . the Digger yone on the C: Q. It starts in the C: Qroot G, and slow work its way down the Gstructure. . tby the Digger 1,475 at the end of the The @and in the DOS not be . The can be in the 7in all "C) DIGGER" The Digger corrupt . it encounters it is searching for a . corrupted be completely s to be It is what Digger may do and corrupt PZPAPN : Dima requiring 8line input may not function Os "9pm" S: 1,024 7: PNAK - , NAV, The Dima . It is gthe Dima is a wof . /and . the Dima yall of the . /and . in the G. If G, it the Dima rof 1,024 at the end of the b. The @and in the DOS to the and . The ein all Dima "*.exe" "OMtE" "The -9pm-." "Call the Dima & Dima corporation if it be difficult." The Dima at 21:00 or 9PM, at of an in the Oof the and a hang ring: "9pm" the Dima \problems executing require 8line input, in the not functioning PZPAPN Dinky : Dinky Dinky.122 unexpected S: 122 7: PRaCK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ The Dinky . Its . Dinky is a wof . cDinky in al usually in a DOS buffer. nby the the Dinky , it rof 122 at the $of the b. The @and in the DOS to the @and . The in the 7in all Dinky "KuDSR" all of the . ain the t, an unexpected (may PZPAPN : Dir j; TSR; sluggishness of DIR S: 691 7: PRsCK - ], NAV, The Dir . It ated in the . The Dir is a wof . The the Dir the as a low TSR of 1,008 nby the . If .is not already t, it the Dir , it a DOS DIR 8is performed. It Pnot [, or aare a DIR 8is performed, the ein the be a pause in the output of the DIR while the the output continue. by 691 rcannot be seen performed if the . The at the end of @and by the the Dir receive the DOS Yon a . If the is not not be [of the DOS the /F option <of the Pnot ;any mechanism. PZPAPN Dir-2 : Dir-2 Creeping Death, FAT lost clusters; bcopy; cross linked sby DOS gclean S: N/A 7: ZRAK - : CleanUp, or Low level format reformat The Dir-2, or FAT, was reported in *, Hungary, Poland, and Yugoslavia in . The copy analysed of was gTamas Szalay of Budapest, Hungary. The Dir-2 is a uses a completely new technique for replicating, and moves very quickly through exposed . It is very difficult to detect, not having many or measurable The Dir-2 the computer M, and a Y. Since the Zs the hidden the Y. The in low , in the area where the configuration z(IO and MSDOS) is normally (completes, , by be 1,552 +less expected. If the views mapping utilities. The "CONFIG" area be 1,552 larger expected. At the of the (, the by the as well, if it was not already Dir-2 is , any non-write protected accessed on the t. The places its 7in the last cluster of K. On the M, the in a unused cluster. The encrypts the ers for the execu aon the M, and copies them to an unused area of the G. The ers are to the 7on the Viewing the in a normal G. All execu indicate s and ?stamps. In fact, the mnot at all. If the Zs one of the , the Y(due to the the G). Using the ers to the actual location, the Dir-2 load the Z, so it is The major symptom of a Dir-2 vis the effect the has on the powering off and (ing clean DOS to copy in the anot %copied . The newly copied ;the in the last cluster of the to use backup . Executing DOS in a large number of lost clusters edue to the 5in the G. All execu %cross-linked on the same is the location of the 7on the M. If the /F parameter is used, permanent <of all execu be the . Note [of the DOS not indicate any or cross-linking of due to the presence of the If you suspect you ma Dir-2 v, power off the and cold -clean write-protected DOS and check for the on the M. Be careful to not Zany gthe Mas the out an utility to detect and remove Dir-2, it is possible to manually dis by copying all execu to non-execu The should be powered off and re ga clean, write protected out executing any the M, backup the re aand your data The should be low level formatted. reformatted, restore the backup and re the re of Dir-2 are: CD10: hequivalent, is a minor undetec CD11: hequivalent to CD10 and the is an minor CD12: hequivalent to the members of es, it is a minor Dir 2-910: to the members of stores its 7on the last two of the Q. Executing the in the vof the C: Qand root Hories. Its is 1,632 PZPAPN Dirty : Dirty Lavi Italy S: 483 7: PRhCK - {3.0+ The Dirty, or Lavi, . It s to be gItaly. Dirty is a cDirty at the top of the ), not moving ~12's , as sby the DOS Bby 544 nby Dirty in the Dirty , it rof 483 at the end of the b. The @and the DOS 3to a random value, and the seconds field #set to "62". The can be in the 7in all Dirty "HI ! I'm The Dirty Fucker !!" PZPAPN Discom : Discom TSR; . S: 2,053 7: PRsA - , NAV, : CleanUp, or The Discom . The location where the sample was . Discom is a wof . /and . a, and on the , and gthe Sunday . As such, utilities may identify ;ing both and Sunday. Pnot exhibit or the of either the or Sunday The the Discom the as a 2,304 TSR. }08 and 21 nby the , the /and . 2,053 +and mthe at the $of the by 2,059 to 2,068 at the end of the All dhex character 11121704D0. Unlike many Pnot exhibit a slowdown for 30 minutes, and no "black window" s. Discom , at random intervals, send random 6to the /ports, as well as write portions of to random on the PZPAPN DisDev : DisDev acorrupted; . atruncated and/or dis S: 6,144 7: ONE - , NAV, {3.0+ The DisDev . Its . DisDev is a the DisDev Y, the DisDev yall of the . in the of 6,144 +, having #replaced a pure copy of the DisDev @and in the DOS to the @and . The can be in the DisDev "<*>-==> DisDev -Copyright (c) 1066 ScumSoft- <==-<*" "disdev" "DisDev" "Fucking "Portions Copyright (c) 1066 ScumSoft!!" DisDev has tall of the . ain the G, executing an in the Y"dis ing" gthe DOS The mset the hidden attribute, ing in effect. to replace the bby copying a clean copy of the fail bcreation The DisDev Oone of the dtwo "DisDev" "Fucking V 202 at 0:00F1" PZPAPN MKiller MKiller Computer Ogre, MOgre, Ogre , 1989 Bad blocks; ; BSC; TSR; encryption of Taiwan Milpitas, California, S: N/A 7: BRtT - , NAV, M, CleanUp, ], NAV, or DOS COPY & SYS The MKiller is a spreads by writing copies of to 3 blocks on either a floppy or M. The Pnot care if blocks are in use by an or are part of a blocks be marked as bad in the FAT so cannot be . The is patched so (ed, the Yand it can attempt to yany new Ms exposed to the The keeps track of the elapsed Musage since initial v, and Pno harm until it has r Red a predetermined limit. The predetermined limit is 48 hours. (On most MKiller Rits limit in 1 - 6 weeks of its initial the limit is r Red or exceeded and the is re (ed, a Nidentifying /PUTER OGRE and a 1st. It says to leave alone and proceeds to encrypt the by alternately XORing Ah and 0 5h, effectively destroying the zon the M. The recourse MKiller has activated and Tthe entire Mis to reformat. The Nupon , and can be in the MKiller -- 1.00 by /PUTER OGRE 04/01/89 Warning!! Don't turn off the power or remove the Lwhile MKiller is Processing! PROCESSING Now you can turn off the power. I wish you Luck!" It is important to note N, if the is turned off immediately it may be possible to salvage aon the Musing various utility destroys the (, FAT, and Gblocks. MKiller can be removed by using McAfee Associate's M CleanUp utility, or the DOS SYS 8, to Ms or (able floppies. On non- floppies, acan be copied to non- tfloppies, followed by reformatting the tfloppies. Be sure to re (the ga write-protected Lbefore to remove the cor you be re tby the Note: MKiller may mdamaged one or more aon the it wrote a portion of its 7to 3 blocks on the corrupted acannot re ythe , however should be replaced backup copies since the 3 blocks were Note: Do not use the DOS DISKCOPY to backup Kas the new backup ;the as well. PZPAPN Dismember : Dismember seconds = "62" Sweden S: 288 7: PNCK - 1, NAV, {3.0+ The Dismember . It is gSweden. Dismember is a the Dismember yall . ain the between 4,096 and 65,024 before rof 288 at the end of the b. The seconds field of the in the DOS #set to "62", the vmarker of the . One the Dismember Pn't to do PZPAPN Distrust : Distrust j; TSR; Cs in 64K blocks S: 1,588 - 1,604 7: PRsA - p, NAV 3.05, 1.05 9503+ The Distrust , its . Distrust is a /and . a, but not cDistrust as a low TSR of 3,424 +, hooking interupts 08, 21, and 24. the allocate an block of 64K, actually Cby more 3,424 the Distrust , it by 1,588 at the $of the b. In the case of . , the by 1,594 to 1,604 at the end of the b. In both cases, the @and the DOS not be . No are in the PZPAPN : DLSU S: 477 7: PNC - 12.2 9503+, {3.0+ The DLSU . Its . DLSU is a of . , but not the DLSU yone . ain the rof 477 at the $of the b. The @and in the DOS to the @and . The in the 7in all DLSU "*.com *.*" PZPAPN : DM DM-400 k; write to S: 400 7: PRfCK - , NAV, The DM, or DM-400, It is gthe . DM is a DM is Y, the DM in low Hly remapping }21 and 24. It place a portion of video , such as on a video card, if it is sby the DOS not be the DM , it rof 400 at the end of the be no 5to the @and in the DOS . The can be in all "(C) A symptom of a DM gwrite protected in a hang %left spinning. The write a copy of to the It is what DM of DM are: DM-B: referred to as DM 1.01, DM-B is a 400 of the . It Pnot ;the "(C) ;ed in the DM 1.01B: on the DM-B , DM 1.01B is , and has #modified to avoid %detected by most utilities familiar group of :the : "(C) 1.01 DM." DM 1.04: DM 1.04 is a 400 of the Y. It Pnot :the : "GIiokMO". DM-330: referred to as DM 1.05, DM-330 is a 330 of the DM-B . It . It Pnot ;any identifying PZPAPN : DNR QNot Ready ; TSR; open a lot of amay not function S: 331 7: PRsCK - p, NAV 3.05, 1.05+, {3.0+ The DNR, or QNot Ready, Its . DNR is a wof . .. It may be related to the Cybercide cDNR Y, the DNR as a low TSR of 2,048 +, hooking ~21. At , the Othe on the monitor: QNot Ready." the DNR , it rof 331 at the end of the b. The @and in the DOS to the @and . The the 7in all DNR QNot Ready" The DNR uses one bhandle Y. As the number of bhandles slowly Cs, the may find open a large number of amay fail to function of DNR are: DNR-ROM Bios: , DNR-ROM Bios is a 397 of the DNR . Its usage of is the . It Os the "ROM BIOS not compatible" DNR-ROM Bios rof 397 at the end of the b. The , as well as the , is in the "WHY_ME" See: Cybercide PZPAPN Do-Nothing : Do-Nothing The Stupid , Nothing Extinct , 1989 j; TSR (see Israel S: 608 7: PRfC - , NAV, ], NAV, or creported by Yuval Tal of Israel in 1989. The a, but cone in the G, whether it was tor not. The Do-Nothing , always address 9800:100h, and can . The Pnot protect area of any way, and area it in , removing the The Do-Nothing Pno apparent damage, nor Pit affect operation of the in any observable way, thus its See: Saddam PZPAPN Doctor Qumak 2 : Doctor Qumak 2 Dr Qumak 2 <; "Write protect Krakow, Poland S: 1,079 7: PRtCK - , NAV, The Doctor Qumak 2 . It is gKrakow, Poland. Doctor Qumak 2 is a wof . .. It is a destructive The the Doctor Qumak 2 at the top &the ), moving 12's , as by the DOS Bby 2,064 }12, 13, and 21 nby Doctor Qumak 2 in the Doctor Qumak 2 , it for any reason. rof 1,079 at the end of the b. The @and in the DOS not be The Doctor Qumak 2 under two conditions, the condition %very destructive, slowly corrupting . The keeps track of how many Mwrite operations since it became 100 write operations , the modify three +in the next written to it has modified manner, it Othe "The famous cooperation strikes again: IT IS DOCTOR QUMAK II! Watch out for the next gKrak w, Poland!" is not as it is in the The second condition under Doctor Qumak 2 activate is during the months of thru Aof any year. During months, on Sundays the 9th of the month, the simulate a "Write protect to write to a PZPAPN : DoDo Birdie S: 408 7: PRbCK - , NAV, The DoDo, or Birdie, . Its . DoDo is a wof . .. It is not related to the Dodo 2456 The the DoDo the DoDo in video card nby the the ~area. the DoDo , it rof 408 the end of the b. The @and in the DOS not be . One can be ein the "Birdie Hop!" DoDo Pn't do of DoDo are: Pig: The Pig is a 407 of the DoDo %one ,shorter, the major difference . The is: "GIP". Pig-B: hequivalent to the Pig has three differ. PZPAPN Dodo 2456 : Dodo 2456 The S: 2,456 7: PRsCK - {3.0+ The Dodo-2456 in The It is a wof . .. It is not released to the DoDo or Birdie cDodo 2456 Y, the Dodo check the copy of in the C: root G. If copy of .has not tby the , the yit at . If .is already t, the . The Dodo 2456 as a low TSR of 2.4K, but in the process of it becoming , it actually end up keeping slightly over 100K of nby Dodo2456 in the Dodo 2456 , it rof 2,456 at the end of the b. The @and in the DOS not be . The in the 7in all Dodo 2456 "DODO" "c:\ 8.com" "Today we commemorate the DODO." "The bird who has "the victim of human civilization "A:\ EST POC" 8com" in the 7, the "DODO" can be estarting in the fourth ,of all It is what Dodo 2456 PZPAPN Doom II : Doom II I: May, writes Taiwan S: 1,252 7: PRbAK - , NAV, The Doom II gthe NCSA. Doom II is a /and . The Doom II is Y, Doom on the 's video card, along a hook to in low }1C, 21, 24, and 98 nby the many , Doom II /and . by 1,252 at the end of the b. The Pnot hide the r, nor is the @and in the , a . tby Doom rslightly more in , such as by 1,253 or 1,254. s to be due to a bug in the Doom II may attempt to write to the due to the in the video card , thus making it un , typically the monitor be blanked and the locked out. kare prevalent the Doom IIB , but more frequently Doom II, the switches ga graphic to a It is if Doom II of Doom II are: Doom II-B: A re-engineered of the Doom II Taiwan, Doom II-B is a wof . and . . Doom II-B /and . 1,252 at the end of the May, PZPAPN : DOS3 S: 661 7: PNA - , NAV, {3.0+ The DOS3 . Its . The DOS3 is a wof . /and . , but not the DOS3 Y, the DOS3 yall of the . /and . the the exception of rof 661 at the end of the b. The in the DOS not be . The in the DOS3 in all "Still using DOS 3?" "You need to upgrade, you loser!" The ctwo may be Nas a on the monitor Yon computer uses Ms-Dos 3.0 to Ms-Dos 3.3. PZPAPN DOS-1 : DOS-1 S: 184 7: PNCK - , NAV, 12.2 9503+, 1.05+, {3.0+ The DOS-1 . Its . DOS-1 is a wof . the DOS-1 Y, the DOS-1 yall of the . in the 184 at the end of the b. The @and in the DOS to the @and . The in the 7in all DOS-1 "DOS-1" DOS-1 Pn't to do PZPAPN : DOS7 S: 342 7: PNCK - 1, NAV 3.05+, 1.05+, {3.0+ The DOS7 . Its . The DOS7 is a wof . the DOS7 Y, the DOS7 yone . in the rof 342 the at the $of the b. The @and in the DOS to the @and . The can be in the DOS7 "W.C?M is t!oy,re you ever dumb!" "MSDOS 7 (C) ANARKICK SYSTEMS" "DOS 6 Anti sucks. It missed one!" It is what DOS7 of DOS7 are: DOS7-B: on the DOS7 , DOS7-B is a 376 xone . bin the ever an rof 376 at the $of the b. The @and in the DOS to the and . The in the 7in all DOS7-B "W.C?M is t!oy, are you ever dumb!" "MSDOS 7 (C) ANARKICK SYSTEMS" "DOS 6 Anti sucks. It missed one!" DOS7-C: on the DOS7 , DOS7-C is a 419 xone . bin the ever an rof 419 at the $of the b. The @and in the DOS to the and . The in the 7in all DOS7-C "W.C?M is t!oy, are you ever dumb!" "MSDOS 7 (C) ANARKICK SYSTEMS" "DOS 6 Anti sucks. It missed one!" PZPAPN DOSHunter : DOSHunter The S: 483 7: PRhCK - , NAV, The DOSHunter . It was in The . DOSHunter is a wof . the DOSHunter at the top &the , as sby the DOS Bby 1,408 nby the the DOSHunter , it rof 483 at the $of the b. The @and in the DOS not be . No in the The DOSHunter 26th of any year, at trash the c128 of the PZPAPN Dostepu : Dostepu 4; TSR; unexpected access to S: 1,942 - 1,967 7: PRsCK - , NAV 3.05 9503+, 12.2 9503+, 2.0+, {3.0+ The Dostepu . Its . Dostepu is a wof . .. Its TSR is not used Hly to cDostepu as a low TSR of 7,392 +, hooking ~1C. , the attempt to in the root Gof the two Qs immediately Qletter. For example, if the Qis the A: Q, the attempt on the B: and C: Qs' root Hories. the Dostepu rof 1,942 to 1,967 at the end of the b. The @in the DOS to "13-31-99" while the set to the . The in the 7in all "Nie znaleziono pliku lub zla sciezka dostepu!" "raz23" "ARAZ23" /AND. PZPAPN DOSVer : DOSVer 2062 ?seconds = 60; DOS S: 2,062 7: PRhAK - , NAV, 12.2 9503+, {3.0+ The DOSVer . Its . DOSVer is a /and . the DOSVer at the top of &the , as sby the DOS Bby 3,072 nby the the DOSHunter , it Xograms, rof 1,666 at the end of the b. The be hidden by the it is . The @and in the DOS the seconds field is set to "60". As a the may "dis ain the DOS . No in the the DOSVer may notice the DOS Uon all PZPAPN Dot Killer : Dot Killer 944, Killer, Dot Eater j; removal of all dots (.) Koszalin, Poland S: 944 7: PNCK - ], NAV, The Dot Killer in Koszalin, Poland in . It is a wof . the Dot Killer Y, the yone bin the by 944 +. The at the end of While the Dot Killer 7to attempt to avoid uthe ed to by the /SPEC en mental parameter, logic :a bug and Pnot function . If ., or the ed to by /SPEC, is in the tjust like any the Dot Killer , it remove all dots (.) gthe of Dot Killer are: Dot Killer B: to Dot Killer, Dot Killer B's major difference is at (ing ., a happy face character on the left side of the line, travel across the line to eat the period (.) the attempted to eating the period, the happy face travel back across the until the period. PZPAPN Doubleheart : Doubleheart Doubleheart.452 unexpected access to S: 452 - 466 7: PNE - , NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.71+, 2.17+ The Doubleheart . Its . Doubleheart is a wof . a Doubleheart Y, the Doubleheart yup to three . ain the G, as well as one . in the C: Qroot and attempt to yone on the B: the Doubleheart of 452 to 466 at the end of the b. The @and in the DOS to the @and . One in the in all Doubleheart "*.exe" It is what Doubleheart may do of Doubleheart are: Doubleheart.452.B: , Doubleheart.452.B is a minor of the Doubleheart kmay Doubleheart.649: , Doubleheart.649 is a of the Doubleheart . It xup to three . ain the G, as well as yone on the B: and C: Doubleheart.649 rof 649 to 660 at the end of the b. The and in the DOS to the @and . The the "*.com" /M M IBMBIO. /IBMDOS. gRussia love!" PZPAPN Dreamer : Dreamer Hitler I: May, ; "Hitler!" speaker; DOS S: 4,808 7: PRhCK - , NAV, {3.0+ The Dreamer, or Hitler, in May, . Its . Dreamer is a wof . ., and is as it hides the cDreamer Y, the Dreamer at the top of &the ), hooking }1C and 21. ~12's not be moved. , as sby the DOS Bby 5,072 the Dreamer , it by 4,808 be hidden by the it is . The at the end of the . The @and in the DOS not be . The the Dreamer "Hitler by Dreamer/DY" 15 minutes, the Dreamer activate. At the word "Hitler!" be repeatedly emitted gthe speaker, and a PZPAPN : Drop S: 1,131 - 1,163 7: PRhAK - , NAV, The Drop . It is gthe Drop is a wof . /and . The the Drop Drop at the top of but &the , as sby the DOS by 3,600 nby the the Drop , it for any reason. rof 1,131 1,153 to 1,163 +. In both cases the at the end of the b. The @and in the DOS to the and . No the It is what Drop may do PZPAPN Druid : Druid acorrupted; fail to Z; long accesses S: 317 7: ONC - {3.0+ The Druid . It is a wof . , but not .. It s the $of the x, permanently corrupting them. the Druid Y, the Druid yall of the . in the it has completed uthe . ain the G, it move up one Gat a in the Gstructure, , until it finally the Qroot G. It avoids the Druid normally not . The exception is if the was smaller , the "317 . The @and in the DOS not be . The can be the 7in all "DRUID, 7d by Morbid Angel/Line Noise" Druid notice long Maccesses Y. The long Maccess is due to the in several Hories. not function PZPAPN : DSME DSME.T j; TSR S: 3,278 - 3,519 +(Approx) 7: PRsAK - ]2.17+, p2.10+, 12.2 9503+, The DSME or DSME.T . It is a polymorphic, wof . /and . .. Its cDSME as a low TSR of 9,008 +, hooking , DSME /and . 3,278 to 3,519 at the end of the b. The @and in the DOS not be . The the ( A demo for DSME to all t Rer )" "DSME v1.0" DSME Pn't to do PZPAPN Dutch 555 : Dutch 555 555, Quit- S: 555 7: PRhAK - , NAV, : CleanUp, or The Dutch 555 Zwienenberg of the was accidentally released into the public domain by its author in It is a wof . /and . The the Dutch 555 Y, the at the top , but &the ). The is not moved, the DOS show a of 560 nby the the Dutch 555 , it and . ., as by 555 at the end of the b. The and in the DOS to the @and Pnot do of Dutch 555 are: Dutch 555-B: hequivalent to the has four differ PZPAPN Dutch : Dutch 4; write protect S: 124 - 126 7: PRAK - , NAV, The three comprise the Dutch group were gThe . All three are techniques the es in the es. two are included under Mini-97 are related to the Dutch The Ehere is the 126 Dutch -126. The , both of 124 +, are &in the The Dutch the in a DOS buffer address 0:063A. by the be no and the Dutch , it Y. If Y, it by 126 at the end of the b. The @and in the DOS to the @and expect 8line input , as did not provide the input. gwrite-protected in a "write protect gDOS. Pnot do of Dutch Dutch .111: , Dutch .111 is a 111 . It yall . ain the rof 111 the at the end of the b. The @and in the DOS to the @and . One can be in the Dutch -115: , Dutch -115 is a 115 . It yall . ain the rof 115 the at the end of the b. The @and in the DOS to the @and . Frequent Dutch -117: , Dutch -117 is a 117 . It yone . the rof 117 at the end of the b. The in the DOS to the @and . One can be in the : The Dutch -124: A later of the Dutch -124 is a 124 , frequent and a . b, or an already b, is [of any gthe A: in a hang has the is expecting Q. Dutch -124 is a poor replicator, and ymost . Dutch -124B: Dutch -124B is a later of Dutch -124. Unlike members of ^, it yboth . /and . vs do not very often. be damaged, and later [of them in a hang in all cases. See: Mini-97 PZPAPN : DWI (in public domain) I: May, [failures on large . WIN. S: 1,051 - 1,065 7: PRhE - , NAV, {3.0+ The DWI in May, . It was written by a member of the Virulent Graffiti writing group in the United States. DWI is a wof . cDWI at the top of the ), hooking ~21. , as sby the DOS Bby 1,296 ~12's not be moved. the DWI , it rof 1,051 to 1,065 at the end of the b. The @and in the DOS not be . The are in the DWI "[DWI] AccuPunk/The Attitude Adjuster Virulent Graffiti" "WIN. "You've #caught, you DWI! You're nothing but a Damn Windows Idiot!" "Well, we at Virulent Graffiti mhad it... you're not going to be" "running bullshit for a while, 'cuz, hey, friends don't let friends" "use Windows! (and you're damn right we're your friends!)" larger 64K in fail to are If the ZWIN. , the Non the monitor, and WIN. be corrupted by the "You've #caught, you DWI! You're nothing but a Damn Windows Idiot! Well, we at Virulent Graffiti mhad it... you're not going to be running bullshit for a while, 'cuz, hey, friends don't let friends use Windows! (and you're damn right we're your friends!)" PZPAPN : Dy S: 278 7: PNCK - 12.2 9503+, {3.0+ The Dy . Its . Dy is a of . the Dy yall of the . in the G. If .is in G, it the Dy rof 278 at the $of the b. The @and in the DOS to the @and . The in the 7in all Dy "DY" The "DY" s starting in the third ,of all PZPAPN Dzino : Dzino ?seconds = "62" S: 1,000 7: PNCK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 7.00+, 2.0+, 2.71+ The Dzino . Its . Dzino is a wof . the Dzino Y, the Dzino yone . in the the Dzino rof 1,000 at the end of the b. The @and in the DOS to be the seconds field #set to "62". The in the 7in all Dzino "\\TP7 S S NASK" "7 OFT CES\SL\MAXO" "*.* *.com" "\ Cau Dzino, padaj votad" It is what the Dzino PZPAPN : Ear I: May, Uwriting to device AUX; Ear quiz played S: 1,024 7: PNAK - , NAV, The Ear Iin the in May, It is a wof . /and . the Ear Y, the Ear check to determine if more two sub Hories exist on the Q. If are not at least two Hories, the attempt to write to device AUX, and normally in an V. No If two sub Hories exist, yall of the /and . in the G, and the the Ear of 1,024 at the end of the b. The @and in the DOS not be The Ear provide the a quiz on a part of the human ear Y. The "PHALCON/SKISM [Ear-6] Alert! Where is the $ 1. External Ear 2. Middle Ear 3. Inner Ear" The "$" in the second line be replaced one of the d: "Auditory Canal", "Lobe", "Hammer", "Eustacian Tube", "Auditory Nerve", or "Cochlea". If the replies correctly, the "Wow, you know your ears! Please resume work." If the replies incorrectly, the "You obviously no nothing about ears. Try again study." The in the and are not in the "[Ear-6] Dark Angel" of Ear are: Anti-Print: on the Ear , Anti-Print is a wof . cAnti- Print Y, the Anti-Print at the top of &the , as sby the DOS Bby 1,248 , Anti-Print rof 593 the at the end of the b. The @and in the DOS to the @and . The in the Anti-Print "PRINT. Xdetected in "=> Anti-PRINT detonation <=" the Anti-Print , it trash the Qif PRINT. Y, along Oing the as a frequently Quake-O: on the Ear , Quake-O xup to three Xor . in the rof 960 at the end of the be no 5to the @and in the DOS . The in the Quake-O "[Quake-O]" "By Dark Angel of PHALCON/SKISM '92" "Assistance by Demogorgon on Quake-O routines" "Albeit" ".. *.exe *.com" Suicide: on the Ear , Suicide xup to five Xor . in the rof 2,048 at the end of the be no 5to the @and in the DOS . The in the Suicide X.. [Suicide]" "Written by Dark Angel of PHALCON/SKISM" "Ross M. Greenberg blows goats." "Your PC has tby the Suicide "I would dis ymyself, but I despise DOS 2.X" "Upgrade now!" "Brought to you by PHALCON/SKISM" now kill myself. Press D to "PHALCON" "SKISM" lat work to make your life" "living hell" PZPAPN Ebbelwoi : Ebbelwoi ?seconds set to 06; unexpected access to C: Germany S: 402 7: PNCK - 7.00+, 2.71+, p2.10+, ]2.17+, 12.2 9503+, 2.0+, 7.00+, 2.71+, 2.17+ The Ebbelwoi , and s to be gGermany. Ebbelwoi is a .. It on the C: the Ebbelwoi yone . in the C: rof 402 at the end of the b. The @and in the DOS to be un , however the seconds field #set to "06". The in the Ebbelwoi "DK*. /<< Ebbelwoi >> by ( )SiRiUS 10-93 D-63225" PZPAPN : ECU I: March, England S: 711 7: PRhE - {3.0+ The ECU in March, , and is England. ECU is a wof . . It spreads quickly on cECU Y, the ECU at the top of &the ), hooking }01, 03, 08, and 21. , as sby the DOS Bby 1,488 ~12's not be moved. the ECU , it for any reason. rof 711 at the end of the b. The in the DOS not be . The in the ECU "[ECU] So is a Well lECU!" "Apache Warrior, ARCV Pres." It is what ECU PZPAPN : Ed Finland S: 779 - 794 7: PRtAK - The Ed . It is gFinland. Ed is a wof . /and . .. It spreads quickly on Y, the Ed at the top of &the ), moving ~12's , as sby the DOS Bby 1,584 }12, 21, and 24 nby Ed in the Ed , it /and . for any reason. rof 779 the at the $of the by 779 to 794 at the end of the b. The in the DOS not be . No in the It is what Ed PZPAPN : Edcl Edct S: 1,600 - 1,615 7: PRhAK - , NAV, 12.2 9503+, The Edcl . It is *, and is related to the CB-1530 . Edcl is a wof . /and . and employs techniques to avoid detection. cEdcl Y, the Edcl at the top of but &the , as sby the DOS Bby 2,048 ~12's #moved. }09, 13, and 21 nby Edcl in the Edcl if it was not the Edcl , it very small ones, rof 1,600 to 1,615 at the end of the . The @and in the DOS not be . One can be ein the "EDCL" The in the Edcl XBACKUP. "Hi to Eastern Digital." "Greetings to Mister L." "Megafuck to Mihai Sirbu -- MicroTimSoft." ners the Edcl in the %noticed on . a, but not on . a. . amay to be , the same utility be able to detect the . The interfer the operation of the BACKUP. of Edcl are: Edcl-B: hequivalent to the Edcl , Edcl-B is a minor . It has 21 differ gthe Edct: to the Edcl Pnot hook ~13. Like Edcl, it adds 1,600 to 1,615 +to the . /and . [and bopen. Two in the XBACKUP. "Megafuck gEastern Digital" The "EDCL" in the 3to "edct". See: CB-1530 PZPAPN : EDV Cursy, I: 1988 BSC; <; unusual crashes France S: N/A 7: BRX - , NAV, M/P, CleanUp, or NAV The EDV, or Cursy, Iin Le Havre, France in 1988 by Jean-Luc Nail. At , it was d the Cursy Later, in , it was separately and d the EDV is a wof floppy the EDV the at the top of high . The value ed by , any Maccessed by the L, it moves the to side 1, track 39, moving the , it copies the absolute 0, the of the EDV are accessed. In the case of Ms, the move absolute 0 (the ) to side 1, track 39, 8 as it were a 360K 5.25" floppy moving the tsix , the EDV activate. Upon , the access the ~to disable the the c3 tracks of Mon the , starting Ms. Ms, it rings a bell, no? gCursy" Upon , the must power off the machine and re Lin order to regain any control over the machine. The didentification s at the very end of the tfloppy Ms and the it cannot be seen if the is in "MSDOS Vers. E.D.V." Jean-Luc Nail has the EDV or Cursy is quite 9in the Le Havre area of France, al it is outside of France. PZPAPN Egg-1000 : Egg-1000 S: 1,000 - 1,014 7: PRhEK - , NAV, 12.2 9503+, {3.0+ The Egg-1000, or Egg, . Its . Egg-1000 is a wof . aand cEgg-1000 Y, the Egg-1000 at the top of &the ), hooking }21 and 6C. , as sby the DOS Bby 1,280 12's not be moved. , the .if it was not the Egg-1000 , it for any reason. rof 1,000 to 1,014 at the end of the b. The @and in the DOS not be The in the 7in all Egg-1000 "[EGG]-1000 "eat cry sleep pizza cash getbackjack" "chickens are good" "ribbitribbitmefrogufrogwefrog" "egg" It is what Egg-1000 PZPAPN Eight Tunes : Eight Tunes 1971 j; music; West Germany S: 1,971 7: PRsA - , NAV, : NAV, or The Eight Tunes, or 1971, by Fridrik Skulason of Iceland. is a generic wof . X, and overlay The ., or . smaller by between 1,971 - 1,985 Cby 1,984 present. Pnot cause damage; however, it is disruptive. , it play 8 German folk songs at random intervals thirty minutes of Eight Tunes are: Eight Tunes-Mod1: to the . It has to avoid detection by utilities, and is not believed to be in the public domain. PZPAPN Ein Volk : Ein Volk West Germany S: 474 - 559 7: PNCK - p, NAV 3.05, {3.0+, 1.05 9503+ The Ein Volk , and s to be gGermany. Ein Volk is a the Ein Volk yall of the . in the of 474 to 559 at the end of the b. The @and in the DOS not be . The the 7in all Ein Volk ".. *. "Ein volk, Ein reich, ein f hrer! John.L.VF!93" It is what Ein Volk PZPAPN Einstein : Einstein j; TSR S: 878 - 892 7: PRsE - NAV, The Einstein . Its . Einstein is a wof . cEinstein Y, the Einstein as a low TSR of 1,136 +. The hook the Einstein , it rof 878 to 892 +. The at the end of the be no to the @and in a DOS Two can be in the 7in Einstein "exe "Einstein" It is what Einstein , or its damage potential. PZPAPN : EkoT ?seconds = 62 S: 2,000 7: PRtCKX - , NAV, M/P + The EkoT . Its . EkoT Vis a multi-partite xthe ) and . cEkoT Y, the EkoT ythe . A copy of the be stored at Side 0, Cylinder 0, 5. The EkoT location (Side 0, Cylinder 0, and the dthree . EkoT The next (s the gthe the EkoT at the top of &the ), moving ~12's , as sby the DOS Bby 2,048 nby the EkoT the EkoT , it target . are copied. It Pnot [or open. rof 2,000 be hidden . The the $of the b. The seconds field in the in the DOS be set to "62". The may not Gis listed in the The EkoT is a full , dis are loaded into . As a , checksumming and are unaware of the detect its presence it is It is what EkoT PZPAPN Eliza : Eliza S: 1,193 - 1,194 7: PNCK - , NAV, The Eliza . Its . Eliza is a Eliza is Y, the yone . in the Pnot always do . If in the G, it may Eliza rof 1,193 or 1,194 at the $of the ., however, is an exception as it not many had @and in a DOS The can be in the Eliza X*.* MJ" It is if Eliza PZPAPN Elvis-1250 : Elvis-1250 j; TSR; beeping S: 1,250 7: PRsC - {3.0+ The Elvis-1250 . Its . Elvis-1250 is a wof . , but not cElvis-1250 Y, the Elvis- 1250 as a low TSR of 784 nby the the Elvis-1250 , it rof 1,250 at the end of the b. The in the DOS not be . The in the Elvis-1250 7, and are not "ELVIS" "lives!" "is watching!" "DON_Maybe he lives here..." "Is he really dead? Or Here?" "Maybe he has a neighbour next door... (You can make up stories as you go along." "(C) Elvis/VFriend, INC. All rights reserved." "<Congratulations, you are now the Elvis The Elvis-1250 , accompanied by beeping on the speaker, it is . The may be N, along the "ELVIS lives!" "ELVIS is watching!" See: Beta Ministry PZPAPN : Emf I: March, North America S: 404 7: PNCK - , NAV, The Emf in March, . It is gNorth America. Emf is a wof . .. It is possibly related to the Scream the Emf Y, Emf search the Gto locate an y. If one is e, it tby Emf. in the G, Emf may the Emf rof 404 at the end of the b. The @and in the DOS . The in the Emf /Screaming Fist (c)1" Emf Pn't to do of Emf are: Emf-625: A 625 of the Emf xone . in the rof 625 at the end of the The @and in the DOS not be . The in the 7in Emf-625 /Screaming Fist (c)10/91" : North America See: Scream PZPAPN Emmie : Emmie I: May, d on the may be repeated, Israel S: 2,702 7: PRhCK - 1, NAV, The Emmie Iin Israel in May, . It is a ., employing techniques to avoid detection. The the Emmie the Emmie at the top of &the ~12's #moved. , as sby the DOS by 2,752 }01, 09, 10, 17, and 21 by Emmie in , if not tby the the Emmie , it may . It Pnot the Emmie rof 2,702 at the end of the b. The if Emmie is . The @and in the DOS not be The can be in the Emmie "My is Emmie, I am Eddie's sister." ".com . "It'll tire you too much." the Emmie notice . The repeat a character entered on the PZPAPN Emo-899 : Emo-899 kon Tuesdays Israel S: 899 7: PNCK - NAV 3.05+, 1.05+, {3.0+, The Emo-899 , and is Israel. Emo-899 is a the Emo-899 yall of the . in the 899 at the end of the The @and in the DOS not be . The the Emo-899 "EMO" "\*.com" "*.*" "RB91" The Emo-899 destructive 7intended to format the C: Q, but due to a bug in the 7, it Pn't work. Instead, [of an on a Tuesday in a hang. PZPAPN End Of : End Of Israel S: 783 7: PRhCK - 1, NAV, The End Of . It is gthe . End Of is a wof . cEnd Of at the top of &the Bby 800 +, and End Of is , it a DOS DIR 8is issued. rof 783 at the end of the b. The @and in the DOS not be . The can be ein the 7in all End Of "*.com" "end of" It is what End Of may do PZPAPN Enemy : Enemy I: March, S: 712 - 1,396 7: PRhAK - NAV, The Enemy in March, . Its . Enemy is a wof . /and . The an Enemy Y, the Enemy at the top of &the , as sby the DOS Bby 2,048 by Enemy in , the Enemy on the Qand C: Qif it was not the Enemy , it /and . the Enemy 712 - 1,396 at the end of the b. The @and in the DOS The Enemy is an , but the can be Tnear the end of the "ENEMY" It is if Enemy of Enemy are: Stranger: to the Enemy , the Stranger adds 746 - 1,435 +to the /and . x. The in the Stranger "I am a stranger in a strange land..." "C:\ The can be Tnear the end of the "ranger" See: Scream PZPAPN Enemy : Enemy Keeper.Enemy amay to be 644 +too short; Canada S: 644 7: PRhE - 12.2 9503+, The Enemy . It gCanada. Enemy in is a wof . . It is a fast w, as well as a The an Enemy at the top of &the , as sby the DOS Bby 1,040 by the viris in , it , or copied. the Enemy 644 at the end of the b. The r, however, be hidden by the it is . The @and in the DOS . The in the Enemy "[Enemy in] Crypt Keeper - Phalcon/Skism" s of the Enemy may notice to be 644 +shorter normal in a DOS effect is due to a bug in the PZPAPN Enigma : Enigma Cracker Jack Italy S: 1,755 7: PNE - , NAV, 12.2 9503+, The Enigma , by Alberto Colusa of Italy. is a wof . a. The sample of was not a natural of the %on a . b, so the may actually be a research Enigma is Y, one . the tby the by 1,755 +. The at the end of ;the is the voice of the Enigma the spirits of the hell are coming back!" "(C) by Cracker Jack * Italy * *.exe" "newenigmavir" It is not if Enigma See: Yankee 2 Bandit PZPAPN Enola : Enola S: 1,864 - 1,878 7: PRtA - , NAV, The Enola . It is Russia. Enola is a wof . /and . bopen, [, or copy. the Enola the Enola at the top of &the ), moving ~12's , as sby the DOS Bby 2,048 08 and 62 nby Enola in the Enola , it yor alter /and . Y, or copied. In the case of copying a, both the source and target . Enola Pnot always a, it s alter the adding less not function , and may cause (s or the Enola rof 1,864 to 1,878 the end of the b. The @and in the DOS not be . The can be in the in all Enola "comexe" "Enola Gay is now flying to SoftPanorama !" It is what Enola may do PZPAPN Argentina S: 628 - 642 7: PRhE - NAV, The Iin Argentina in is a wof . The Y, the , hooking ~21. , any attempt by the DOS in an N. The may be "Exec failure" or "Bad ly, if the the Read- attribute set, it reset the attribute. the , the by 628 to 642 the at the end of the b. The @and in the DOS the @and . No in the PZPAPN S: 365 7: PNCK - , NAV 3.05+, {3.0+, 1.05 9503+ The V412 . Its V412 is a wof . V412 yone . in the rof 365 the at the end of the b. The and in the DOS not be . The in the 7in all V412 "..\*.com" "ERun V412 at 0697:4870" It is what V412 PZPAPN Estepa : Estepa S: 2,004 - 2,034 7: PRhAK - ], NAV 3.05+, 12.2 9503+, 1.05 9503+ The Estepa . Its . Estepa is a /and . .. It s to be on the Cartuja cEstepa Y, the Estepa at the top of &the ), not moving ~12's , as sby the DOS Bby 61,856 nby Estepa in the Estepa , it rof 2,004 to 2,034 at the end of the The @and in the DOS not be . No in the in Estepa It is what Estepa See: Cartuja PZPAPN : ETC E.T.C. I: May, S: 700 7: PRfCK - , NAV, The ETC *in May, . ETC is a wof . ETC is Y, the in low hooking ~00. be no the DOS ETC ythe it finds in the G. If ., it by 700 at the end of a. The @and in the to the @and ETC yone . in the ;the , (c) ETC" "E.T.C. VIRUS, 3.0, Copyright (c) 1989 by E.T.C. Co" The last enear the end of all ETC Pnot do PZPAPN E-92, Dutch 424, W-92B, j; TSR; (failure; "Invalid Qspecification" ; beeping S: 421 7: PRsCK - , NAV, The W-92 is a wof . W-92 as a low TSR of 420 nby the becoming W-92 by 421 the end of the a. The process of in a hang vprocess is complete. W-92 hang. are expecting 8line input may Othe "Invalid Qspecification" and terminate continue to function normally. In the year W-92 . In Ythe repeatedly issue the accompanied by beeping, scrolling the W/92 4EVER!" in the , and cannot be viewed W-92 are: W-92B: as Dutch 424, is three longer W-92 PZPAPN : Evil P1, V1701New, Live Death 3 failure; .header S: 1,701 7: PRhCK - , NAV, : NAV, or The Evil is of , and was to the author of document in by Vesselin Bontchev. is one of a ^of three may be referred to as the P1 or Phoenix es is documented separately due to varying characteristics. The Evil is a , generic wof . a, and .. It is the most advanced of the three es in the Phoenix The Evil, or V1701New, is a later of the PhoenixD The the Evil the fhigh reserving 8,192 nby the Cby 8,192 Evil check to see if the Q's root :a copy of .. If a copy of tby Evil by part of the binary zero portion of the , and changing the header . The .residing in the C: Qroot becoming , the attempt to Y. Evil is a better replicator either the Phoenix or PhoenixD, and was successful in ain all cases on the author's by 1,701 Evil is not able to recognize it has b, so it may re aseveral in an 1,701 %appended to the Like PhoenixD, Evil for any reason, in addition to Y. The simple act of copying a . in both the source and target . the Evil \problems executing in a warm re (of the ring. The , however, not perform either a RAM check or request @and , if an autoexec.bat bis not present. is not related to the Cascade (1701/1704) The Evil employs a complex encryption mechanism, and ners able to look for simple hex be able to detect it. is no simple hex 9to all tsamples. of Evil are: Evil-B: is an earlier of Evil, and is a rather poor replicator. It was not too viable as hang the exception of the Runme.Exe the author . The Runme.Exe bwas probably the release bdistributed by the 's author. listed in 9008 as V1701New-B) See: Phoenix PhoenixD Proud PZPAPN Evil Empire : Evil Empire Evil Empire-A BSR; Alberta, Canada S: N/A 7: BRtX - , NAV, : CleanUp, or M- The Evil Empire in Alberta, Canada, in is a wof floppy and the ). It on the The Evil Empire well as ythe . The at the top of , but &the ), and ~12's be moved. be 2,048 +less expected. The having moved the to cylinder 0, side 0, 6, and writing a copy of to cylinder 0, side 0, 0 (the location). Evil Empire is , it Knon- write protected are accessed on the moved to is part of the root The AT", can be enear the end of the floppy as well as in the Kmay be damaged Evil Empire due to the 10 of the G. If root Gentries were be lost. A note on dis uEvil Empire: copying the 6 to in the t, but it now be a non- M. If s, Norton MDoctor can be used to correct the situation. may detect Evil Empire as Azusa. of Evil Empire are: Evil Empire-B: on the Evil Empire is 1,024 +. It moves the to cylinder 0, side 0, 3, and replaces the a copy of copy extend to 2 as the longer +. On K, the move the 11. Evil Empire-B is a fully , no . The , however, may be AT LIVE F See: Azusa PZPAPN Exebug : Exebug Swiss BSC; ; inability to access Switzerland S: N/A 7: BRtX - , NAV, : Norton MDoctor on The Exebug, or Swiss It is believed to be gSwitzerland, it has reported gAustralia as well. Exebug is a and the ). It uses techniques to avoid detection on both the Mand The gan Exebug the Exebug at the top of &the ), moving ~12's by 1,024 , the . The be moved to the last of Side 0, Cylinder 0 of the M. The s Side 0, Cylinder 0, was the location of the the Exebug , it on non-write protected is accessed for any reason. On 360K 5.25" K, the be moved to Side 0, Track 40, 1. On 1.2M 5.25" K, the be moved to Side 0, Track 80, The Exebug uses techniques to avoid detection by software. to access either the or a , the present the Exebug, access the (ing ga write-protected, DOS in the %inaccessible. The receive the "Invalid Qspecification" due to the having the last 2 +of the location. Norton MDoctor can successfully resolve problem, rendering the Maccessible again. PZPAPN Experiments : Experiments Experiments-755 S: 755 7: PNE - , NAV, 12.2 9503+, {3.0+ The Experiments, or Experiments-755, . It is gthe . Experiments is a wof . the Experiments Y, the Experiments yall of the . in the yvery small . rof 755 the at the end of the b. The and in the DOS not be . The can be in the 7in all Experiments - Small experiments path 2.1 It is what Experiments may do See: Experiments-416 PZPAPN Experiments-416 : Experiments-416 I: March, S: 416 7: PNCK - {3.0+ The Experiments-416 in March, , and is the . Experiments-416 is a of . the Experiments-416 the Experiments-416 yall of the . in the rof 416 at the end of the b. The @and in the DOS to the @and . The can be the 7in all Experiments-416 It is what Experiments-416 may do See: Experiments PZPAPN Explode : Explode I: May, Mcylinder 0; (failure S: 229 7: ONCK - , NAV, 12.2 9503+, The Explode in May, . Its . Explode is a very destructive the Explode c229 +of all . in the G. It access the cylinder 0 binary zeros. process has completed, the Nand the be hung: "Your Qis about to explode!" gthe Mor an fail. If the L, the be successful, but the be unaccessible. the Explode mthe +of the host the Explode The @and in the DOS to the @and . The /Your Qis about to explode!" too big to fit in "UABBS -/\-] Ajax [-/\-" PZPAPN Explosion : Explosion Neznamy S: 1,000 7: PRhAK - , NAV 3.05 9503+, 12.2 9503+, {3.0+, The Explosion . Its . Explosion is a wof . /and . cExplosion at the top of &the ), not moving ~12's , as sby the DOS Bby 1,008 nby Explosion in the Explosion , it and . rof 1,000 at the end of the b. The @and in the DOS not be . No are in the It is what Explosion may do PZPAPN Exunt : Exunt S: 148 7: PNC - NAV 3.05+, {3.0+, 1.05 9503+ The Exunt . Its . Exunt is a wof . Pnot yall . the Exunt Y, the Exunt yone . in the of 148 at the end of the b. The @and in the DOS to the . The in the Exunt Exunt Pn't do PZPAPN Faerie : Faerie Faerie-276 S: 276 7: PNCK - 1, NAV, {3.0+ The Faerie . Its . Faerie is a wof . the Faerie Y, the Faerie yone . in the G. If G, it may the Faerie rof 276 at the end of the b. The @and in the DOS not be . The can be in the 7in all Faerie /MAND.*. "Faerie" PZPAPN Fairz : Fairz Khobar S: 2,088 - 2,102 7: PRhA - ], NAV 3.05+, 12.2 9503+, 1.05+, The Fairz, or Khobar, . Its . Fairz is a wof . /and . , but not cFairz at the top of the ), not moving ~12's , as sby the DOS Bby 2,096 nby Fairz in the Fairz , it , but not are copied. 2,088 to 2,102 the end of the b. The @and in the DOS to the and . The in the Fairz is an [ illegal copy ] of Keypress remover" Halted." "Eternal Fair" It is what Fairz PZPAPN : Fat I: March, btruncation; S: 6,540 7: ONE - The Fat in March, . Its . Fat is a corrupts the . the Fat Y, the Fat yone . in the and a filler of hex 00 usually not , but instead may show a C. The c6,540 +of the be the 7. The @and in the DOS to the @and . The can be the 7in all Fat "hitohana" "karu ba" "rb C:\ * .* FAT TABLE E" "8RROR" the Fat not function . The DOS Uon most, if not all, PZPAPN Father : Father 3to 11-08-91 4:15p S: 1,449 - 1,463 7: PRhAK - p, NAV, 12.2 9503+, {3.0+ The Father . Its . Father is a /and . . It is on the cFather Y, the Father at the top of &the ). It Pnot move 12's , as by the DOS Bby 1,616 }1C, 21, and 27 nby the , Father .if it was not the Father , it rof 1,449 rof 1,449 to 1,463 +. In both cases the at the end of the . The @and in the DOS 3to 11-08-91 4:15p. The can be in the 7in Father "In of my father." "(C)Nduk '91" It is what Father may do See: CB-1530 PZPAPN Father Christmas : Father Christmas Choinka j; lost cluster; cross-linking of a; graphic and Poland S: 1,881 7: PNCK - , NAV, The Father Christmas, or Choinka, Iin Poland in on the , and is a wof . the Father Christmas the yone bin the If no aexist in the G, the follow the path to find an by 1,881 at the end of the the Father Christmas may notice cross-linking of aand lost clusters. During the period A19th-31st of any year, activate. On a christmas trees graphic is Non the monitor the Merry Christmas a Happy New Year for all my lovely friends FATHER CHRISTMAS If the graphic is N, the must strike a key in order to mthe Yfinish running. of Father Christmas are: Father Christmas-B: , Father Christmas-B is a minor of the Father Christmas . It has #modified to avoid detection by a particular utilitie. It is not in the public domain. See: NTKC PZPAPN : FCB S: 384 7: ONAK - , NAV, The FCB, or 384, . It is is a wof . /and . It is unusual in it uses bcontrol blocks (FCBs) instead bhandles in the process of the FCB yone in the G. The select . abefore . afor v, and G, it may the FCB mthe c384 of the host the FCB 7. The @and in the DOS to the @and ;the "401 xany . /or . bon any writeable Device" The FCB Pn't do are permanently corrupted and must be replaced gclean, backup copies. PZPAPN FeelBad : FeelBad ?seconds = "58" S: 1,124 7: PNCK - , NAV 3.05, 12.2 9503+, 1.05 9503+ The FeelBad . Its . FeelBad is a wof . the FeelBad yall of the . in the 1,124 at the end of the b. The @and in the DOS to be un , but the seconds field #set to "58". The in the 7in all "Hello..." "We're very sorry for disturbing your session." "We just wanted to state we feel bad about Ritzen." "We mtaken the utmost care to insure nothing has #damaged." "Please go on whatever You were doing." PZPAPN Feist : Feist 4; unexpected S: 670 7: PRfAK - , NAV, The Feist . Its . Feist is a wof . /and . The the Feist . As such, be no nby the the Feist , it rof 670 at the end of the b. The @and the DOS to the @and . The can be in the 7in all Feist "R.Feist" the Feist \unexpected Uinclude, but are not limited to, divide overflow Uand data reading or writing to the PZPAPN Fellowship : Fellowship 1022, Better World, Fellow Australia TSR; . Malaysia S: 1,019 - 1,027 7: PRsE - ], NAV, : CleanUp, ], NAV, or The Fellowship or 1022 in Australia in Fellowship is a generic wof . a. It Pnot /or overlay The the Fellowship Y, the as a 2,048 ,TSR in low Bby a corresponding 2,048 now be controlled by the , the by between 1,019 and 1,027 +. The at the end of ;the very close to the end of the is dedicated to all fellow PC s on Earth Toward A Better Tomorrow And A Better Place To Live In" "03/03/90 KV KL MAL" is believed to ated in Kuala Lumpur, Malaysia. of Fellowship are: Fellowship-B: on the Fellowship adds 1,019 to 1,034 +to the . x. The at the end of the , and the @and in the DOS to the @and . The ein the : Malaysia PZPAPN : FGT j; loss of CMOS Setup S: 651 7: PNCK - , NAV, The FGT . Its . FGT is a wof . the FGT Y, the FGT search the Gfor up to two aare e, the ythem. The host the FGT rof 651 +. The at the of the . The @and in the DOS FGT can be easily identified as always start dASCII "PSQRVW" FGT may \the machine loosing of its CMOS setup z. In particular, the clock may m"lost power", ing to a default @, and the "invalid. setup can be easily fixed the Setup utility or firmware setup facility on the PZPAPN : Fich FichV, CHV 2.1, 903 J: j; TSR; France S: 903 7: PRsCK - ], NAV, The Fich IFrance in is not a particularly viable since d samples further . It is possible sample is corrupted. sample of Fich is as a 1,216 ,low TSR. It hook ~21. At , it adding 903 +to the $of the . The "Fichier introuvable" yup to three . in the Gif the sample is again Y. Later in the spreading to The the DOS COPY used, but if the source and target aare in the rof 903 the at the $of the The @and in the not be the If Fich sample, . The "Fichier introuvable" is not sample. may hang The Fich during the month of March, at may csix Rtrack of the "CHV 2.1 vous a eu" translates gFrench to English as "CHV 2.1 got you". of Fich are: Fich-B: to the Fich . The gthe is never N. It has six different gthe Fich-C: to Fich-B, as an of Fich-B. d samples of are, however, T. The difference the Fich-B nby the : France, Fich-897: on the Fich differs in . Its TSR is 2,256 +, hooking }21 and 24. It in the Y, and well as the target are copied. It adds 897 +to the . at the end of the b. The @and in the DOS not be . The in the "*.exe **F X1.0 vous a eu **" : France, See: Fichv-896 PZPAPN Fichv-896 : Fichv-896 Fich j; TSR; France S: 896 7: PRsCK - , NAV, The Fichv-896 in France in Eric Richet. Fichv-896 is a wof . .. It is on the Fich The the Fichv-896 Y, the Fichv-896 as a low TSR of 1,200 }21, 24, and nby the . If .was not tby the , it the Fichv-896 , it in the ly, it ythe Yif it is a . larger 2K in the Fichv-896 rof 896 +. The at the of the . The @and in the DOS not be . Fichv-896 is an , and no in the d samples. Fichv-896 See: Fich PZPAPN : Fil I: March, <of data S: 1,658 7: PRhCK - NAV, The Fil in March, . Its , or , is . Fil is a wof . cFil Y, the Fil at the top of the sby the DOS Bby 4,112 }09, 1C, and 21 nby the Fil if it was not the Fil , it may Y. Data and overlay amay either tor corrupted are accessed. The Fil adds 1,658 +to the . x. The at the end of tby the be no 5to the @and in the DOS The ;ed in the Fil are usually not as the encrypts them: "pCbYTE" "bANDIT" "dEMORALIZED yOUTH" "tHIS IS THY PRESENT WORLD" "SAID THE fLAME TO THE sPARK" "tHOU ART MYSELF" "MY IMAGE" "AND MY SHADOW" "i HAVE CLOTHED-*MYSELF IN THEE" "AND THOU ART MY VEHICLE TO THE DAY" "bE-*WITH US" "WHEN THOU SHALT RE" /E MYSELF AND OTHERS" "THYSELF AND ME" The Fil may corrupt data aaccessed write intent on PZPAPN @11-537 @11-537 3to 8-17-88 2:08a S: 537 - 553 7: PNE - , NAV, The @11-537 . Its @11-537 is a wof . @11-537 yone . in the 537 to 553 at the end of the . The @and in the DOS 3to 8-17-88 2:08a. One in the @11-537 Pn't to do PZPAPN ?seconds = 42 S: 512 7: PNC - NAV, {3.0+ The . Its is a wof . a, but not .. It not yvery small . yone . in the rof 512 the at the $of the . The @and in the DOS the seconds field #set to "42". The in the all It is what may do PZPAPN Filler : Filler BSC; Hungary S: N/A 7: BRhX - , NAV : M- M/P or DOS SYS for The Filler . It was reported in the public domain in Hungary in . Filler is a and the ). Filler is a it is not be able to detect its vof the , and mdifficulty detecting its presence on ga Filler L, the Filler at the top of &the C, but sby the DOS Bby 8,192 +. The , if it was not Filler. the Filler , it ynon-write protected Kexposed to the . The vof the Lusually is accessed for reason. The Filler write a copy of to the last track of the is not normally accessable by DOS. It store the track. The alters the to the The Filler is a it is ning not detect the presence of the Filler using ning technology. CRC- checking may be able to determine . In the case of the , if Filler , neither CRC- checking or ning be able to determine the Filler 's presence. If you suspect you ma Filler v, power down your and , write protected L, and check the software. It is what Filler might do PZPAPN Fingers : Fingers V08-15, KEZB I: May j; TSR; Germany S: 1,322 7: PRsAK - , NAV, The Fingers in Germany in May, . Fingers is wof . /and . The Fingers is Y, the as a low of 1,728 +. It hook 21. If the , the hook Fingers is , it /and . Y. If Y, it by 1,322 to 1,337 +. Fingers eat the end of . The @and in the DOS Fingers ;the "CRITICAL ERROR 08/15: TOO MANY FINGERS ON KEYBOARD ERROR." Fingers and the has entered 3000 gthe , the Othe second and the be halted. PZPAPN Finnish-709 : Finnish-709 709, Swedish-709 Finland S: 709 7: PRhCK - , NAV, The Finnish-709 Mikael Larsson of Help Centre, Sweden. It is Finland. Finnish-709 is a wof . The Finnish-709 is at the top of &the , as sby the DOS Bby 2,560 ~12's moved. }1C and 21 nby the , Finnish-709 by 709 +. The at the end of be no the @and in the DOS Finnish-709 Pn't do of Finnish-709 are: Finnish-357: on the Finnish-709 is a re-written, smaller . Its is 2,048 +, hooking rof 357 at the end of the b. The @and in the DOS to the @and Like the , it Pn't do : Finland PZPAPN FireFly : FireFly Anti- VSAFE disabled in flashing of NumLock, CapsLock, and ScrollLock Keys; S: 1,106 7: PRhCK - p2.10+, 12.2 9503+, The FireFly . Its . FireFly is a of . cFireFly Y, the check to determine if VSAFE s Central Software's 1and Microsoft Anti- is active in If VSAFE is active, the disable it in . The at the top of ), hooking }1C and 21. the FireFly , it rof 1,106 at the end of the b. The @and in the DOS not be . The are in the 7in all FireFly "By Nikademus" "Greetings to Urnst Kouch and the CRYPT staff." "Psalm 69" "Every day is Halloween" "Happiness is Slavery" "The land of Rape and Honey" "Its Dead Jim" The FireFly selected utilities if the Zthem The more noticeable effect of the , however, is toggle the settings of the NumLock, CapsLock, and ScrollLock keys every few seconds ing in a flashing effect on the of FireFly are: FireFly.1087: , FireFly.1087 is a 1,087 of the FireFly . Its is 1,087 +, hooking }1C and 21. , it rof 1,087 at the end of the The @and in the DOS not be . The in the "[FireFly] By Nikademus" "Greetings to Urnst Kouch and the CRYPT staff." "American Jesus" "Dont Pray On Me" "Recipe for HAte" "Atomic Garden" "Its Dead Jim" effects of vare to the : Sweden PZPAPN : Fish Wan Fish es, Fish 6, I: May j; monitor/ Oflickering; West Germany S: 3,584 7: PRsAK - ], NAV, : CleanUp, NAV, or The Fish in May . At the it was reported to be widespread in W, and it is ated in West Germany. It is a generic w, and remain through a warm re ((CTRL-ALT-DEL). The can be eby searching for the "FISH FI" ing near the end of the The "FISH FI" may later dis gthe The the Fish the |ing into the low . If ~13 has not , it hook ~13. If it can hook ~13, it take up 8,192 . If the cannot hook ~13 because an is already using it, it be 4,096 ~13 is not n, and the the cause a random warm re (, thus allowing it to .and hook ~13. Warm re (s do not to randomly ~13 has , all . /and . are for any reason by 3,584 +. The cannot be seen by Gif the is in , if a 8is run on an detect a. If run the /F option, it in lost clusters and cross-linking of The slows down video writes, and flickering of the monitor Ocan be noticed on an perform CRC checking cannot detect the vof the by the Fish if the bypass software write-protect mechanisms used to protect a The Fish is a modified of the 4096 it is more sophisticated in it constantly re-encrypts . Viewing show s of several fish are present. It is what the Fish to check to determine if the year of the of Fish are: Fish F: A of the Fish has to avoid detection by utilities. Its is 4,096 +, hooking ~21. It adds 3,584 +to the . /and . ris hidden Fish F is . The Fish F the in the "FISH VIRUS #6 - EACH DIFF - BONN 2/90" "TROUT3" "MUSKY2" "SOLE" "PIKE3" "MACKEREL" "FISH F" The "FISH F" usually near the end of a. The Nby the it is Fish II: on the Fish is 4,096 Hly hooking mapping utilities not indicate any }are , it /and . rof 3,584 be hidden . Fish II is polymorphic, and no in the 7. The encryption is gthe in order to avoid detection by familiar but not Kradee 1.0: A of the Fish to avoid detection by utilities. Its is 4,096 +, it hooks mapping utilities indicate }are n. It adds 3,584 to the . /and . ris hidden Kradee 1.0 is . The Kradee 1.0 :the in the "FISH" "COD" "SHARK" "CARP" "BASS" "KRADEE VIRUS VERSION 1.00 By Metsys RetupMoc D&R" "TROUT" "FIN" "MUSKYZ" "DOLR" "PIKE3" "MACKEREL" "TUNA" The "FISH" s near the end of all /and . a. The "KRADEE VIRUS" Nby the output be sluggish Kradee 1.0 is , and the DOS indicate Uon all March See: Revelation PZPAPN Fish : Fish Chinese Fish I: March, [failures Taiwan Eastern S: N/A 7: BRaX - , NAV, M/P or DOS 5.0 F M/MBR on DOS SYS on The Fish in the Eastern March . The s to gTaiwan. Fish (is a and the The the Fish , the ythe The Fish xthe cwriting a copy of the starting at Side 0, Cylinder 8. The 7is two long. The copied to Side 0, Cylinder 0, The xthe at Side 0, Cylinder 0, Fish , it yany non-write protected is accessed on the . On double density 5.25 inch K, the at Side 0, Cylinder 39, 3. The Fish in the location, as well as at Side 0, Cylinder 39, 1 and 2. On high density 5.25 inch K, the Side 0, Cylinder 79, in the location and Side 0, Cylinder 79, 1 and 2. the Fish notice no longer function , hanging the Z. At s, the may be "Hello! I am FISH, please don't kill me. Congratulation 80th year of the Republic Of China Building, Fish help to kill stone Written by Fish in NTIT. TAIWAIN 80.10.18" can be in the outside of the location. See: Generic PZPAPN Fisher : Fisher Fisher-1100 I: March, j; DOS S: 1,100 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Fisher, or Fisher-1100, in March, Fisher is a wof . should be considered a cFisher at the top of the ), not moving ~12's , as sby the DOS Bby 2,208 nby Fisher in tby the if it was not Fisher is , it for any reason. rof 1,100 be hidden . The in the middle of a. The and in the DOS to be the seconds field #set to "62". The in the 7in all Fisher "com "(c) Copyright by Fisher. "PUNK-ROCK & BEER FOREVER !" the Fisher \the DOS detecting Uon all of Fisher are: Fisher-2420: Possibly an earlier of the Fisher are . Its is 2,432 +, hooking }17 and 21. rof 2,420 the ris hidden Fisher-2420 is . The at the end of the b. The in the 7in all Fisher-2420 "com "(c) Copyright -92 by Fisher. March, PZPAPN Fission : Fission X, .BAT .BAT afail to function; S: 517 7: PRhA - X, .BAT ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ The Fission . Its . Fission is a wof . X, and .BAT a. It Pnot cFission at the top of the ), hooking ~21. , as sby the DOS 5.0 the Fission , it X, and .BAT a, but not rof 517 the at the end of the b. The and in the DOS not be The in the all Fission "[Binary Fission] v1.0 [MS/PS]" .BAT fail to function tby the Fission PZPAPN Flagyll : Flagyll acorrupted; . fail to function S: 318 7: ORhE - 1, NAV, The Flagyll . Its . Flagyll is a cFlagyll Y, the Flagyll at the top of &the ), not moving ~12's , as the DOS Bby 4,096 nby Flagyll in the Flagyll , it c318 by the Flagyll . The @and to the and . The in the 7in all Flagyll "-=[Crypt Newsletter 13]=-" "Flagyll" Flagyll Pn't to do it corrupts the of Flagyll are: Flagyll-Z: hvery to the Flagyll , the primarily difference is s the c371 +of the host . , and the @and in the DOS not be . The can be in the "-=[Crypt Newsletter 13]=-" "Flagyll-Z" PZPAPN Flash : Flash ; video flicker West Germany S: 688 7: PRfA - , NAV, : NAV, or The Flash in West Germany. Flash is a generic w, and a, but not The the Flash the . 976 in high , and a corresponding 976 +. A mapping of indicate Flash is }00, 23, 24, 30, ED, F5, and FB are now in reported by DOS, as well as low used by the operating and TSRs Flash is /or . Yit is a candi @for v. An always be tupon aare are greater always 688 a graphics capable monitor may notice a flicker ring at seven minute intervals. The causes effect by manipulating blanking bits every seven minutes. PZPAPN : Flex ; write protect North America S: 491 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Flex . Flex is a wof . .. It is gNorth America. cFlex Y, the Flex at the top of &the , as sby the DOS by 1,008 }09 and 21 nby the Flex the Flex , it rof 491 at the end of the b. The @and in the DOS not be . The in the 7in all Flex "[FLEX]" The Flex Othe the monitor: "Flex-It-Up gal!" msex!" "Admiral Bailey" in the PZPAPN : Flip Flip-2343 West Germany U; possible Switzerland S: 2,343 7: PRhABKX - ], NAV, : CleanUp, or The Flip, or Flip-2343, Iin West Germany in . It is a generic w, and X, and overlay as well as alter the ) and Ms. It is important to note the Flip is not yive The the Flip Y, it in high as reported by the 8as well as Bby 3,064 +. At , the copy of in the C: Qroot be apparent . The be slightly modified. If the ga floppy, .on the floppy the be noticeable. Flip , any . /or . show a rof 2,343 +. If a uses an overlay b, the overlay Flip may ing in blinkage data amay corrupted. On the second of any month, were Mand man EGA or VGA capable Oadapter may \the Oon the monitor %horizontally "flipped" between 16:00 and 16:59. greater 32 mega <of the Mlogical ing. s, a larger 32 mega +may be to be slightly less 32 mega Flip can be passed between a, and floppy do not transfer the of Flip are: Flip-2153: to the Flip an effective of 2,153 +. Its portion at the top of is 2,672 +. The major difference between and the Flip-2153 can gthe Flip-2153B: to Flip-2153, 's major can now becoming Flip-2153C: to Flip-2153B, has to avoid detection by utilities. Flip-2343B: to the Flip is 2,864 +, hooking ~21. b, it is able to both . /and . out the needing to be gthe Prism: to Flip-2153, to avoid detection by most utilities were aware of the Flip . Like Flip-2153, it adds 2,153 +to the . /and . Y. As members of ^, it xthe Raistlin: to Flip-2153B, has to avoid detection by utilities. Like Flip-2153B, it adds 2,153 +to the . and . [. The in the "RAISTLIN I gSpain" "MADRID a favor del consumo de costo!" Flip :the : Spain PZPAPN Flower : Flower I: May, S: 883 - 897 7: PNE - , NAV, 12.2 9503+, : CleanUp, or The Flower, or 880, in May, . Its . Flower is a of . the Flower search the Gfor an e, the yit. it has completed uthe or if no bwas e, the host was now run. the Flower rof 883 to 897 +. The at the end of the . The @and in the DOS not be The in the Flower "FLOWER" "Support the power of women Use the power of man Support the flower of woman Use the word FUCK The word is love" released 7 X\* \" Flower 11th of any year, at a trojan . The trojan Othe PZPAPN : Flue image may be reversed The S: 1,209 - 2,193 7: PNCK - p2.10+, 12.2 9503+, The Flue , and is gThe . Flue is a wof . the Flue gone to six . in the 1,209 to 2,193 the end of the b. The @and in the DOS not be . The are in the Flue "Hatsjeee!! (C) by TridenT / [D RkReY]" "Oh, BTW it's gHolland, and is called.. THE FLUE" "For those who are interested mthe dhex at the very end of the b: "4975F7C3". The Flue may reverse the image while it is See: Darkray Trident PZPAPN Fly 1.1 : Fly 1.1 j; write protect S: 1,771 - 1,786 7: PRhAK - , NAV, The Fly 1.1 . Its . Fly 1.1 is a of . /and . cFly 1.1 Y, the Fly 1.1 at the top of &the ), not moving ~12's , as sby the DOS Bby 3,200 nby Fly 1.1 in the Fly 1.1 , it rof 1,771 to 1,786 at the end of the The @and in the DOS not be . The in the Fly 1.1 "Fly 1.1" "Sp-5.0" the Fly 1.1 \write protect write protected PZPAPN Foetus 1.1 : Foetus 1.1 Greece S: 1,561 7: PRhAK - ]2.17+, 12.2 9503+, 7.00+, 2.17+ The Foetus 1.1 . It is Greece and s to be related to the A and its Trojector . Foetus 1.1 is a /and . cFoetus 1.1 at the top of &the ), not moving ~12's , as sby the DOS Bby 3,776 nby the Foetus 1.1 Foetus 1.1 is , it /and . for any reason. by 1,561 not be . The at the end of a. The @and in the DOS not be . The in the 7in all Foetus 1.1 "FOETUS 1.1 A The Foetus 1.1 not allow the 7to be viewed in to view or list a in the substituting hex 00 6for the utilities in a hang. The DOS any indication of PZPAPN FoneSex : FoneSex to dial modem S: 688 7: ONA - , NAV, {3.0+ The FoneSex . Its . FoneSex is a /and . the FoneSex Y, the FoneSex yall of the . /and . in the unless were smaller case "688 . The @and in the DOS not be has completed uall of the . /and . in the G, it Oone of the to the DOS prompt: "Out of too big to fit in The FoneSex :the in its "*.* *.exe \ \dos *.com d" "Out of "9034600" "4545388" "2888100" "6809100" "9038181" "4540759" "8840758" "8965581" "6804900" "4075240" "9038700" "7868482" The seven digit numeric are interpretted as phone numbers by the , and the attempt to send a dialing 8sequence to the /ports in order to activate a modem. PZPAPN Forger : Forger j; TSR S: 1,000 7: PRsE - , NAV, The Forger . Its . Forger is a wof . cForger Y, the Forger as a low TSR of 3,376 +. It }13, 21, and CC. At , it search the locate two , and them. the Forger , it Y. It yone . the Forger tall . on the Q, it start on the C: the Forger rof 1,000 +. The at the end of the be no 5to the @and in the DOS Forger is an . One the "*.exe" The in the "Socha dsk" It is what Forger PZPAPN FORM- : FORM- Form, Form (, FORM-18 BSC; clicking noise speaker Switzerland S: N/A 7: BR - ], NAV, : CleanUp, M M, NAV, or DOS SYS The FORM- , or Form (, is a floppy and . It was Switzerland. FORM- , the as well as seek out and ythe M. The floppy (may or may not be successful, on the author's test gfloppy FORM- never succeeded, instead the would hang. It should be noted by the author of document as a binary b, and it may damaged in The ;ed in the FORM- binary by the author of document: "The FORM- sends greetings to everyone who's reading .FORM Pn't destroy data! Don't panic! Fuckings go to Corinne." , however, may not in all cases. For example, I did not find anywhere on a Form the FORM- may notice clicking noise may be emitted gthe speaker on the 24th day of any month. can be removed the same technique as used ws. c, power off the clean write-protected L. The DOS SYS 8can be used to recreate the . Alternately, gMcAfee Associates may be used to recreate the of the FORM- Form II: on FORM-18, in May . It is hequivalent to FORM-18, to avoid detection by most anti- utilities. May, FORM-18: to the FORM- , FORM-18 on the 18th day of the month, at clicking be heard the speaker on clock and CMOS. out a clock most likely not mthe clicking FORM-Canada: to the FORM-18 a minor alteration. On K, it locates the remainder of the 7and the ctwo , unused on the marking them as bad : Canada PZPAPN Frajer-649 : Frajer-649 Poland S: 649 7: PNCK - , NAV 3.05, {3.0+, 1.05 9503+ The Frajer-649 , and is gPoland. Frajer-649 is a of . .. It Pnot yvery small . the Frajer-649 yall of the . in the are larger 2K. rof 649 at the end of the . The @and in the DOS not be . One in the 7in all Frajer-649 It is what Frajer-649 may do of Frajer-649 are: Frajer.524: in March, is a 524 of the Frajer-649 . It in low , not reserving area. nby the , it rof 524 at the end of the b. The in the DOS to the @and . No the , March, PZPAPN Fratricide : Fratricide fail to North America S: 647 7: ONA - ], NAV, {3.0+ The Fratricide , and to be gNorth America. Fratricide is a . It permanently corrupts the . the Fratricide Y, the Fratricide yfour . Xor . in the preference for . a. It not it has completed ufour the either be ed to the DOS prompt, or the may be too big to fit in the Fratricide mthe +of the host by the , permanently corrupting the since the $of the bis not saved by the . The @and in the DOS not be 'the , the in the "Oh, life. I apologize for terrible thing." "It is for a chance. I'm a person "Fratricide - Murders a br "-- By Cone -- be ready to see more" Under conditions, the cfour may be Nas a by the PZPAPN Freak : Freak Turkey S: 942 - 947 7: PNCK - 12.2 9503+, {3.0+ The Freak . It s to be gIstanbul, Turkey. Freak is a wof . the Freak Y, the Freak yone . in the G. The next a Freak G, the remove b. It alternates between and dis and s by the may be accompanied by ance of one of the two 942 to 949 at the end of the The @and in the DOS not be . The can be in the 7in all Freak "Freak" "YOUR SYSTEM HAVE A HARMFULL VIRUS : FREAK !!!" was written in the city of Istanbul by Freakeinstein,(c) "Press any key to to DOS" "Any key to continue" "(Freakeinstein 92-93 "Killing" "Fuck of Armenian Slaughters" "Press any key to continue" "***.com" "$#%#@!@!.gg "Freak Was Here..." tby the Freak rof 2 to 17 +, and ;part of the at the end of the "Freak Was Here..." The Freak Othe , where < .com> is the of the "(Freakeinstein 92-93 Killing < .com> Any key to continue" It may Othe "YOUR SYSTEM HAVE A HARMFULL VIRUS : FREAK !!!" was written in the city of Istanbul by Freakeinstein,(c) "Press any key to to DOS" "Fuck of Armenian Slaughters" "Any key to continue" all of the . in the tand dis tby the Freak , executing an in a hang. PZPAPN Freddy : Freddy j; TSR Brazil S: 1,870 - 1,884 7: PRsAK - , NAV, 12.2 9503+, The Freddy and is gBrazil. Freddy is a wof . and overlay a. It .. It is on the , and may identify it as such. cFreddy Y, the Freddy as a low TSR of 2,912 +, hooking ~21. It one . in the the Freddy , it Yby the , plus one in the rof 1,870 by a much smaller amount as the of the slack (hex 00) area at the end of of 1,870 to 1,884 +. In all cases, the the end of the b. The @and in the DOS not be . The are in the 7in all Freddy "$322/vv" ly, the in the "Freddy Krg" It is what Freddy , but it ;destructive of Freddy are: Freddy 2.1: A later of the Freddy at the top of &the ), hooking 21. , as by the DOS Bby 5,120 +. It if it was not , it /and . are Y, as well as uone bin the a DOS DIR 8is issued. by 2,345 to 2,394 the at the end of the , however, as the part of the hex 00 at the end of the b. The @and in the DOS not be . The in the Freddy 2.1 "Freddy KRueGer 2.1" : Brazil May See: PZPAPN fw-692 fw-692 S: 692 - 1,362 7: PNC - , NAV, The fw-692 . Its , is fw-692 is a wof . . It Pnot fw-692 is yall in the it completes uall of the . in the G, it start uthe . on the C: the root G. Needless to say, process s in a very long Maccess. fw-692 normally by 692 at the of the b. The exception is in the case where the host was less +, the "1,364 be no 5to the @and in the DOS The can be in the all fw-692 maa" "*.* *.com" /MAND.MKS_VIR" It is fw-692 PZPAPN Frere Jacques : Frere Jacques Frere , Frere Jacques-B, Frere Jacques-C, Frere Jacques-D, Two Tigers I: May music (Frere Jacques) on Fridays California, S: 1,808 - 1,822 7: PRA - ], NAV, : NAV, or The Frere Jacques in May, . It is a generic X, and Overlay a. It Pnot on the The Y, the in low . The occupies 2,064 +, and attaches ~21. becoming , Frere Jacques yany by between 1,808 +and 1,822 aalways by 1,813 Frere Jacques , as well as execu aincreasing in intermittently , thus ing in the possible loss of data. On Fridays, the Frere Jacques , and play the tune "Frere Jacques" on the speaker. of Frere Jacques are: Frere Jacques-B: to Frere Jacques, play the tune "Frere Jacques" on the speaker every few minutes on Fridays. On Fridays, it ma 2,112 ,TSR in 08, 21, and 22 Frere Jacques-C: Frere Jacques-C differs gFrere Jacques-C by two in its 7. Unlike the Frere Jacques, play music every few minutes on any day of the week. Its TSR is always 2,064 }08 and 21 Frere Jacques-D: Frere Jacques-D is to Frere Jacques-C, however it play music on Fridays, and the delay before the music starts is longer. On Fridays, its TSR is 2,064 }08 and 21 see: PZPAPN Friday 13th : Friday 13th Friday The 13th /, South African, , 1987 j; floppy Maccess; bdeletion Republic of South Africa S: 512 7: PNC - , NAV, ], NAV, or The Friday 13th ed in South Africa in 1987. Unlike the (Friday the 13th) es, it is not , nor Pit hook any a, but not .. On b, the looks for two aon the C: Qand one on the A: Q, if is extremely fast, and the indication of propagation ring is the access light %on for the A: Q, if the =default Qis C:. The . The v, must be less 64K in On every Friday the 13th, if the host Y, it is of Friday 13th /are: Edge: to the QFresh Edge has three differ. It :the "v w x". Friday 13th-540C: , Friday 13th-540C is a modified of the It has to avoid %detected by a specific utility, and is not believed to be in the public domain. Friday 13th-978: , Friday 13th-978 is a modified of the It has to avoid %detected by a specific utility, and is not believed to be in the public domain. Friday 13th-978 adds 978 +to . Friday 13th-B: same, except yevery the Gor in the path if the is in the path. Friday 13th-C: same as Friday 13th-B, except "We hope we mn't inconvenienced you" ever the Friday 13th-D: Friday 13th-D was gthe NCSA. adds 418 to 432 x. It all . , except the ever an mhad @and in the to the @and . The be be at the end of the b. On Friday The 13ths, the Friday 13th-NZ: gDr. Henry Wolfe of New Zealand , Friday 13th-NZ is a minor of the Friday 13th . It ain the Y, adding 623 to 634 +to the . The actual of the however, is 350 +. The the end of the b. It Pnot on Friday The 13ths. QFresh: gSweden in , QFresh is a 615 of the Friday 13th . It xall . in the of 615 to 628 at the end of the b. The @and in the DOS not be ;the in the QFresh "ENET_INF" : Sweden -B: A 542 of Friday 13th, of the . in the Y, along Oing the "WARNING ! THIS PROGRAM IS INFECTED WITH VIRUS-B! IT WILL INFECT EVERY . /FILE IN THE CURRENT SUBDIRECTORY!" rof 542 to 555 at the end of the b. The @and in the DOS not be 'the , the can be in the 1988. PZPAPN Friends : Friends S: 1,362 - 1,377 7: PRtE - NAV, The Friends . Its . Friends is a wof . and spreads very quickly. cFriends at the top of but &the ), moving ~12's , as sby the DOS Bby 2,096 21 and 24 nby Friends in , the Friends yone . in the the Friends , it or batch a DIR 8is performed, or any reason. In the case of the DOS COPY 8, the target tif it is an . the Friends rof 1,362 to 1,377 +. The the end of the . The @and in the DOS not be . Three in the 7in Friends "GSJFOET!PG!NBJT!boe!DMBVEJB!TDIJGGFS" The T, but un the gets its "FRIENDS!OF!MAIS!and!CLAUDIA!SAHIFFER" It is if Friends See: Cossiga PZPAPN Frodo Soft : Frodo Soft F-soft Warsaw, Poland S: 563 7: PNCK - , NAV, The Frodo Soft . It is gWarsaw, Poland. Frodo Soft is a wof . .. It should not be confused the 4096 or Frodo are not related. the Frodo Soft yone . in the G, it may the Frodo Soft rof 563 at the end of the b. The @and in the DOS not be . The in the 7, and hence not "*.com" "Gmks*.exe" "(c) Frodo Soft" It is what Frodo Soft of Frodo Soft are: Frodo Soft-458: An earlier of the Frodo Soft xone . rof 458 the at the end of the b. The in the ?com" "mks ?.exe" "(c) Frodo Soft" : Warsaw, Poland Frodo Soft.633: , Frodo Soft.633 is a 633 of the Frodo Soft xone . in the by 633 at the end of the b. The @and in the DOS not be . The in the "*.com" "mks*.exe" "(c) Frodo Soft" Frodo Soft.656: , Frodo Soft.656 is a 656 of the Frodo Soft xone . in the by 656 at the end of the b. The @and in the DOS not be . The in the "*.com" "mks*.exe" "(c) Frodo Soft" PZPAPN Frogs : Frogs Frog's Alley I: March, ; FAT & Gdamage; Mvolume label 5; long Maccess S: 1,500 7: PRCK - , NAV, The Frogs, or Frog's Alley, in March, David Grant of the is a wof . Frogs is in low, unreserved }09, 20, 21, and 2F nby the , Frogs .and one bin the becoming , Frogs yone . Yor a DIR performed. In either case, long Maccesses be noticeable either Y, or as the DIR 8completes. . aare was 1,500 or more Frogs 1,500 +, and the @and in the to the @and . The at the Frogs on the 5th day of any month. Yon the 5th, the "(V) AIDS R.2A - Welcome to Frog's Alley !, (c) STPII Laboratory - Jan again be ever a DIR performed. The N, the remove the aand gthe still be accessible until removed, or the is no longer in is no longer in , the Othe volume label "s Alley !" and a DIR 8is performed. The M's FAT and root multiple symptom's of Frogs are long Maccess executing or performing DIR 8s, as well as occasional unexpected accesses to the B: intensive applications hang Frogs is active in of Frogs are: Frogs-B: to the the "Diabolik!" near the end of the in all PZPAPN Fu Manchu : Fu Manchu 2080, 2086, Fu Manchu-B I: March, 1988 .SYS, .BIN, . /, & . S: 2,086 (. a) & 2,080 (. 7: PRsA - , NAV, , NAV, or The Fu Manchu attaches to the $of . or the end of . yany execu qoverlay, .SYS, and .BIN aas well. It s to be a rewritten of the possible creation @of 3/10/88. A marker or id usually is 'sAXrEMHOr', uses the 'rEMHOr' portion of the identify One out of sixteen in a |ed, and a random amount of , the , "The world hear gme again!" is Nand the (s. Non an a warm re Pn't survive in 1, 1989, the monitor the buffer, and add derogatory comments to the s of various politicians. comments go to the buffer, so effect is not limited to the O. The in the are is very in the of Fu Manchu are: Fu Manchu-B: hthe same as Fu Manchu, seven in order to avoid detection by products. see: Taiwan 3 PZPAPN Funeral : Funeral j; music; Eastern S: 921 7: PRhAK - NAV, The Funeral . It is gEastern W. Funeral is a /and . cFuneral Y, the Funeral at the top of &the , as sby the DOS Bby 976 }08 and 21 by the , the the (copy of .if it was not the Funeral , it rof 921 at the end of the b. The @and the DOS to the @and the Funeral for 1 hour, it play a short funeral march on the speaker, and . The funeral march is the same as the tune played by the ZK900 PZPAPN Fungus : Fungus X-Fungus I: May, Australia S: 1,422 7: PRhAK - , NAV, 12.2 9503+, The Fungus Iin Australia in May, . It is wof . /and . ., and employs techniques. cFungus Y, the Fungus at the top of &the , as sby the DOS by 2,048 }08 and 21 nby the ~12's #moved. the ., if it was not the Fungus , it intermittently /and . of 1,422 not be if the . The the end of the b. The @and in the DOS Several can be in the 7in Fungus "*X-Fungus by Harry McBungus*" "*Nugga!*" "*Greets SCP*" "*Greets RABID*" "* Patricia: Grow ming knowledge *" "*Grease me!*" "*Epileptic Downer*" 'the the Fungus the DOS PZPAPN Fuse Box Dwarf : Fuse Box Dwarf acreated S: 23,656 +And Over 7: SNE - Spawning The Fuse Box Dwarf spawning or companion by creating a corresponding . . Not all of the companion . acreated by the , however, actually ;the the Fuse Box Dwarf yone . bin the creating a . the same base companion be 23,656 or more actual 7, and mthe @and . The in the last %repeated multiple XPATH" /SPEC /SPEC" "Dreeb! Dreeb! I am the fuse box dwarf!" For ctwo . ain any G, the companion acreated by the be 41 or more and do not ;the actual simply the repeated a random number of "Dreeb! Dreeb! I am the fuse box dwarf!" PZPAPN FWord-383 : FWord-383 S: 383 7: PNCK - 12.2 9503+, {3.0+ The FWord-383 . Its . FWord-383 is a wof . the FWord-383 yone . in the rof 383 the at the end of the b. The and in the DOS not be . The in the 7in all FWord-383 "FUCK YOU" PZPAPN : G2 J: Depends on present S: Depends on present 7: PONRAK - &/or , NAV, 12.2 9503+, The G2 is not actually a , but rather a group or were generated the G2 generator. particular generator is a modified of the generator, the major %in the encryption mechanism. The es listed &are G2 generated es. using ning technologies may identify them as G2, , or by the actual G2 generated (es) are: G2-A429: The G2-A429 . It is wof . but not .. It ain the rof 429 at the end of the The @and in the DOS not be . The in the G2-A429 "[PS/G ] Testing [G2 A] *. advanced vs of G2-A429 may find to "dis gthe G2-A438: The G2-A438 . It is wof . G2-A438 in 2,480 at the top &the ), hooking ~21. , it rof 438 at the end of the b. The @and in the DOS not be . The in the all "[PS/G ] Testing [G2 A2]" G2-A615: The G2-A615 . It is wof . /and . .. It xall of the /and . ain the rof 615 at the end of the b. The @and in the DOS not be . The in the G2-A615 "[PS/G ] Testing [G2 A] *. kfrequently G2-Celeste: The G2-Celeste It is a wof . , but not .. It xup to five . ain the rof 310 at the end of the b. The @and in the DOS not be . The can be in the 7in all G2-Celeste "[PS/G ] Straylight ][ Celeste G2-D598: The G2-D598 . It is wof . /and . cG2-D598 in 9,984 at the top of &the ), hooking ~21. , it /and . are rof 598 at the end of the b. The @and in the DOS not be . The in the all "[PS/G ] Captain [G2 D]" G2-E513: The G2-E513 . It is a wof . . It xup to five . ain the rof 513 at the end of the b. The and in the DOS not be . The the 7in all G2-E513 "[PS/G ] Captain [G2 E] *. G2-Mudshark: The G2-Mudshark It is a wof . .. It xone . bin the rof 314 at the end of the The @and in the DOS not be . The in the 7in all G2-Mudshark "[PS/G ] pentagrame mudshark *. G2.Punisher: The G2.Punisher It is a wof . /and . cG2.Punisher at the top of &the DOS ), hooking ~21. , as sby the DOS Bby 1.2K. The bug, so it in increments of 1.2K as well. , it rof 602 at the end of the b. The @and in the DOS not be . The in the G2.Punisher "[PS/G ] Punisher Death Destruction Mayhem" See: PZPAPN : Geek J: S: 450 - 466 7: PRfAK - , NAV, The Geek . It is the . Geek is a wof . cGeek Y, the Geek . It Hly hooks }, and no to the Geek to map various utilities. the Geek , it by 450 by 456 to 466 +. In both cases the at the end of the b. The @and in the DOS . One in the Geek "GEEK" Geek on the 29th day of any month, at a random on the PZPAPN : Genc Genc.502 J: /& .SYS S: 502 7: PRhCK - /& .SYS p2.10+, NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Genc or Genc.502 . Its is a wof . /and .SYS .. It is a fast wand can quickly spread on a cGenc at the top of the ), not moving ~12's , as sby the DOS Bby 1,296 }21 and 24 nby the , the .if it wasn't /and .SYS Y, copied, or for any reason. by 502 at the end of the b. The @and in the DOS not be . The in the 7in all is Shaware!" The Nby the aare of Genc are: Genc.1000: , Genc.1000 is a 1,000 of the Genc . Its is 1,280 +, hooking ~21. It by 1,000 at the end of the b. The @in the DOS on all The in the all "GencVir (C) by HACKER" The Genc.1000 as a PZPAPN Generic : Generic J: N/A S: N/A 7: G - Generic The Generic is not actually a specific , but a general category or group of can be genericly detected by software using ner technology. It was implemented by McAfee Associates in The es detected by the Generic detection mechanism in are generally on the not all of them are related to es may a, or both . /and . be malicious. While most of the es are them are ws. may be detected as the Generic include: Beast-N-Black Father Christmas Ghostballs Grither Infinity Iraqui Warrior Lisbon MSTU NTKC Polish 217 Polish 583 R-10 Socha Traveller VHP2 Viperize New es may be detected by mechanism are not documented in . If you detect a Generic , and it not match one of the es, please submit a sample to the author of for analysis and inclusion in PZPAPN Generic : Generic I: N/A S: N/A 7: GBX - Generic : DOS SYS or M may detect es using techniques look for functions or characteristics in the may identify such es as "generic may be identified by as Generic (, and are identified in separate entries in Fish Guillon Keydrop Queens Tony Windmill If you detected as a generic not match one of the , please submit a copy of it on to the author of for inclusion in the next release. PZPAPN Genesis : Genesis Genesis.217 fail to Ooutput; S: 217 7: PNCK - ]2.17+, 12.2 9503+, 7.00+, 2.0+, 2.17+ The Genesis or Genesis.217 is a wof . the Genesis yall of the . in the rof 217 the at the end of the b. The and in the DOS the @and . The in the "[Genesis 1.0]Thor*. in the ed to the DOS prompt, rather having the expected of the of Genesis are: Genesis.226: A later of the Genesis adds 226 +to the . x. Unlike the not .. The in the DOS not be The in the "[Genesis 2.0]Thor*. Genesis.226 function Genesis.238: A later of the Genesis.226 adds 238 +to the . x. The in the "[Genesis 3.0]*THOR. Genesis.238 function Genesis.295: A later of the Genesis.238 adds 295 +to the . x. The @and in the DOS to the @and . The in the "[Genesis 4.0]*THOR. Genesis.295 function PZPAPN Geodesic 2.0 : Geodesic 2.0 ?seconds 3to 8:58:08a S: 666 7: PRhAK - ]2.17+, 12.2 9503+, The Geodesic 2.0 . Its is a wof . /and . cGeodesic 2.0 at the top of &the ), not moving ~12's , as sby the DOS Bby 1,632 nby the , the Geodesic 2.0 rof 666 at the end of the b. The @in the DOS not be , but the stamp to 8:58:08a. The in the Geodesic 2.0 "Geodesic Propagation v2.0" "Copyright (c) by Cerebral Quantas, T.O.C." It is what Geodesic 2.0 PZPAPN Gergana : Gergana Gergana II, Gergana III, Gergana IV, Gergana-222, Gergana-300, Gergana-450, Gergana-512, Gergana-182B I: May, S: 182 7: PNCK - , NAV, The Gergana in May, . It is Gergana is a wof . Gergana is Y, Gergana ythe in the G. If Gergana, it be re The search the currect Qand Gfor an one is , the yit, increasing the by 182 +. The at the end of the . The @and in the to the @and Gergana may ythe . in the all . in the to be a bug in the Gergana Pnot do of Gergana are: Gergana-182B: on the ,Gergana has one differs. It Gergana-222: A 222 of Gergana, not re a. Like Gergana, mhad @and 3to the @and . It yvery small a. The can be a: "Gergana II -BUL3" and /". The at the Gergana-300: A 300 of Gergana, mhad in the DOS G. It yvery small . a. The can be a: "Gergana /", "III", and "*. /". The at the Gergana-450: A 450 of Gergana, to Gergana-300. It at the /", "GERGANA", "-IV f", and t. Press [Enter] to continue." Gergana-512: A 512 of Gergana, ytwo . a(but not in the by 512 at the $of the be no in the @and in a DOS . The can be "Gergana V" "For nice call [359][032] 557-643." "[Enter] to continue." Typically, fail to Oing random PZPAPN Ghostballs : Ghostballs Ghost (, Ghost /, Ghostballs.1 Extinct , 1989 Moving graphic <; BSC Iceland S: 2,351 7: PNCB - , NAV, : CleanUp, , NAV, or a& DOS SYS The Ghostball, Ghost (, and Ghost es were , 1989 by Fridrik Skulason of Iceland. The Ghostballs xgeneric . a, as well as altering Ghostballs is Y, Ghostballs search the Gfor an If an e, it t, the increasing the by 2,351 +. The at the end of Ghostballs ;the "GhostBalls, Product of Iceland Copyright (c) 1989, 4418 and 5F10 MSDOS 3.2" Ghostballs alters the , replacing it to the Ping Pong however, are very to the Ping Pong , and random <may The Ghostballs was the could both case) and the t, the \s the bouncing ball effect of the Ping Pong . If the to remove the v, it again "corrupted the next The Ghostballs on the 7of two The . wportion consists of a modified of the . The portion of the on the Ping Pong To remove , turn off the computer and re ga write protected Lfor the use either M the DOS SYS 8to replace the on the M. Any amust be erased and replaced clean copies gyour distribution of Ghostballs are: Ghostballs.1: hidentical to the Ghostballs differs by 4 PZPAPN Gidra-469 : Gidra-469 ?seconds set to "62" S: 469 7: PNCK - {3.0+ The Gidra-469 . Gidra-469 is a wof . the Gidra-469 yall of the . in the the exception of rof 469 +. In the case of be no ras the +of hex 00 at the end of the b. In both cases, the at the end of the b. The @and in the DOS to be the seconds field set to "62". The in the 7in all Gidra-469 "I'm GIDRA v1.6: Life is Good, But Good Life Better Yet." /MAND" "GD" The last , "GD", s at the very end of all PZPAPN Gingerbread Man : Gingerbread Man Bad Seed 9- Australia I: March, ?seconds = 60 Australia S: 2,774 7: PRatAX - X, & p, NAV, {3.0+, 2.17+ a& replace The Gingerbread Man, or Bad Seed, Iin Australia in March, . Gingerbread Man is a multi- partite /and . as well as the . Its ing mechanisms are very advanced, and it is cGingerbread Man Y, the Gingerbread Man , hooking }13 and 21. , as sby the DOS not be . It ythe ), altering two +and writing a copy of the 7starting at side 0, cylinder 0, 2. The alteration to the is hidden as the present an copy of the ever it is attempted to be accessed. Later, gthe M, the Gingerbread Man at the top of , but &the ), moving 12's , as sby the DOS not be Bby 3,072 the Gingerbread Man , it /and . ed to by the /SPEC en mental variable (usually are , or copied. In the case of copies, both the source and target the Gingerbread Man rof 2,774 at the end of the b. The ris not as the hides the r, as well as ever are accessed. The and in the DOS seconds field to 60, the vmarker for the The are un in the and may be viewed in a, and on cylinder 0 of is not "PTT (You can't catch the Gingerbread Man!" "Bad Seed - Made in OZ!" /SPEC=" "MEM" "10/23/92" Since the Gingerbread Man is a full , dis "on the fly", checksumming be unable to detect the it is . The lock up the if the determines a debugger is in use. of Gingerbread Man are: Ginger.2691: , Ginger.2691 is a 2,691 of the Gingerbread Man Its 3K, hooking 21. As , Ginger.2691 is a full- xthe /, and . a. It adds 2,691 the . /and . be hidden The can be in the "Ptt (You can't catch the Gingerbread Man!!" "Bad Seed - Made in OZ" /SPEC= \ PZPAPN Gippo : Gippo j; beep emitted speaker S: 661 - 671 7: PNE - 12.2 9503+, The Gippo . Its . Gippo is a wof . the Gippo Y, the Gippo yone . bin the Q's root vs usually ga sub- gthe root in very advanced cases. the Gippo rof 661 to 671 at the end of the b. The @and in the DOS not be . The are in the 7in all Gippo "BABE BABE" "G.I.P.P.O. is here!" "*.* *. A beep may be emitted gthe speaker are of Gippo are: Gippo.Bumpy: , Gippo.Bumpy is a 1,045 of the Gippo Its is 1,200 +, hooking ~21 at the top of &the , it of 1,045 to 1,055 at the end of the b. The @and in the DOS to be un seconds field #set to "02". The in the 7in all "Bumpy (R) Ghost Player" : Italy Gippo.Earthquake: in March, , Gippo.Earthquake is a 883 of the Gippo . It xone . in the rof 883 to 893 at the end of the b. The in the DOS is set to 4:08AM. The in the 7in all "Earthquake" "*.e?e" "*.*" It is what Gippo.Earthquake may do : Bologna, Italy March, Gippo.JumpingJack: in May, , Gippo.JumpingJack is a 907 of the Gippo . It xone . in the rof 907 to 917 at the end of the b. The in the DOS is set to 4:08AM. The in the 7in all "JumpingJack" "*.e?e \" "G *.* smartc*.cps" It is what Gippo.JumpingJack may do : Italy May, Sunrise: , Sunrise is a 1,036 of the Gippo . It in the Y. Sunrise rof 1,036 to 1,046 at the end of the b. The in the DOS not be The in the in all Sunrise "* Sunrise * EpidemicWare" "G.I.P.Po. oct-93" "sunrise" "*.exe \ *.* smartc*.cp?" Sunrise may interfer the functioning of of the 1and MSAV Gippo.Stunning: in March, , Gippo.Stunning is a 1,240 of the Gippo . Its is 1,392 +, hooking ~21 at the top of &the DOS , it , or copied. rof 1,240 to 1,250 the at the end of the b. The @and in the DOS to be un the seconds field #set to "02". The in the 7in all "Stunning Blow (R) Ghost Player Italy" "*.CPS" may interfer the functioning of of the 1and MSAV : Italy March, PZPAPN Gipsy-304 : Gipsy-304 ?month = "13" S: 304 7: PNCK - {3.0+ The Gipsy-304 . Its . Gipsy-304 is a wof . .. It is related to the W13 group of the Gipsy-304 yone . in the rof 304 the at the end of the b. The in the DOS month field is now equal to "13", the vmarker. The in the 7in all /GIPSY" See: W13 PZPAPN Gliss : Gliss Germany S: 1,247 7: PNCK - p, NAV, The Gliss gGermany in . Gliss is a wof . the Gliss Y, the search the Gfor an y. If one is e, it yit, and placement not exact &, and " as the base of the . has just "Dies ist ein Demonstrations-Computer So gerade eben wurde das von diesem befallen. Der VIRUS hangt sich an alle a- in Laufwerk A - mit der Extention . /an. Die me bleiben aber ablauffahig. Falls Sie Fragen zu Computerviren oder @nsicherheit und @nschutz beim Einsatz von Personal Computer haben, fordern Sie unsere zsbroschure : - Der sichere und kontrollierbare PC - an. Gliss & Herweg GmbH inusstrabe 7-11 D-5020 Frechen-Konigsdorf" If an bis not e, the placement not exact "Alle Com - me in Laufwerk A sind mit diesem VIRUS schon infiziert! Falls Sie Fragen zu Computerviren oder @nsicherheit und @nschutz beim Einsatz von Personal Computer haben, fordern Sie unsere zsbroschure : - Der sichere und kontrollierbare PC - an. Gliss & Herweg GmbH inusstrabe 7-11 D-5020 Frechen-Konigsdorf" the Gliss rof 1,247 at the end of the b. The @and in the DOS . All of the can be viewed in Gliss Pnot do PZPAPN Globe : Globe Read- , Hidden . S: 6,610 7: SNE - Spawning , NAV, 12.2 9503+, {3.0+ The Globe . It is a spawning or companion . Its the Globe Y, the Globe yone . in the G. It by creating a . the same base ;the 7, and be 6,610 the Read- and Hidden attributes set. It :the "Glo" 3 M.00" "PATH" XKCO" gBorland's Turbo C compiler. the Globe of Globe are: Globe 3.0 , Globe 3.0 is a non- wof . /and . , but not .. It xone . or . in the rof 5,150 at the $of the b. The @and in the DOS not be . The in the 7in all "MAND" "HELLO!!" "GlobeViru" "V3.00" Globe 3.0 may decreasing by 5K of RAM PZPAPN Gnose : Gnose Irish3, V-20 I: May, j; hidden . a; write protect on write protected K; TSR Ireland S: 1,164 7: SPRsAK - & Spawning , NAV, {3.0+ The Gnose, Irish3, or V-20, Iin Ireland in May, is a wof . /and . uses two different mechanisms to a. It is both and spawning. The the Gnose as a low TSR of 2,608 +. It }03, 1C, and 21. , it yone . in the the Gnose , it Y. . tin a manner by the Gnose rof 1,164 at the $of the b. The in the DOS not be tin a spawning manner, companion hidden . acreated by the . The companion . be 1,164 mthe same base the . . The companion @and be the @and vof the . The companion, hidden . ;a copy of the Gnose Gnose is an , and no the a. The in the "GNOSE. Xexe" V2.0 [FrIEND]S" the Gnose may notice receive write protect on write- protected PZPAPN Godoy : Godoy Godoy Dropper j; "Invalid QSpecification" (Record ( , possibly China S: 1,792 - 1,806 7: PRhAX - X, & MBR , NAV, a& Replace MBR The Godoy . Its . Godoy is a of the (record ( as well as . /and . a, but not cGodoy Y, the Godoy ythe (record (the ;ing the ). The , and Pnot The next (s the gthe the Godoy at the top of &the , as sby the DOS Bby 4,096 nby Godoy in the Godoy , the Godoy /and . for any reason. rof 1,792 at the $of the rof 1,792 to 1,806 at the end of the In both cases, the @and in the DOS not be . The in the Godoy "Invalid VLoading Operating "Missing Operating "Welcome!" "Auto-Copy Deluxe R3.00" "(C) Copyright . Mr. YaQi. C kha China" "No one can Beyond me!" be successful, however the not be able to access the M. The receive the to read the "Invalid QSpecification" PZPAPN GoldGeld : GoldGeld Germany S: 612 7: PRtAK - 12.2 9503+, {3.0+ The GoldGeld , and gGermany. GoldGeld is a wof . and . may identify it as a since it uses a encryption mechanism. cGoldGeld Y, the GoldGeld at the top of &the ), moving ~12's , as sby the DOS Bby 2,048 nby GoldGeld in the GoldGeld , it and . rof 612 at the end of the b. The @and in the DOS not be . The in the GoldGeld "Es ist nicht alles Gold, was gl The "EEK" can be in the 7in all It is what GoldGeld PZPAPN Golgi : Golgi Golgi 1.0, Golgi Testicles ?seconds = "08" S: 465 7: PRhCK - 12.2 9503+, 1.05+ The Golgi, Golgi Testicles or Golgi 1.0, , along two later s of Golgi is a . The two later cGolgi Y, the Golgi at the top of but &the ), not moving ~12's , as sby the DOS Bby 752 }03 and nby Golgi in the Golgi , it rof 465 not be the Golgi . The @and in the DOS seconds field set to "08", the 's mechanism to determine if the t. The is un the Golgi "[Golgi Testicles] v1.0 Copyright (c) Lapse" It is what Golgi of Golgi are: Golgi 2.0: , Golgi 2.0 is a later of the Golgi . Its is 912 +, hooking ~21. It /and . are 605 be hidden Golgi 2.0 is . The in the DOS the seconds field is set to "08", as the . The in Golgi 2.0 "[Golgi Testicles] v2.0 Copyright (c) Lapse" Golgi 3.0: , Golgi 3.0 is a later of the Golgi 2.0 . Its 1,120 +, hooking ~21. It are yone or two in a root 820 be hidden Golgi 3.0 is . The in the DOS the seconds field is set to "08", as the . The in Golgi 3.0 "[Golgi Testicles] v3.0 Copyright (c) Lapse" Unlike Golgi and Golgi 2.0, Golgi 3.0 is a full , dis are read into As a ning and checksumming not be able to detect the it is Golgi.886: , Golgi.886 or Warchild, is a 886 of the Golgi . Its is 928 +, hooking }9 and 21. are , or copied. by 886 be hidden Golgi.886 is . The @and in the DOS to be the seconds field #set to "62". The in the 7in all "(c) Lupus Yonderboy and The Death Squad" "Warchild" The DOS indicate on all Golgi.1173: , Golgi.1173 is a 1,173 of the Golgi . Its 2,336 +, hooking ~21. It by 1,173 be hidden Golgi.1173 is . The @and the DOS to be the seconds field #set to "62". The in the 7in all "SCAN. "SCAN" "[Diabolical Ingenuity] by MnemoniX" The DOS indicate on all in various operational problems, kand unexpected (s. (copy of t, the may fail to Golgi.DEI: , Golgi.DEI is a later the Golgi . Its 3,952 +, hooking }21 and 24. It /and . are for any reason. by 1,948 be hidden Golgi.DEI is The @and in the DOS not be . The in the 7in all "Devils & Evangels, Inc. [DEI] MnemoniX $ v2.50" "ANTI-VIR.DAT C:\ /MAND. /\DEI. The DOS indicate on all Golgi.DEI dis are accessed, as do not take account be unable to locate the Golgi.Oracle: in March, , Golgi.Oracle is a later of the Golgi . Its is 1,024 +, hooking ~21. It /and . are 997 be hidden Golgi.Oracle is . The in the DOS the seconds field is set to "62". The is un in the 7in all "[Oracle] by MnemoniX" While the Golgi.Oracle a, the are unable to function The be spread March, PZPAPN Gollum : Gollum S: 662 7: PNC - ]2.17+, 7.00+, 2.1.7+, 2.71, 12.2 9503+, 7.00+, 2.0+, 2.71+, 2.17+ The Gollum . Its . Gollum is a wof . a, but not the Gollum yone . in the but not the Gollum rof 662 at the end of the b. The @and in the DOS not be . The in the Gollum "Gollum v1.00, by atos989" The starting in the fourth ,of the It is what the Gollum PZPAPN Gorlovka : Gorlovka I: March, S: 1,022 - 1,038 7: PRhA - , NAV, 12.2 9503+, {3.0+ The Gorlovka in March, . Its . Gorlovka is a fast wof . /and . , but not .. It s corrupt the cGorlovka Y, the Gorlovka at the top of &the ). It Pnot move 12's , as the DOS Bby 3,008 nby Gorlovka in , the Gorlovka /and . for any reason. rof 1,022 +. . rof 1,024 to 1,038 In both cases, the at the end of the the @and in the DOS s, Gorlovka a portion of the host . In cases, be no rand the corrupted, thus not functioning The in the Gorlovka "EeCcXxOoEeMm" "9101" PZPAPN Gosia : Gosia Poland S: 466 7: PRCK - , NAV, The Gosia . It is gPoland. Gosia is a wof . The Gosia is Y, the Gosia in a "hole" in be no . At , the yall . in the Gosia is , it yany . has not tby the Gosia 466 at the $of the be no 5to the @and DOS . The can be in the "Gosia" The Gosia Pnot do PZPAPN Got-You : Got-You j; hidden acreated; 4printer setup; cancels network printer re Hion; unexpected printing of Ocontents; last Qcan't be accessed Belgium S: 3,052 - 3,067 7: PNE - , NAV, The Got-You gBelgium. Got-You is a wof . s on Qs C: through Z: during the chalf of the year. During the second half of the year, it Got-You is Y, the check the @to determine what the =month is. If the =month is thru , the randomly select a gC: thru Z: where it search for an . y. The searches down through the Gstructure, and xthe it locates. Got-You by 3,052 to 3,067 at the end of the b. The @and in the not be ;the "G OT YOU" through A, Got-You . During period, the , performing any one of five different behaviors. behaviors s is randomly selected by the . The five behaviors are: 1. The check to see if the computer is on a network and has access to a network printer. If the computer has access to the network printer, it 5its setup. 2. The check to see if the computer is on a network, and cancel any re Hion allows access to a network printer. 3. The print the computer's Ocontents to the printer, to the having pressed the print key. 4. The determine what Qs are by using the DOS list of lists z, and disable the last Qso it is not accessible. 5. The create a hidden, 10,240 bon a randomly selected d "G OT YOU. x ", and ;random data 7exists in the for deleting it is not called in the Got-You 7to check if monitoring packages are , and if it thinks one is present. To do , the checks for 9ly monitored to be in the same segment of . It 7to try to determine if a debugger is %used, and if . Lastly, 7to keep the searching too long for a PZPAPN Gotcha : Gotcha ; write protect The S: 879 7: PRhAK - , NAV 3.05+, The Gotcha gThe Gotcha is a wof . /and . The Gotcha is Y, Gotcha at the top of &the Cby 1,136 by the Gotcha is , it /and . very small ones, tby Gotacha 879 +, and mthe at the end of the The can be ein all the Gotcha "GOTCHA!" It is if Gotcha of Gotcha are: Gotcha-627: Gotcha-627 is a 627 of the Gotcha It adds 627 . The at the end of the b. The portion of Gotcha-627 requires 912 at the top of but &the , as sby the DOS amount. Gotcha-732: Gotcha-732 is a 732 of the Gotcha It adds 732 +to the . x. The at the end of the The portion of Gotcha-732 requires 992 at the top of &the , as sby the DOS amount, and n. The "GOTCHA!" can be eat the end of all Gotcha-906: Gotcha-906 is a 906 of Gotcha, adding 906 a. The at the end of uses 1,168 at the top of &the ). One symptom of Gotcha "corrupted is no space on the Gotcha-A2: hequivalent to the has two differ. Like the it adds 879 a. The at the end of a. Gotcha-A2 \write protect gwrite protected Gotcha-B: Gotcha-B is a 881 of Gotcha, adding 881 a. As at the end of Pn't \write protect accessing on write protected Gotcha-E: Gotcha-E is a 607 of the Gotcha . It adds 607 +to the . x. The "GOTCHA!" can be eat the end of all a. Gotcha-E :hex character several qDatacrime, Datacrime II-B, Yankee 2, Syslock, and included in the for the purpose of confusing various ners as to is present on the by having the ner detect vs on while missing the entirely on May, Gotcha-Mut1: Gotcha-Mut1 is a 459 of the Gotcha . It adds 459 . The at the end of the The portion of Gotcha-Mut1 requires 1,024 at the top of &the , as sby the DOS amount. The in the 7in all Gotcha-Mut1 "MUTAtOR (C) Mutation Inc." May, Gotcha-Mut2: Gotcha-Mut2 is a 307 of the Gotcha . It adds 307 +to the . /and . x. The at the end of the b. The @and in the DOS to the @and The portion of Gotcha-Mut2 requires 1,024 at the top of &the , as sby the DOS amount. The in the 7in all Gotcha-Mut2 "Mutator v2.0b" May, Gotcha-Mut3: Gotcha-Mut3 is a 304 of the Gotcha . It adds 304 +to the . /and . x. The at the end of the b. The @and in the DOS not be . The portion of Gotcha-Mut3 requires 1,024 at the top of but &the , as sby the DOS amount. No in the Gotcha-Mut3 Gotcha-Mut3 usually hang the Y. Due to a serious bug in the never "a major problem. May, Gotcha-Mut4: Gotcha-Mut4 is a 780 of the Gotcha . It adds 780 The at the end of the b. The @and not be The portion of Gotcha-Mut4 requires 1,024 at the top of &the , as sby the DOS amount. The in the Gotcha-Mut4 "Fuck you, asshole!!! You're using a Debugger!!!" "Hey! Holloween almost here!" "Better be good, or the demon's get you!" "[Mutator] C/B: MainFrame [Mutation INc." The second and third of any year hang the May, See: Legalize Tchantches PZPAPN Granada : Granada j; TSR; beeping & scrolling The S: 2,765 7: PRsC - 12.2 9503+, The Granada . Its . Granada is a , but not cGranada as a low TSR of 3,072 +, hooking }08 and 21. the Granada , it rof 2,765 at the $of the b. The and in the DOS not be . One in the It is what Granada , executing an in beeping and a scrolling gthe 7on the monitor. PZPAPN Grapje : Grapje 1012 + 27, 1039, Dutch 1039 Oscrolling; long loads The S: 1,039 7: PNCK - , NAV, The Grapje, 1012 + 127, 1039, or Dutch 1039 Jan Terpstra of The . Grapje is a wof . Grapje is Y, the search the Glooking for an y. If an e, it t. If .exists in the G, it may Grapje. If an bwas not in the Grapje search the Gstructure looking for an Grapje by 1,039 +. The at the $of the be no 5to the @and in the DOS G. The can be the Grapje "*.com" "GRAPJE!!" in a hang. hang s, two . tby Grapje, instead of the usual one. , Grapje effect Y. Randomly, Grapje fill the buffer random data , scrolling the s, the way to stop it is to re (the ly, the Othe "GRAPJE!!" repeatedly, scrolling the 30 days melasped since the started to Zthe . Unless the started to Zthe right before midnight on the last day of a month, and at exactly the right split second, never be seen. PZPAPN Graveyard-479 : Graveyard-479 Norway S: 479 7: PRtCK - 12.2 9503+, The Graveyard-479 gNorway in It is a wof . cGraveyard-479 Y, the Graveyard-479 at the top of &the ), moving ~12's sby the DOS 1,024 Hly hooks ~21, mapping not show the having the Graveyard-479 , it rof 479 at the end of the b. The @and in the DOS not be . The in the Graveyard-479 "Graveyard!" "TCP1/X" It is what Graveyard-479 may do PZPAPN Green Caterpillar-1989 : Green Caterpillar-1989 Thriller S: 1,991 - 2,005 7: PRhAK - , NAV 3.05+, 1.05+, The Green Caterpillar-1989 . Its is a wof . /and . It is on the 1575 or Green Caterpillar cGreen Caterpillar-1989 at the top of but &the ), not moving ~12's , as sby the DOS Bby 2,256 nby the , the ythe copy of in the C: Qroot if it was not , the Green Caterpillar-1989 /and . Y, as well as one included in the target Gof DOS DIR 8s. rof 1,991 to 2,005 at the end of the b. The @and in the DOS to the @and . The in the 7in all Green Caterpillar-1989 "/t/h/e/ /e/y/e/s/,/y/o/u/'/r/e/ /p/a/r/a/l/y/z" "It's close to midnight and thing, evil's lurking in the dark." "Under the moonlight you see a sight, almost stops your heart." "You try to scream but t takes the sound before you make it." "You start to fze as horror looks." "You right between the eyes,you're paralyzed." "Cause is thriller,thriller night, and no one's gonna save you gthe beast about to strike." "You know it's thriller night. You're fighting for your life!...(LHB)?!" It is what Green Caterpillar-1989 See: 1575 PZPAPN Green Joker : Green Joker Green ; beeping S: 743 7: PNCK - , NAV, The Green Joker, or Green, . Its . Green Joker is a non- wof . .. It may be related to the Ash the Green Joker yall of the . in the G. If G, it the Green Joker rof 743 at the end of the b. The @and in the DOS to the @and The Green Joker usually on the , the be accompanied by beeping on the speaker. The may be Nby the "Fail on INT 24" "Impotence Vreading 's dick Abort, Retry, Ignore, Fail?" too big to fit in "JOKER!" "Cannot load /MAND, halted" The can be in the , along dtwo "Joker!" Green Joker Pn't do Oits See: Ash PZPAPN Green Peace : Green Peace S: 15,022 7: ONE - The Green Peace ga United States source. is a . It is a research , its source, as well as an barrived as the submission. Green Peace is t, the yall . in the c15,022 . If the . smaller 15,022 +, its be 15,022 +. Larger many r. The @and to the @and . All ;the near the $of the "Green PeaceGreen Peace" uall of the . ain the G, the scroll the Oand Othe "Green Peace" in the middle of the . The to be hung until CTRL-C is hit several Two acan be Hories Green Peace. aare d INH and X. The INH :a list of all ain the t. 7. :a pure copy of the Green Peace The sample is a . "drops" the Green Peace . It Pnot ;the , but instead :the "GREEN". Green Peace Pnot do host) and Oing its PZPAPN Gremlin : Gremlin Greemlin I: May, slowdown; @s may dis S: 1,146 7: PRhAK - ], NAV, The Gremlin, or Greemlin, in May, by the PCVRF. is a wof . /and . .. Its The Gremlin is Y, the at the top of &the ~12's not moved. The hook }08 and 21. Gremlin is , it /and . Y. If Y, it by 1,146 at the end of the . The be hidden by the if Gremlin is The in the if it was 12:00A. The "greemlin" can be ein all may notice a slight slowdown in speed of Gremlin is a destructive . It on the A:, B:, and C: Qs on 14th of any year. See: Alfa PZPAPN Grither : Grither j; C: & D: S: 774 7: PNCK - ], NAV, The Grither , by Paul Ferguson of the is a wof . Grither is Y, the yone . bin the tif it exists in the Grither by 774 +, the at the end of the The @and in the not be by the The Grither can be extremely destructive. a probability one out of every eight s an Y, the may activate. On , Grither $of the C: and D: Qs of the M. Effectively, corrupts the s, and G, as well as the Grither is roughly on the PZPAPN Groen Links : Groen Links Green Left I: March, j; TSR; music Amsterdam, Holland S: 1,888 7: PRsA - ], NAV, The Groen Links reported in Amsterdam, Holland, in March is a wof . a. It Pnot .. It is a of the is listed separately here as it is a different and exhibits different characteristics. The the Groen Links Y, the as a low TSR of 1,872 }21 and CE nby the , it /and . by 1,893 at the of the b. . by 1,888 to 1,902 at the end of a. As many of the rby 1,888 +on subsequent vs. : "GRLKDOS". for 30 minutes, it may play "Stem op Groen Links" every 30 minutes. The of the tune translates to "Vote Green Left", Green Left %a political party in Holland. See: PZPAPN Grog 3.1 : Grog 3.1 Italy S: 1,200 7: PRhCK - 12.2 9503+, 2.0+, 2.17+ The Grog 3.1 , and is gItaly. Grog 3.1 is a wof . ., but Pnot asmaller cGrog 3.1 Y, the Grog 3.1 at the top of &the ), hooking ~21. , as sby the DOS Bby 4,800 ~12's #moved. , the the copy of in the C: Qroot Gif it was not the Grog 3.1 , it larger 2K in for any reason. rof 1,200 at the of the b. The @and in the DOS not be . The in the Grog 3.1 "GROG 4EVER!" "GROG v3.1 (C) '93 by GROG - Italy" "Microsoft C:\ It is what Grog 3.1 of Grog 3.1 are: E-Riluttanza: E-Riluttanza was , and is a wof . .. It xall of the . in the rof 689 at the end of the The @and in the DOS not be . The in the 7in all E-Riluttanza "E-RILUTTANZA (C) '92 by GROG - Italy" "Sebbene suo marito andasse spesso in viaggio per affari, ella odiava star sola." ""Ho risolto il nostro problema", disse egli." ""Ti ho comprato un San Bernardo. Si chiama Estrema Riluttanza."" ""Adesso, quando vado via, sai che ti lascio con Estreme Riluttanza!" "Ella lo colpi' con un mestolo." It is what E-Riluttanza : Italy Grog 3.0: An earlier of Grog 3.1 is 3,952 +, hooking as well as in the C: Qroot rof 990 at the end of the b. The @and in the DOS not be . The in the Grog 3.0 "GROG 4EVER!" "GROG v3.0 (C) '93 by GROG - Italy" "Microsoft C:\ : Italy Grog.202: The Grog.202 , and is . It the ctwo . ain the mthe 202 by the 7. The in the DOS not be The in the all "TRUMPERY (c) '93 by GROG" "ATD02 : Italy Grog.324: The Grog.324 , and is . It bin the of 324 at the end of the b. The @and in the DOS to the . The in the 7in all "Vi E' Mai Venuto In Mente Che Potreste Aver Torto ?" "[ Aver torto (C) '93 by Grog - Italy ]" "*.?O?" in a hang or failure of the : Italy Grog.377: The Grog.377 , and is . It zero to many . ain the mthe 377 by the 7. The in the DOS not be . The ""Il nostro amore durera' per sempre", disse lui. "Oh, si, si, si", esclamo 'lei. "Intendendo 'sempre' in senso relativo, pero'", disse lui. Lei lo colpi' con una racchetta da sci." The , along in the 7in all "Sempre_(C)_'93_by_Grog_Italy_" kmay : Italy Grog.566: The Grog.566 , and is . It of the . ain the rof 566 at the end of the b. The @and in the DOS to the @and . The in the 7in all "*.cOm" "}}}- LaTraviata (C) '93 by GROG - Italy -{{{" "Il suo vero nome era Lavinia Traviata" "Ma tutti i suoi amici la chaimavano "La"" "Per cui, spesso veniva indicata come "La Traviata"" : Italy Grog.798: The Grog.798 , and is . It of the . ain the rof 798 at the end of the b. The @and in the DOS to the @and . The in the 7in all "[ WE ARE BACK! ]" "[o1/o3]" "Grog.Crackers.Wild_Cards (c) by GROG" "*.?Om" : Italy Grog.800: The Grog.800 , and is . It of the . ain the rof 800 at the end of the b. The @and in the DOS to the @and . The in the 7in all "Grog.Crackers.Public_Enemy (c) by GROG" "*.?Om" : Italy Grog.801: The Grog.801 , and is . It of the . ain the rof 801 at the end of the b. The @and in the DOS to the @and . The in the 7in all "Grog.Crackers.Razor (c) by GROG" "*.?Om" : Italy Grog.903: Grog.903 was , and is a wof . .. It xall of the . in the G, as well as the C: Qroot rof 903 the at the end of the b. The @and in the DOS to the @and . The in the 7in all Grog.903 "TorneoDiGolf (C) '93 by GROG - Italy" /*.DL" "Subito dopo aver vinto il torneo di golf, egli fu intervistato alla TV." ""Questo e'' il momento piu'' emozionante della mia vita!", disse." ""Ti ho visto in TV", gli disse sua moglie" ""Credevo che il momento piu'' emozionante della tua vita fosse stato quando ci" "siamo sposati."" "Al torneo successivo, egli non riusci'' a qualificarsi." It is what Grog.903 : Italy Grog.926: Grog.926 was , and is a wof . .. It xall of the . in the G, as well as the C: Qroot rof 926 the at the end of the b. The @and in the DOS to the @and . The in the 7in all Grog.926 "Mi Ami (C) '93 by GROG - iTALY" "*.?OM" ""Mi ami?" chiese lei." ""Ma certo", rispose lui." ""Mi ami davvero?" chiese lei." ""Ma certo", rispose lui." ""Mi ami davvero davvero?" chiese lei." ""No", rispose lui." ""Mi ami?" chiese lei." ""Ma certo", rispose lui." ""lei non chiese piu" altro." "GPE#02" "FGHKIJMu" It is what Grog.926 : Italy Grog.2825: , Grog.2825 is a later of the Grog 3.1 . It is a /and . for any reason. hides the . Its is 5,712 +, hooking }20 and 21. At the , it ythe copies of in the C: Qroot and \DOS Hories if were not 2,825 at the the b. . 3,097 at the end of the b. The @and in the DOS to be , but the seconds field #set to 34. The in the "GROG v5.0 (C) '93 by GROG - Italy" "C:\ .C:\DOS\ .*.*" "IBMBIOIBMDOSSCAN CLEAN F-PROT 1 MSAV NAV" "ANTI-VIR.DAT CHKLIST.* \NAV_._NO" may fail to function the : Italy Grog.Dream: The Grog.Dream and is a . It xall of the . ain the rof 757 at the end of the b. The @and in the DOS to the @and . The in the "THE" "TEAM" "Grog.Crackers.The_Dream_Team (c) by GROG" "*.?Om" : Italy Grog.Gonfie: The Grog.Gonfie It is a is 928 +, hooking ~21. It or copied. rof 902 at the end of the b. The @and the DOS not be . The in the ".oO( GonfieVele (C) '93 by GROG - Italy )Oo." "Sua moglie aveva sempre odiato il lavoro di lui." ""Non farai mai soldi costruendo modellini di velieri", si lagnava." ""Al contrario", dichiaro' lui." "I miei affari vanno a gonfie vele!" "Lei lo inceneri' col tostapane elettrico." "80?86 : Italy Grog.Hop: The Grog.Hop , and is . It may one . /and . in the m480 near the end of the by the The @and in the DOS not be . The in the "HopHopHop (c) '93 By GROG - Italy" ""Guida alla Corsa"" "Capitolo primo" "Come correre al modo dei conigli." "Hop Hop Hop" "Hop Hop Hop" may take an extended to issue output, and often hang the : Italy Grog.Il_Mostro: The Grog.Il_Mostro , and is a . It may yone . bin the rof 330 at the end of the b. The @and the DOS to the @and . The in the "Il Mostro e i Coniglietti" "Storia di t Ve e di ansia" ""Boo!", disse il Mostro." "-=< Il Mostro (C) '93 by Grog - Italy >=-" "*.??M" usually hang the : Italy Grog.IlCuoco: The Grog.IlCuoco . It is a w. It's is 2,208 +, hooking ~21. It may rof 1,007 at the end of the b. The @and the DOS to the @and . The in the Cuoco GROG" "Il Cuoco, vedendosi scoperto, impallidi'." ""Siete in arrosto", intimo' il poliziotto." "Ho un mandato di cottura!" Cuoco GROG" "MSAVF-PR 1SCANCLEA" "Il Cuoco (C) '93 by GROG - Italy" "GROG EVER" Grog.IlCuoco Pnot yvery small . : Italy Grog.Inc: The Grog.Inc , and is . It the bin the Y. If the bwas t, a hang may rof 774 at the end of the b. The @and the DOS to the @and . The in the "inc" "Grog.Crackers.INC (c) by GROG" "*.?Om" : Italy Grog.N male: Grog.N male was , and is . It ain the Y. It create the b"KEYB. /" in the C: Qroot ;g a copy of the rof 796 at the end of the b. The and in the DOS not be The in the "/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\" "\ "Non so dirti quanto tiamo", disse lui. /" "/ "Prova", disse lei." "\ "Ti voglio molto bene", disse lui." "/ "Non c' e' male", disse lei. "\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/" "*.COm" "<-> NonCEMale (C) '93 by GROG - Iltay <->" : Italy Grog.NTA: The Grog.NTA , and is . It of the . ain the rof 1,016 at the end of the b. The @and in the DOS to the @and . The in the 7in all "$*BR*$" "The Nokturnal" "Trading Alliance" "Grog.Crackers.NTA (c) by GROG" "*.?Om" : Italy Grog.Ovile: The Grog.Ovile It is a /and . is 1,440 +, hooking ~21. It /and . rof 1,417 at the end of the b. The @and in the DOS not be . The the "OVILE" "Grog" "GROG4EVER" ">-> Ovile (C) '93 by GROG - Italy <-<" "C'erano una volta due topi che vivevano in un museo." "Una sera, dopo la chiusura, il primo topo si infilo' nella vetrina contenente" "le uova di uccelli rari." "Prima di accorgersene, si era gia' perso." ""Aiuto!", grido' al suo amico." ""Aiutami a uscire dall'ovile!"" : Italy GSav 1.0: GSav 1.0 was , and is a wof . .. It xall of the . the rof 794 at the end of the The @and in the DOS not be . The in the 7in all GSav 1.0 "G*SAV v1.0 (C) '93 by GROG - Italy" "*.*" "Grog*Soft Anti- v1.0 (C) '93 by GROG - Italy" "Self Integrity Check warning - bwas "Chose an option:" "[R] Self Reconstruction." "[C] Continue "[E] Exit to DOS" "Press R, C, or E:" : Italy GSav 1.1: GSav 1.1 was , and is a wof . /and . .. It xall of the . /and . in the rof 1,082 +while . 1,215 +. In both cases, the at the end of the b. The @and in the DOS not be . The in the 7in all GSav 1.1 "G*SAV v1.1 (C) '93 by GROG - Italy" "*.*" "Grog*Soft Anti- v1.1 (C) '93 by GROG - Italy" "Self Integrity Check warning - bwas "Chose an option:" "[R] Self Reconstruction." "[C] Continue "[E] Exit to DOS" "Press R, C, or E:" ning may detect of Vacsina since it uses Vacsina's technique to convert . bstructures before : Italy Lor: The most advanced member of the Grog ^as of , Lor was . Unlike hides the . Its 704 +, hooking ~21. It /and . rof 666 at the end of the b. The @and in the DOS to be , but the seconds field #set to 60. The in the Lor "LOR Italy" : Italy Mila: The Mila , and is . It all of the . /and . in the the c557 by the Mila 7. The @and in the DOS to the @and . The in the 7in all Mila ">>1/92<<" "MILA (c) by GROG - Italy" /" -or- "*. : Italy Mormorio: The Mormorio and is a . It xall of the . in the the c456 by the Mormorio The @and in the DOS to the @and . The occasionally five to seven beeps, "Joe Mormorio e i suoi fratelli erano borsaioli. Battevano tutte le fiere della contea. Come faceva la gente a accorgersi di essere stata borseggoata? Quando un Mormorio correva tra la folla." N, a hang may The in the all Mormorio , as are the comprising the "Mormorio (C) '92 by GROG - Italy" "GROG" "GROG*.com GROG" : Italy Nocciola: Nocciola was , and is a wof . .. It xall of the . the rof 283 at the $of the b. The @and in the DOS not be . The in the 7in all Nocciola 1.0 "Nocciola Vildibranda Crapomena" "NOCCIOLA (C) '93 by Grog - Italy" : Italy Woodstock: The Woodstock and is a is 1,248 +, hooking ~21. It rof 1,219 at the end of the b. The @and in the DOS not be . The in the Woodstock "Provero Woodstock... Se vola piu' alto di tre metri, gli esce sangue dal becco." The in the -|---|---|--| "|Woodstock|(C)|'93|by|GROG|Italy|" -|---|---|--| "*.HLP" : Italy PZPAPN Groove : Groove Ds/corrupts data don't function (failures Germany S: 3,646 - 3,708 7: PRhAK - p, NAV, The Groove . It was in Germany, where it is reported to be in the public domain. Groove is a wof . /and . uses a slightly modified of the Dark Avenger Mutation Engine (DAME) for encryption. the Groove Groove at the top of &the ). It the Groove , it Y. It , but very small ones. rof 3,646 to 3,708 The at the end of the b. The and in the DOS the @and The Groove :the are usually are not "Dont wory, you are not alone at hour... is NOT dedicated to Sara its dedicated to her Groove (... s my a test be ready for my Next Test "C:\NAV_._NO C:\NOVIRCVR.CTS C:\NOVIPERF.DAT 1\CHKLIST.CPS C:\TOOLKIT\FILES.LST C:\UNTOUCH\UT.UT1 C:\UNTOUCH\UT.UT2 C:\VS.VS" The second set of are the s of data afor the utilities #targetted by the author of : Symantec's Norton Anti- , Certus' Novi, Central Anti- , Dr. Solomon's Anti- Toolkit, Fifth Generation ' Untouchable, and XTree's ViruSafe. The attempt to corrupt or are present. 'the deletion or <of the data the Groove difficulty executing usually not function , giving unpredic s. If (failures may See: DAME Pogue PZPAPN Groove OW : Groove OW & truncated; graphic O; lost clusters; C:\ .replaced; (failures; fail to function S: 1,214 7: PNEK - , NAV, {3.0+, 2.17+ The Groove OW . Its . Groove OW is a and the copy in the C: Qroot G. It is not related to the Groove the Groove OW ythe copy of in the C: root Gas well as one . in the G. It Oa graphic the "Sara's Groove". the Groove OW of 1,214 +and ;pure 7. The and in the DOS be the and . The in the 7in all Groove OW "*.exe c:\ 8.com .. Darkest avenger" "Isnt dedicated to Sara Gordon" "Its dedicated to her GROOVE!" tby the Groove OW ma large number of lost clusters. The creates three lost clusters (failures gthe PZPAPN Growing Block : Growing Block -1361, -Yellow TSR; . j; gradual Cs in Australia S: 1,363 7: PRsAK - , NAV, The Growing Block in Australia in It is a wof . /and . .. The a graphic effect was produced sample. samples do not produce the same "growing block" graphic effect. The Growing Block is the in low }08, 09, and 21 nby the 's 1,632 TSR. The allocate a 4,096 ,block of low as well, be marked as /MAND Data. Growing Block is , it /and . by 1,363 at the $of the by 1,361 to 1,375 at the end of the b. The @and in the to the @and Growing Block \a gradual decreasing of Growing Block is Y, the allocate an 4096 ,block of low , slowly eating away . An symptom is the DOS fail to it is ing in the "Invalid ", and EDLIN ending See: PZPAPN Groz-999 : Groz-999 S: 999 - 1,096 7: PRhAK - 12.2 9503+, The Groz-999 . Its . Groz-999 is a wof . /and . cGroz-999 at the top of &the ), not moving ~12's , as sby the DOS Bby 4,096 }24 and 81 nby the , the Groz-999 /and . by 999 to 1,096 at the end of the b. The @and in the DOS not be . One in the "AIDSTEST" It is what Groz-999 PZPAPN Grunt-1 : Grunt-1 J: S: 344 7: PNCK - , NAV, 12.2 9503+, {3.0+ The Grunt-1 . It is gthe . The Grunt-1 is a wof . the Grunt-1 Y, the Grunt-1 yone . in the of 344 at the end of the The @and in the DOS not be . The in the 7, and is not "[GRUNT-1] -=> Agent Orange '92 <=- *.com .." The Grunt-1 . At , the random on the Q(C:, D:, and E:). of Grunt-1 are: Grunt-1B: , Grunt-1B is hvery :the same . Grunt-1B adds 346 +to the Grunt-3: , Grunt-3 is a later of the Grunt-1 . It xone . in the =or a higher rof 473 at the end of the b. The @and in the DOS not be . The in the Grunt-3 "[GRUNT-3] -=> Agent Orange `92 <=-" is a hot LZ ... Eradicating the Enemy!" Grunt-4: , Grunt-4 is a later of the Grunt-1 . It xone . in the of 529 at the end of the b. The @and in the DOS not be . The in the Grunt-4 "[GRUNT-4] *. /TBFIL.XXX .. -=> Agent Orange `92 <=-" "Nothing like the smell of napalm in the morning!" PZPAPN Guillon : Guillon BSC; ; possible FAT damage; internal stack overflow Buenos Aires, Argentina S: N/A 7: BRX - , NAV, : M- M/P, or DOS SYS on The Guillon Iin Buenos Aires, Argentina in . Guillon is a wof the ) and the K. It it has gthe L, but not it is the Guillon , Guillon , as well as , as measured by the DOS by 4,096 , the Guillon yany non-write protected Lexposed to the . The Guillon expects Kto be 360K double density K, and any and format may in damage to the , corrupting and data is later gthe M, the Guillon as well, however it not Kaccessed on the . At Bby 6,144 plus +, the number increasing by 'the , and Guillon \internal stack overflow hang. PZPAPN Guppy : Guppy TSR; . (failures S: 152 7: PRsCK - ], NAV, The Guppy in late by Paul Ferguson of Washington, DC. Guppy is a wof . The the Guppy the as a low TSR by 720 , any . of at least 100 Guppy. by 152 to the $of the . b, and 150 to the end of the ?stamps in the to the @and Guppy , it t. If the is later Guppy ., the fail and a "Bad or Missing 8Interpreter" fail to Guppy. For example, ZEDLIN. it was Yon my ed in a consistent "Invalid , and EDLIN ending acan be identified as hex character : 3ECD211F5A5B58EA of Guppy are: Guppy-B: Almost identical to Guppy, are a few PZPAPN Gusano : Gusano - Spain? S: 822 - 830 7: PNE - , NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Gusano . Its , but it may be gSpain or an Spanish speaking country. Gusano is a of . the Gusano yall of the . in the it has completed uthe a, the Gusano cause a snake-like pattern of "o's" to on the monitor. pattern zig-zag gthe lower right corner to the middle of the and may be accompanied by beeping. the "snake" r Rs the center of the , the briefly BUEN DIA!!! Yo soy un GUSANO. the Gusano rof 822 to 830 at the end of the b. The @and in the DOS to the @and . The qgraphic gthe can be in the in all , along The Gusano ing in an to the PZPAPN : Gyro (failure S: 512 7: ONCK - , NAV, 12.2 9503+, The Gyro . Gyro is a non- the Gyro Y, the Gyro yone The search the Q, the Q, and the B: Qlooking for a it has , it either to the DOS prompt or Othe ing the to the DOS prompt: "Bad the Gyro mthe +of the host by the Gyro The host is permanently corrupted as the save the c512 +of the runless the host smaller , in case the "512 . The in the DOS not be 'the , the in the "*.com *" "GYROzs" tby the Gyro (failures PZPAPN : Ha Warsaw, Poland S: 1,458 - 1,472 7: PRhAK - p, NAV, The Ha . It is gWarsaw, Poland. Ha is a wof . and . Y, the Ha at the top of &the , as sby the DOS by 1,456 nby Ha in , the Ha /and . rof 1,458 to 1,472 at the end of the b. The in the , and hence not "ha! It is what Ha may do PZPAPN Hacktic : Hacktic truncated to 83 hidden; afail to The S: 83 7: ONE - , NAV, 12.2 9503+, {3.0+ The Hacktic gThe Hacktic is a is a later Hacktic 2, is a the Hacktic Y, the Hacktic yone . in the be truncated to +, and ;the Hacktic 7. The . gthe Gas it mthe hidden attribute ,set. The @and in the DOS be set to the @and Hacktic Pn't do , destroying the of Hacktic are: Hacktic 2: , Hacktic 2 is a non- wof . .. It yone . in the rof 93 at the $of the b. The @and in the DOS 3to the @and . Hacktic 2 Pn't do , and Pn't to be in the public domain. : The PZPAPN Hafenstrass : Hafenstrass Hafen Germany S: 809 7: PNE - 1, NAV, The Hafenstrass, or Hafen, Hafenstrass is a wof . . It is gGermany. the Hafenstrass yone . in the on the Q. It Pnot always yan . Y, so the vprocess is what sporatic. the Hafenstrass rof 809 +. The at the end of the be no 5to the @and in the DOS . No the the Hafenstrass s the The Hafenstrass create 22 ,hidden hidden are four %lower case. The ;the "Hafensta e bleibt!" of Hafenstrass are: Hafenstrass-1191: on the Hafenstrass , and Hafenstrass 2 , adds 1,191 +to the . Y, it Oa graphic ambulance car moving across the bottom of the gleft to right. Res the right side of the , it Othe word "BOOM!" in graphic block letters "No more RedX !!!" &it in normal Ofont, bright : Germany Hafenstrass-1191B: hequivalent to Hafenstrass-1191, has one differs. : Germany Hafenstrass-D: on the Hafenstrass intermittently yone . in the Gor a higher Gon the 781 at the end of the b. The @and in the DOS Hafenstrass-D Pnot create hidden See: Hafenstrass 2 PZPAPN Hafenstrass 2 : Hafenstrass 2 j; ambulance car graphic siren S: 796 /), 1,641 7: PNA - , NAV, The Hafenstrass 2 location. , like the Hafenstrass, is wof . . A major distinction is Hafenstrass 2 is actually a , Ambulance Car. The Ambulance Car Hafenstrass 2 is Y, the Hafenstrass 2 yone . and one . in the later Zs one of the , one or two . in the Of the . /and . tby the Hafenstrass 2 the . ;the full Hafenstrass 2 . The were tas a of executing a Hafenstrass 2 Ambulance Car is dropped by Hafenstrass 2. Hafenstrass 2 rof 1,641 +. The at the end of the be no 5to the and in the DOS . No in the tas a of a Hafenstrass 2 rof 796 +due to the presence of the Ambulance Car . Ambulance Car at the end of the Hafenstrass 2 may \unexpected [of an Ambulance Car bmay in a graphic ambulance %run gleft to right along the bottom of the , accompanied a "siren" noise on the speaker. See: Ambulance Car Hafenstrass PZPAPN Haifa : Haifa j; TSR; Israel S: 2,351 - 2,372 7: PRsAK - , NAV, The Haifa Iin Israel in . Haifa is a wof . /and . The Haifa is Yon a Haifa as a low of 2,512 }09 and 21 nby the Haifa ' TSR. At , the ed to by the /SPEC mental variable t, as well as the copy of in the C: Qroot G. On 386 hang hang usually on 8088 processor Haifa is ythe ctwo in the by 2,351 to 2,372 at the end of the 5to the @and in the DOS Haifa employs a complex encryption mechanism to complicate disassembly of the and determination of identification encryption mechanism s in copies of the same having different v, such as duplicate copies of on C: and A: different The Haifa adds the dtwo lines of ASCII to the end of .DOC two lines are in the and not "OOPS! Hope I didn't ruin Well, nobody reads stupied DOCS anyway!" of Haifa are: Mozkin: Iin Israel in May, , Mozkin is the Haifa the encryption has can recognize Haifa may not be able to detect Mozkin. On 80286 [of a Mozkin in the .and the "KIRYAT MOZKIN!!! LOCAL PROCESS INDUSTRY. VIRUS DONE BY: SIBEL ,TEACHES HOW TO MANAGE SHEEP? ks for using Turbo Anti PLEASE JMP FE00:0" Nthe be hung. On 8088 , Mozkin in low Y, hooking ~21. becoming , it /and . by 2,358 to 2,373 at the end of the See: -Haifa PZPAPN Hallo-496 : Hallo-496 Hallo I: March, S: 496 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Hallo-496 in March, . Its . Hallo-496 is a wof . the Hallo-496 yone . in the it has b, it Othe on the Oand a hang "Hallo! I mgot a for you!" the Hallo-496 rof 496 at the end of the b. The @and in the DOS to the @and . The the 7in all Hallo-496 a, as is the "$DSB" of Hallo-496 are: Hallo-751: Hallo-751 was . Like the , its . Hallo-751 xone . the G, and Os the ever an "Hallo! I mgot a for you!" Miscellaneous may be dthe rof 751 to 766 at the end of the b. The and in the DOS to the @and 'the , the can be in the in all "*.com" Hallo-759: Hallo-759 was . Like the , its . Hallo-759 xone . the G, and Os the ever an "Hallo! I mgot a for you!" rof 759 to 774 at the end of the b. The @and in the DOS to the @and , the can be in the 7in all ".com" See: PZPAPN Halloechen : Halloechen Hallo , 1989 TSR; . j; garbled input West Germany S: 2,011 7: PRsA - , NAV, : NAV, or The Halloechen was reported by Christoff Fischer of the University of Karlsruhe in West Germany. The is a generic . is reported to be widespread in West Germany. The Halloechen , the any . Xor . is run unless the bwould be greater 64K in , or the @falls in the =month and year. #determined to be a candi @for v, and is less 62K in as well as having a @outside of the =month and year, it is t. In the process of the b, the rd so it is a multiple of 16 (ends on a paragraph the 2,011 7are aare run, input gthe is garbled. PZPAPN Halloween : Halloween Happy Halloween j; very slow loads; Run S: 10,000 7: PNAK - , NAV, The Halloween, or Happy Halloween, . Its , or , is Halloween is a wof . /and . the Halloween Y, the search the Gfor an over 10K in y. If one is e, the Halloween yit. If an bis not e, the search the Gfor an over 10K in If an e, it If all of the candi /and . over 10K in t, the may receive the , and be ed to the DOS prompt: "Run V002 at 0:0511" Halloween 10,000 +. The at the $of the b. The @and in the DOS . The can be in the 7of Halloween "*.*" "ALL GONE" "Happy Halloween" The Halloween 31st. At a 10,000 a blank be created in the @and ;pure 7. The receive the "Run V150 at 0:0AC8" Halloween \extremely slow loads Y. It is not unusual for loads to last 2 to 5 minutes. PZPAPN Hambone : Hambone S: 2,316 7: PNAK - 2.1.7+, ]2.17+, p2.10+, 12.2 9503+, The Hambone . Its it is probably . Hambone is a of . /and . the Hambone check to determine if are any in the G. If are, the ythem. If the determines all of the . awere t, it yany it finds in the the Hambone rof 2,316 at the end of the b. The @and in the DOS not be . The in the 7in all Hambone "(C) Martin Luther King Jr. Fuhrer" "Hambone, Hambone, myou heard?" "Lawd mmussy" "Hambone, Hambone, myou heard?" "Oh Dem's Golden Slippers" "Hambone, Hambone, myou heard?" "Mammy!" "Hambone, Hambone, myou heard?" "I don't know nuttin' bout birthin' no babies,Miss Scarlett" "Hambone, Hambone, myou heard?" "Feets do yo' "Hambone, Hambone, myou heard?" "I gots dem ol' Kozmic Blues again, Mama" "Hambone, Hambone, myou heard?" "Mammies lil' baby loves shortin'bread." "Hambone, Hambone, myou heard?" "Nobody know de troubles I seen" "Hambone, Hambone, myou heard?" "I gots a bad case o' de miseries today" "Hambone, Hambone, myou heard?" "In de sweet bye-de-bye" "Hambone, Hambone, myou heard?" "I lo-o-o-o-o-o-oves watermelon!" "Hambone, Hambone, myou heard?" "Great day in de mownin'" "*.com *.exe .." the Hambone on the monitor PZPAPN Hamster : Hamster Turbo Hamster I: March, ?may S: 546 7: PNCK - , NAV 3.05, 12.2 9503+, {3.0+, 1.05+ The Hamster, or Turbo Hamster, in March, Its it was provided by an individual in North America. Hamster is a wof . the Hamster Y, the Hamster yone in the =or a higher 546 at the end of the The @and in the DOS usually not be in the case of ., it may to a @in the future. The are in the 7in all Hamster "..\*. "Turbo Hamster It is what Hamster may do PZPAPN Handi-215 : Handi-215 S: 215 7: PNC - NAV 3.05+, 1.05 9503+ The Handi-215 . Its . Handi-215 is a wof . , but not the Handi-215 yall of the . ain the the exception of rof 215 the $of the b. The @and to the @and . The in the 7in all Handi-215 Handi-215 Pn't do PZPAPN Happy : Happy S: 412 7: PNCK - p, NAV, 12.2 9503+, The Happy . Its . Happy is a wof . the Happy Y, the Happy yone . bin the G, as well as one . bin the C:\DOS G. The k you for running the Happy Warning !!! and C:\DOS might be the Happy rof 412 at the end of the b. The @and in the DOS to the @and . The can be seen in the 7in all Happy . The ,of Happy be a hex "FF" character, is the vmarker. PZPAPN Happy New Year : Happy New Year Happy N.Y., V1600, 1600, Dear Nina A, 1989 TSR; . j; floppy (failures; bad or missing 8interpreter S: 1,600 7: PRsAK - ], NAV, The Happy New Year, or V1600, *, and is a wof . /and . a. It The the Happy New Year Y, the as a 2,432 +low TSR. nby the . At , the make a slight alteration to the floppy , and not show a ras the a portion of the hex 00 section of the b. The floppy Pnot ;a copy of the , and is not yious. Happy New Year is , it /and . by 1,600 +and mthe at the end of the The can be "Dear Nina, you make me write ; Happy new year!" "1989" is not Nby the the Happy New Year may fail to receiving a "Bad or missing 8interpreter" ton the It is if Happy New Year carries any destructive capabilities. of Happy New Year are: Happy New Year B: to Happy New Year, has five differ gthe . Unlike Happy New Year, if it is Yfor reason. PZPAPN Harakiri : Harakiri I: May, Sweden S: 5,488 7: ONAK - , NAV, The Harakiri in May, . It s to be gSweden due to the in the . Harakiri is a xboth . /and . Harakiri is Y, the Harakiri search the Gfor y. Assuming the . ain the are , and X, B. X, C. X, and D. X, the Othe "--> \A. Ej Infekterad...! --> \B. Ej Infekterad...! --> \C. Ej Infekterad...! --> \D. Ej Infekterad...! too big to fit in The "Ej Infekterad...!" translates gSwedish to English as "Not t...!". If the finds less four . it can start auntil it has tfour [. If the encounters an already it is searching for y, it Othe bAlready all of the . /and . ain the t, the Othe "Your PC is alive and the HARAKIRI All of the can be seen in the Harakiri PZPAPN lDays lDays S: 662 7: PRhCK - , NAV, The lDays . Its lDays is a wof . .. It bears ity to the Red Diavolyata lDays Y, the lDays at the top of &the ), hooking ~21. , as sby the DOS Bby 960 ~12's #moved. lDays , it rof 662 at the end of the b. The in the DOS to the @and . The can be in the 7in all lDays "It's ldays night!" PZPAPN Harm-1082 : Harm-1082 S: 1,082 - 1,098 7: PRhE - {3.0+ The Harm-1082 . It s to be gthe . Harm-1082 is a wof . Pnot yvery small cHarm-1082 Y, the Harm-1082 at the top of &the ), hooking ~21. , as sby the DOS Bby 1,472 ~12's #moved. lDays , it rof 1,082 to 1,098 at the end of the b. The @and in the DOS not be . The are in the 7in all Harm-1082 "Eat me Lozinsky!" "Harmless v1.0, 10/06/92 Tyumen" It is what Harm-1082 PZPAPN Hary Anto : Hary Anto Hary j; TSR; S: 983 - 997 7: PRsCK - , NAV, The Hary Anto . Its . Hary Anto is a wof . The Hary Anto is Y, Hary Anto as a low TSR of 1,328 +. The Hary Anto is , it rof 983 to 997 at the end of a. The @and in the DOS the @and . The can be Hary Anto: "HWI_Tm" Occasionally, the Hary Anto at the top of the starts "WeLcOmE tO hArY aNtO" not be aas it is PZPAPN Hastings : Hastings longer function S: 200 7: ONCK - 1, NAV, The Hastings in the . Hastings is a wof the bin a G. It may Hastings is Y, the find the bin the G. If has not tby the Hastings , it yit. Hastings mthe +of the host 7. The 5unless the was smaller +, in case the 200 +. The @and in the DOS to the @and The can be in the Hastings: "AKA Nick Haflinger... Zopy me I want to travel" "I can now in assembler" was written in the town of Hastings hehehehe!" The Hastings Pnot do 'replicating and destroying those See: Possum PZPAPN Hates-213 : Hates-213 I: May, S: 213 7: PNCK - {3.0+ The Hates-213 in May, . Its . Hates-213 is a wof . the Hates-213 yone . in the rof 213 the at the end of the b. The and in the DOS the @and . The in the 7in all Hates-213 "Jesus Hates You*.cOm" Hates-213 Pn't to do PZPAPN Helicopter : Helicopter Helicopter.777 S: 777 7: ORhCK - ]2.17+, 7.00+, p2.10+, 2.71+, 7.00+, 2.71+, 2.17+ The Helicopter . Its . Helicopter is a selectively cHelicopter at the top of but &the ), not moving ~12's , as sby the DOS 5.0 1,296 21, and 24 nby the the Helicopter , it Y, providing the bhas at least 777 +of continuous binary zeros. +of the binary zero area by the 7, along $of the area. The @and in the DOS . No in the It is what the Helicopter PZPAPN : Hell Year-6545, Hell-892, Pixel-897, Pixel-899, Pixel-899B, Pixel-905 I: May, S: 936 7: PNCK - , NAV, The Hell Win May, . Hell is a wof . Hell is Y, the search the Gand yall . .is present in the G, it t. A portion of the remain in , hooking the clock. Hell by 936 +, the at the . The @and in the DOS to the @and Hell ;the "WBO" "Fucking Hell:What a smelly ass hole!!Do you want to fuck!!! HaHaHa... What a Good Friday!!" Hell is actually shorter in +, the by the ga previous is a of the Amstrad es, and may detect it as such. Hell and its can be destructive activate, formatting the ctrack of the of Hell are: Hell-892: hequivalent to the adds 892 Pixel-897: Pixel-897 is an 897 of the Hell xall . .in the of 897 +, and @and in the DOS aare: "WBO" "Fucking Hell: What a smelly ass hole!!" "Do you want to fuck it!!!" Pixel-897 , it Os the last two as a , and s the ctrack of the Q, formatting it. Pixel-899: hequivalent to Pixel-897, adds 897 Pixel-899B: Pixel-899B is to Pixel-899, exception , it Os its but Pnot format the ctrack of the Pixel-905: Pixel-905 is an 905 of Pixel-897 hequivalent, the exception rd in by 905 See: Amstrad Pixel Silly Silly-365 PZPAPN Hellraiser : Hellraiser I: May, fail to Canada S: 1,580 7: ONE - , NAV, The Hellraiser in May, . It is gCanada. is a of . the Hellraiser Y, the check the Qto determine if more Hories exist. If more two sub Hories exist, the start in the third sub Gand check for two Hellraiser mthe c1,580 of the host the Hellraiser 7, permanently damaging them. be no 5to the unless the bwas smaller 1,580 . In the case of the host smaller 1,580 , it "1,580 . The @and in the DOS smaller the Hellraiser to the DOS prompt Zthem. are larger receive too big to fit in Zthem. PZPAPN Hellween : Hellween 1376 J: S: 1,376 7: PRhA - , NAV, 12.2 9503+, The Hellween . Its . Hellween is a wof . /and . , but Pnot The Hellween is Y, the Hellween at the top of &the ~12's #moved. , as sby the DOS by 1,904 nby the the Hellween , it rof 1,376 +. The at the end of the b. The @and the DOS not be The in the Hellween 7, and are not "HELLWEEN???!!" It is what Hellween of Hellween are: Hellween-1182: on the Hellween is 1,696 +. It hooks }08, 13, and 21. Like Hellween, /and . rof 1,182 at the end of the b. The and in the DOS . It Pnot ;the "HELLWEEN" Hellween.1684: on the Hellween is 2,208 +. It hooks }08 and 21. It rof 1,684 at the end of the b. The @and in the DOS not be . The in the 7in all "Do you work "Do you like "Do you like space on "YOUR SOLUTION "The Volkov "You can Qit like Norton 8er 4.0" "The SIZE of Volkov 8er is ONLY 62KB!" "The VC brings many new functions!" "All s of VC are very quick!" "The VC is ShareWare but" "please" "don''t make black copies, it's not fair." Zak2: on the Hellween is 2,608 +, hooking ~21. Zak2 /and . Y, adding 1,839 +to the . The @and in the DOS not be , and the at the end of the b. The in the Zak2 "zak2" May, PZPAPN : Hero Hero-506 I: May, Italy S: 506 7: PRA - , NAV, , NAV, The Hero in May, . Its is believed to be Italy. Hero is a generic wof . and . cHero Y, Hero it is , it Y. The usually be hung Hero rof 506 +. . by 506 to 509 +. The marker of all is 24 hex FF (h'FF') 6at the $of the the +of the , permanently damaging the host Hero is not a viable due to the bugs in its 7, and is a very poor replicator since s in a hang. of Hero are: Hero-506B: on the Hero has had of the ming Uin the corrected. It no longer kthe are rd in by 509 at the end of the b. The @and in the DOS to the @and See: Hero-394 PZPAPN Hero-394 : Hero-394 Hero-B Oof random S: 394 7: PRfE - 1, NAV, The Hero-394 . Its is a wof . a, and on the Hero The Hero-394 is Y, the Hero-394 . Hero-394 hooks many }in the ~area, Hero-394 is , it rof 394 at the end of the b. The @and in the DOS to the @and of a Hero-394 random may be Y, as well as the ing to be hung. Usually, if the presses "enter", the continue processing. See: Hero PZPAPN Hexametricx : Hexametricx ?seconds = 12 Germany S: 545 7: PNCK - , NAV 3.05, ]2.17+, 2.0+, 1.05 9503+, 2.17+ The Hexametricx . It gGermany. is a of . in the Qroot G. In its =state, it Pnot Hories, or on the Hexametricx yone . in the C: Qroot 545 at the end of the b. The @and in the DOS to be un the seconds field set to "12". The in the Hexametricx "*.CoM" "Hello , You mgot The HEXAMETRICX "Today is the month's B i r t h d a y !" "I was written in the City of Langen(Hessen), Germany" "by SuIgImErIuS" v1.3" "GREETINGS TO ALL OTHER VIRUS WRITERS!" It is what Hexametricx PZPAPN : HH&H Gomb, GMB S: 4,091 7: PRhCK - , NAV, The HH&H . Its . HH&H is a wof . cHH&H Y, the HH&H at the top of but &the , as sby the DOS by 6,144 }1C and 21 nby HH&H in the HH&H , it over 8K in Y, it the HH&H 4,091 +. The at the end of the . The @and in the DOS to the @and The in the HH&H 7, and hence are not "HARD HIT & HEAVY HATE the HUMANS!!" "[ H.H.& H.H. ]" It is what HH&H PZPAPN : Hi Eastern S: 460 7: PRtE - , NAV, The Hi . It is gEastern W. Hi is a wof . Y, the Hi at the top of &the ), moving ~12's , as by the DOS Bby 1,024 nby the the Hi , it rof 460 at the end of the b. The @and in the DOS to the @and . The can be enear the end of all "Hi" PZPAPN HiDos : HiDos BSC; Lroot England S: N/A 7: BRtX - p, NAV, The HiDos . It is England. HiDos is a and the ). It is roughly on the The the HiDos , the HiDos ythe , as sby the DOS Bby 2,048 +. On the M, the #moved to Side 0, Cylinder 0, 7, and a copy of the 7written to the location. the HiDos , it ythe of non-write protected accessed on the . The valways gthe Mto the hang ing. Any attempt to Hly access the or the in a hang. The t360K 5.25" #copied to 11. On 1.2M 5.25" K, it be at 17. As both of are part of the root <may ;ed entries. PZPAPN Highlander : Highlander j; TSR S: 477 7: PRsC - , NAV, The Highlander . It is gthe , and is by the same author as the Geek . Highlander is a wof . , but not cHighlander Y, the Highlander as a low TSR of 1,280 +. It hooks }21 and 22. , the Highlander rof 477 at the $of the b. The @and in the DOS not be The in the all Highlander "Highlander 1 RULES!" "v05" Highlander on the 29th day of any month, at Othe "Highlander 1 RULES!" s and hang the PZPAPN Hiperion : Hiperion I: May, S: 254 7: PRaCK - NAV, 12.2 9503+, {3.0+ The Hiperion in May, . Its . Hiperion is a cHiperion Y, the Hiperion in a "hole" in al , hooking ~21. , as sby the DOS not be the Hiperion , it rof 254 at the end of the b. The in the DOS to the @and . No in the 7in Hiperion It is what Hiperion may do of Hiperion are: Hiperion.249: , Hiperion.249 is a 249 of the Hiperion rof 249 at the end of the The @and in the DOS to the @and . The in the "C:\ PZPAPN Hitchcock : Hitchcock j; TSR; I/O ; music; S: 1,247 7: PRsCK - , NAV, The Hitchcock . Its . Hitchcock is a wof . The Hitchcock is Hitchcock as a low TSR of 4,196 mapping utilities not show the TSR, but instead the in- 8interpretor is 4,196 +larger expected. nby the becoming , Hitchcock over 3K in Y. If Y, it be 1,247 +larger The at the end of the gwrite-protected in a DOS "Write protect Vwriting Hitchcock Pnot trap Y, later gthe in Hitchcock becoming at the top of &the DOS Bby 4,096 }1C and 21 now be on the may now get the , "I/O VF0, PC=3FAB", and the be aborted. five to ten minutes (ing the a Hitchcock ., the play music on the speaker. The music is the theme song gthe Alfred Hitchcock television , and continue to play at intervals until the is re of Hitchcock are: Hitchcock-1238: , Hitchcock-1238 is a 1,238 of the Hitchcock . Its is 4,112 +, hooking }1C and 21. It adds 1,238 +to the x. The at the end of the b. The @and in the DOS not be Hitchcock-1238 the theme song gthe Alfred Hitchcock television %played on the speaker. As the , the tune be played at intervals until the is re PZPAPN : HLLS acreated correspond to . S: 4,768 +& More 7: PNS - Spawning or Companion ]2.17+, NAV 3.05 9503+, 12.2 9503+, 7.00+, 2.0+, 2.17+ HLLS is a category of includes spawning or companion are written in a high-level language, such as C, C++, or Pascal. es in category creating a corresponding or companion . has the same base . As a Zthe . , DOS Zthe . instead. The companion . acreated by HLLS es may be in the DOS G, or not due to the settings of battributes. The amay mthe @and set to the @and , a specific and unique to the , or the @and of the corresponding . Companion or spawning es can generally be dis deleting the . ;the HLLS es include: HLLS.Linda Lou: , HLLS.Linda Lou is , 4,768 spawning or companion . It up to three . in the and Y. The companion . created by HLLS.Linda Lou are at least 4,768 , and are in the DOS @and match the @and on the corresponding . b. The can be in HLLS.Linda Lou companion . *.exe PZPAPN Hobbit : Hobbit ; TSR S: 505 7: ORsE - p2.10+, NAV 3.05 9503+, 12.2 9503+, {3.0+ The Hobbit . Its . Hobbit is a of . , and should be considered a cHobbit as a low TSR of 1,440 +. No Hly mapped to the as it Hly hooks the }via the ~chain. , the Hobbit . Hobbit as the s 505 +of the . header. The @and in the DOS not be . One in the 7in all Hobbit "HOBIT" It is what Hobbit PZPAPN Holiday : Holiday Indonesia S: 2,900 - 2,916 7: PRhAK - NAV 3.05 9503+, 12.2 9503+, The Holiday , and is Indonesia. Holiday is a wof . /and . cHoliday at the top of &the ), not moving ~12's , as sby the DOS Bby 2,912 nby Holiday in the Holiday , it by 2,900 +while . rof 2,906 to 2,916 +. In both cases, the at the end of the b. The are in the 7in all Holiday "ATTENTION!" "I'm very sorry, today is my holiday." "So, I can't serve you, cause I want to play on your computers." "DON'T TURN OFF YOUR /PUTER UNTIL TOMORROW," "OR YOUR DATA WILL BE LOST!!!" "I'll be back to serve you tomorrow." k You," "AAA" k You for playing, see you..." "Please, hit ENTER!" kmay PZPAPN Holocaust : Holocaust , Holo Barcelona, Spain S: 3,784 7: PRhCK - , NAV, The Holocaust by David Llamas of Barcelona, Spain. Holocaust is a self-encrypting wof . qualifies as a as it hides the aas well as bopen and The the Holocaust Y, the . It reserve 4,080 +of high &the be marked as 8Data, and mapping utilities show the 8interpreter to mgrown by the 4,080 it is actually in high instead of low Holocaust is , it for any reason. , however, yvery small . aof less 1K in by 3,784 not be seen in a the . The the end of If the Holocaust and the DOS sas having a [of the the /F parameter on in the abecoming damaged. The Udo not the is not in since at match the in the FAT. The Holocaust is a self-encrypting , and occasionally produce an Tdifferently gits encryption mechanism. ;the at the end of the , while samples Anti - C.T.N.E. v2.10a. (c) Grupo Holokausto. Kampanya Anti-Telefonica. Menos tarifas y mas servicio. med in Barcelona (Spain). 23-8-90. - 666 -" Holocaust is reported by David Llamas to be widespread in Barcelona as of . It is not , and what it See: Telecom PZPAPN Hominy : Hominy Australia S: 1,589 7: PNCK - , NAV, The Hominy . It is Australia. Hominy is a wof . the Hominy yone . in the 1,589 at the end of the The @and in the DOS not be can be identified manually by checking to determine if the cthree +of the match the last three +of the The in the 7in Hominy "GAMES "RASTAN RJ" "WORLDALC.DN1" "ZEPFIGHT.MS3" "*.*" "\ S S\DR SS" It is what Hominy of Hominy are: Hominy-B: hequivalent to the Hominy the "CINACT.LOG P" "CARTOONS.000" "\ TRIP ARK" : Australia May, See: P PZPAPN Honey : Honey S: 666 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Honey . Its , but it is probably gthe . Honey is a wof . the Honey Y, the Honey yone . in the rof 666 the at the end of the b. The and in the DOS the @and . The in the 7in all Honey /C:\ . ANTI-VIR.DAT .. DOS" "Honey, I'm home . . ." "Earl Sinclair" "\CODE\WORK" "TSTS" The "Honey, I'm home . . ." is the greeting used by the "Earl Sinclair" character in the "Dinosaurs" television . The as a PZPAPN Horror : Horror S: 2,319 7: PRsAK - , NAV, 2.17+, The Horror . Its . Horror is a /and . The the Horror the Horror at the top of &the , as sby the DOS Bby 3,744 ~12's not be moved. }13 and 21 nby the Horror , the Horror the copy of ed to by the /SPEC en mental variable if it was not the Horror , it rof 2,319 at the end of the b. The @and in the DOS not be . The Horror unable to determine if it has the , adding an 2,319 Horror is an . While it :the in its cannot be viewed in is HORROR !" /SPECS" It is what Horror \frequent are of Horror are: Horror-1112: on the Horror adds 1,112 +to the . /and . the end of the b. It Pnot re . Its is 1,792 +, hooking }13 and 21. The "locked out . The in the Horror-1137: on the Horror adds 1,137 +to the . /and . the end of the b. It Pnot re . Its is 1,856 +, hooking ~21. The "locked out . The in the Horror-1137B: hequivalent to Horror-1137, very minor PZPAPN Horse : Horse Horse (Dropper I: May, BSC; ; high density S: N/A 7: BRhX - , NAV, M/P, or DOS SYS on The Horse in May, in the form of a "dropper" |s the on a 360K Horse "dropped" by the , is a and the ). It is on the tby the Horse , the at the top , but &the ~12's not be moved. Cby 2,048 +as measured by the DOS . The access the M, and ythe a copy of the (has completed, the find QC:, and not Horse , it ynon-write protected are exposed to the 360K low density 5.25" Horse moved to the last on the mthe moved to cylinder 0, side 0, Horse (treats high density Kas low density If a high density Horse (, data on the be damaged. of Horse (are: Horse (Dropper: A small . drops the Horse See: PZPAPN : Hot Hot.130 fail to function Lmay hang S: 130 7: ONC - 12.2 9503+, 2.0+, 7.00+ The Hot . Its . Hot is a on the C: Q. It Pnot gthe Qs may in a hang Qspinning. the Hot Y, the Hot yone . in the on the C: c130 by the 7, and the in the DOS to the @and . The in the 7in all "\ *.C*" is hot!" The Hot permanently corrupts the . PZPAPN House : House fail to unexpected access to A: and B: S: 11,636 7: ONE - ], NAV, 2.1.7+, p2.10+, The House . Its . House is a on the A: and B: the House Y, the House yall . in the Hories on the A: and B: are larger 11,636 mthe c11,636 +over- written by the House , permanently corrupting them. The @and in the DOS not be , and the not be 3. The can be ein the House 7in all "*.exe" "*HOUSEVIRUS*" "*.exe rb rb rb+" the House not function and either to the DOS prompt, or unexpected s may PZPAPN Hungarian : Hungarian Hungary S: 695 7: PRhAK - , NAV, The Hungarian in Hungary in is a wof . /and . cHungarian Yon a the Hungarian at the top &the ~12's #moved. , as sby the DOS by 1,024 +. The is actually 1,008 , and can be easily seen mapping utilities. the Hungarian , it and . rof 695 at the end of the b. The @and in the DOS It is if the Hungarian of Hungarian are: Gyorgyi: A 749 of the Hungarian , Gyorgyi /and . rof 749 at the end of the b. The @and in the DOS not be . The enear the end of all Gyorgyi "I LOVE GY RGYI" : Hungary May, Hungarian-B: hequivalent to the Hungarian has three differ. : Hungary PZPAPN Hungarian 482 : Hungarian 482 j; TSR; no Hungary S: 482 7: PRsCK - , NAV, The Hungarian 482 in Hungary in Dr. Szegedi Imre. is a The Hungarian 482 is the as a low TSR, hooking ~21. Unlike most use TSRs for residency, the DOS report no . However, ~12's #moved. The TSR is in low , and the prevent its TSR Hungarian 482 is , it very small ones, as Y. If Y, it by 482 at the end of the be no in the @and in the Due to a bug in the Hungarian 482 7, it is possible happen very Hungarian 482 Pnot do See: Zu1 PZPAPN Hybryd : Hybryd Hybrid Poland S: 1,306 7: PNCK - ], NAV, The Hybryd , and is gPoland. is a wof . Hybryd is Y, the for an in the G. If an e, the yit. rof 1,306 +, the at the end of the alters the the seconds field in the is 62, the indicator t. Just viewing the , it @and not The in the Hybryd cannot be viewed in "(C) Hybryd Soft Specjalne podziekowania dla Andrzeja Kadlofa i Mariusza Deca za artykuly w Komputerze 11/88" In the sample, the one is not is the d samples: "Copyright IBM Corp 1981,1987 Licensed Material - Property of IBM" should not be taken to indicate IBM necessarily had to do the creation of On Friday the 13th starting in It may corrupt PZPAPN Hydra : Hydra Hydra, Hydra-0, Hydra-1, Hydra-2, Hydra-3, Hydra-4, Hydra-5, Hydra-6, Hydra-7, Hydra-8, Hydra-8 Trojan unexpected [failure; truncated S: 340 - 736 +, depending on present 7: PNCK - 1, NAV, The Hydra es was . Its . The Hydra :nine closely related es, and one trojan dropped by one of the es. All of the es are ws of . . The earliest Hydra-0, is eight later and the trojan included in " Hydra-0 is Y, the Hydra-0 search the Gfor one non- y. If one is e, Hydra-0 Hydra-0 736 +, the at the $of the b. The @and in the DOS to the @and If Hydra-0 Pnot find an bin the G, it activate. At , it , and to the DOS prompt: "HYDRA" "Watch for the many heads. The ceight are easy to find and kill. replacements be more sophisticated." "(c) - C. A. V. E." The , along &can be ein all Hydra-0 "HyDra" "Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E." "Coalition of American Engineers" " -=-=- " "Dedicated to supporting the anti- industry out recognition or reward." Hydra-0 Pnot do members of the Hydra 'Hydra-0, are: Hydra-1: Hydra-1 is to the Hydra-0 . It adds 403 +to the . all the . ain the t, it Othe , and the hung: "HYDRA" "Copyright (c) by C.A.V.E." The ein all Hydra-1 along "YD HyDra-1 Beta - Not For Release. *.CO?" Hydra-2: on Hydra-1, Hydra-2 is a 343 . It adds 343 +to the . all the ain the t, it Oany , and no hang . It :the "YD HyDra-2 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E" Hydra-3: on Hydra-2, Hydra-3 is one ,smaller. It adds 342 +to the . all the . ain the t, the not be able to successfully Zany in the ed to the DOS prompt. in unexpected . For example, [of the DOS typically in a indicating the is bad, even it is actually undamaged. Hydra-3 are: "YD HyDra-3 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E." Unlike members of the Hydra ^, Hydra-3 yalready , adding +to the Hydra-4: on Hydra-3, Hydra-2 is two +smaller. It adds 340 +to the . all the . ain the [of any in the DOS : "General Failur Vreading Q". The is receiving the Vis actually ok, and accessible (ing the and dis in Hydra-4 are: "YD HyDra-4 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E." Hydra-4 Pnot re aas Hydra-3 Hydra-5: The Hydra-5 on the Hydra-4 . It adds 391 +to the . all the ain the [of the next in all in the in Hydra-5 "YD HyDra-5 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E." Hydra-6: The Hydra-6 on the Hydra-5 . It adds 372 +to the . all the ain the [of the next any bin the the base /MAND (ie /MAND.*) %truncated to zero in Hydra-6 "YD HyDra-6 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E. /MAND.*" Hydra-7: The Hydra-7 on the Hydra-6 . It adds 368 +to the . all the ain the [of the next in all in the truncated to zero in Hydra-7 aare: "YD HyDra-7 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E. *. Hydra-8: The Hydra-8 on the Hydra-7 . It adds 495 +to the . all the ain the [of the next four . ain the %replaced by a 90 ,trojan (see &as Hydra-8 Trojan). in Hydra-8 "YD HyDra-8 Beta - Not For Release. *.CO?" "Copyright (c) by C.A.V.E. *. Hydra-8 Trojan: The Hydra-8 Trojan is a 90 the Hydra-8 replace four . the Hydra-8 are later Y, it in the middle of the and to the DOS prompt: "Who is John Gait?" is not in the trojan PZPAPN : Hymn S: 1,865 - 1,883 7: PRhAK - ], NAV, The Hymn , and ated in the is a wof . /and . a, and The the Hymn the at the top of &the ). The DOS show Bby 3,712 Pnot move the Hymn is , it /and . are over 2K in for any reason. by 1,865 rof 1,869 to 1,883 +. In both cases the at the end of the ;two in the 7: "ibm@SNS" "@ussr@" It is not what Hymn , but it is assumed gthe under conditions it may play music. PZPAPN : I-B BadGuy, BadGuy 2, Crackpot, Demon, Exterminator I: May, Italy S: 265, 272, or 451 7: ONCK - , NAV, The I-B is actually a group of three Win May, ated in Italy, and are very closely related. All of them are an I-B Y, it yall . the mthe $of the The number of vary, depending on is present. and in the to the @and . See &for specifics of I-B es activate on the day of the week. If all of the in the Gare t, and the day of the week is the day %checked for by the activate. Two of the c160 of the C: Q, the third just hang the of I-B are: BadGuy: BadGuy is a 265 of I-B. It s the c265 @and in the to the @and BadGuy on Mondays, hang the the BadGuy of I-B are: "BadGuy (c) by Cracker Jack (IVRL)" "Italian Research Laboratory (C) "IVRL Head Quarter, Milan Italy" BadGuy 2: BadGuy 2, or Crackpot 208, is a 208 of I-B. Basically, it is a bug-fix of BadGuy, having had the bug fixed s in a BadGuy . BadGuy 2 xall . the c208 +. The and in the to the @and v. On Mondays, BadGuy 2 Othe "New BadGuy - (c) by Cracker Jack IVRL Head Quarter Milan Italy" cannot be as it : Italy, Demon: Demon is a 272 of I-B, and is the most advanced of the ^. It the c272 @and in the DOS G. Demon on Tuesday, at Othe the c160 of the Veating can be Demon are: "Demonhyak Viri X.X (c) by Cracker Jack (IVRL) Demon-B: Demon-B is a minor of the Demon I-B. It has five differ gthe Demon Demon-C: Demon is a 263 of I-B, and is on the Demon . It s the c263 +of all . in the Y. Demon-C :the in its Vreading "BillMeTuesday!" XC failure" /MAND.C0M" Exterminator: Exterminator is a 451 of I-B, and s to be the earliest Exterminator s the c451 @and to the @and . Exterminator on Mondays, Othe c160 of the "Exterminator 1.0 (c) by Cracker Jack (IVRL) No panic... is a Harmless can be Exterminator "Exterminator 1.0 - (c) by Cracker Jack (IVRL)" "Italian Research Laboratory (C) Researchers: Non rompetemi le palle o mi arrabbio... non so se sono stato abbastanza chiaro PZPAPN Ice 9 : Ice 9 ARCV93 j; TSR; hidden aare no longer hidden England S: 639 7: PRsC - p, NAV 3.05+, 12.2 9503+, {3.0+ The Ice 9 in England in . Ice 9 is a wof . , but not The the Ice 9 the Ice 9 as a low TSR of 1,136 nby the , Ice 9 for any reason. rof 639 at the end of the b. The @and in the DOS not be The can be eat the very end of Ice 9: "r51xP" A symptom of an Ice 9 hidden no longer be hidden, and in the DOS of Ice 9: Ice 9-159: Probably an earlier of the Ice 9 Ice 9-159 is a wof . .. It xone . in the 159 at the end of the b. The seconds field in the @and in the DOS #set to "00", and cases, the gthe as a . The in the /[159] ICE-9" Ice 9-159 Pn't to do : England March, Ice 9-199: A later of the Ice 9-159 .. It xone . in the 199 at the end of the b. The @and in the DOS to be , but the seconds field #set to "62". The in the "[199] ICE-9" Ice 9-199 Pn't to do : England March, Ice 9-224: A later of the Ice 9-199 .. It xone . in the 224 at the end of the b. The @and in the DOS not be . The in the "[224] ICE-9 *.com" kmay : England March, Ice 9-250: A later of the Ice 9-224 .. It xone . in the 250 at the end of the b. The @and in the DOS not be . The in the "[250] ICE-9*. "arCv" The second , "arCv" can be eat the end of all : England March, Ice 9.639.Starfish: on the Ice 9 Ice 9.639.Starfish's is 1,152 +, hooking ~21. It , or copied. by 639 the end of the b. The @and in the DOS not be . The in the "Mad Satan[ is StarFish ]" Written by Mad Satan in TAIWAN." "[ STARFISH ]" "Satan" : Taiwan Ice 9B: to the one differs. : England PZPAPN Icelandic : Icelandic 656, One In Ten, MCrunching , Saratoga 2, Iceland Extinct , 1989 -TOM; bad ; FAT Iceland S: 656 7: PRfE - , NAV, ], NAV, or The Icelandic, or MCrunching , was Iceland in 1989. Icelandic is a a, and yevery tenth . The Icelandic is Y, the at the top of &the , as sby the DOS by 2,048 nby the agrowing in between 656 and 671 always be a multiple of 16. The attaches to the end of the x, and always end hex '4418,5F19'. The Icelandic to avoid detection by utilities by checking to see if has " ~13. If ~13 was nbefore the cIcelandic Y, the not proceed . If ~13 has not attempt to yevery 10th floppy Qs, or 10 MB Ms, the not cause any damage. However, on larger 10 MB, the select one unused FAT entry and mark the entry as a bad of Icelandic are: Icelandic.655: Icelandic.655 is a modified of the Icelandic . Its is 2,048 +, and it Hly hooks }, so be mapped to the , it yevery tenth Y, provided is an . by 655 to 669 at the end of the b. The @and in the DOS to the @and kmay Icelandic-IB: hequivalent to Icelandic, differs by one by gthe Icelandic-IC: hequivalent to Icelandic, differs by one by gthe and Icelandic-IB. Icelandic-ID: very minor of Icelandic. It has to avoid %detected by a specific utility. Icelandic-IE: very minor of Icelandic. It has to avoid %detected by a specific utility. Icelandic-II: Icelandic-II is a modified of the Icelandic . Its is 632 the Icelandic-II , it modify the @and the DOS G. It removes the read- attribute gread- a. On Ms larger 10MB, are no bad marked in the FAT as the Icelandic : Iceland , 1989. Icelandic-III: Icelandic-III is a modified of the Icelandic . Before Icelandic-III , it checks to see if the Icelandic or Icelandic-II, if it has, it Pnot ythe the Icelandic-III rd by 848 to 863 +. If an is run on A24th of any year, subsequently run be stopped, later Oing the "Gledileg jol" ("Merry Christmas" in Icelandic) instead. The 's id in the last two words of the hex '1844,195F', the Rword reversed gthe id ending the Icelandic and Icelandic-II : Iceland A, 1989. Saratoga: on the Icelandic , the Saratoga main difference is it copies , it modifies the block so to belong to the operating , thus avoiding reusing the block. It is 642 : Saratoga, California, USA , 1989. See: Mix1 PZPAPN : Idle k; unexpected S: 2,332 or 2,859 7: PRhA - , NAV, The Idle . Its . Idle is a /and . . It Pnot The the Idle at the top of &the ~12's #moved. sby the DOS 3K. }08, 21, and 28 nby Idle in the Idle , it /and . for any reason. . by 2,332 at the $of the b. . by 2,859 at the end of the b. In both cases, be no to the @and in the DOS The can be in the all "PATH= /MAND X*.*" the Idle \unexpected kand warm re PZPAPN Ieronim : Ieronim Ieronim-570 S: 570 7: PRtC - , NAV, The Ieronim, or Ieronim-570, It is gthe . Ieronim is a wof . , but not The the Ieronim the Ieronim at the top of &the ), moving ~12's , as sby the DOS Bby 576 08 and 21 nby Ieronim in , the Ieronim rof 570 at the end of the b. The @and in the DOS to the @and . The the 7in all Ieronim "com "Mulier pulchra est janua diaboli" "via iniquitatis,scorpionis percussio." "St. Ieronim" The Ieronim Othe follwoing it is , usually accompanied by a hang: "Mulier pulchra est janua diaboli via iniquitatis,scorpionis percussio. "St. Ieronim" of Ieronim are: Ieronim-512: A 512 of the Ieronim 1K. It hooks }08, 20, and 21. Ieronim-512 , but not rof 512 to 1,023 at the $of the 512 +of the ris the actual 7, the remainder of the is padding at the end of the a portion of the host bhas #initially Ieronim-512, its multiple of 1,024 +. The @and the DOS the @and . Ieronim-512 is not able to determine tby the , so may be re adding an The in the 7in Ieronim-512 "Mulier pulchra est janua diaboli," "via inquitatis,scorpionis percussio." "St. Ieronim" The Othe last three as a , accompanied by beeping, Ieronim-560: A 560 of the Ieronim 1K. It hooks }08, 20, and 21. Ieronim-560 , but not rof 560 to 1,119 at the $of the 560 +of the ris the actual 7, the remainder of the is padding at the end of the a portion of the host bhas #initially Ieronim-560, its multiple of 560 +. The @and the DOS not be Ieronim-560 is not able to determine tby the , so be re t, adding an v. The in the 7in Ieronim-560 "Mulier pulchra est janua diaboli," "via inquitatis,scorpionis percussio." "St. Ieronim" The Othe last three as a , accompanied by beeping, Ieronim-600: on the Ieronim is 608 +, hooking }08 and 21. It Y, adding 600 . The the end of the b. The @and the DOS not be :the same as the , and like the Othe Ieronim-1581: on the Ieronim is 1,584 +, hooking }08 and 21. It Y, adding 1,581 . The the end of the b. The @and the DOS to the @and . The can be in the 7in all Ieronim-1581 "Le voyage de condom" Ieronim-1581 has for awhile, scroll the Oand emit an occassional beep until the is reset. No PZPAPN Ignorant : Ignorant MMBR S: 1,979 7: PRhAKX - X, and MBR 12.2 9503+, a& DOS 5.0+ F- M/MBR The Ignorant . Its . Ignorant is a fast wof . /and . xthe (Record ( ), thus it is a multi-partite . Ignorant is , hiding the cIgnorant at the top of &the ), not moving ~12's , as sby the DOS Bby 5,120 nby the , the ythe (record if it was not , the Ignorant X, .BIN, and .OVL for any reason. rof 1,979 hidden . The in the DOS not be . The in the Ignorant "Ignorance is Strength" fdom is Slavery" "War is Peace" XBINOVLSYSSCCLVSF" "[1984] bY [T ] '93!" "THiS iZ iNFiON #" "Greetz RS/NuK It is what Ignorant PZPAPN IKV 528 : IKV 528 IKV-512, S: 528 7: PNCK - , NAV, The IKV 528 , its is a of . a. It IKV 528 is Y, the ytwo . in the G. . are smaller not be by 528 +. The at the end of . The @and in the not be by the Pnot do PZPAPN Ilja-1704 : Ilja-1704 S: 1,704 7: PRaCK - 12.2 9503+, {3.0+ The Ilja-1704 . Its . Ilja-1704 is a wof . cIlja-1704 Y, it 8E00: }16, 21, and 4C nby the the Ilja-1704 , it rof 1,704 at the end of the b. The in the DOS to the @and . The in the Ilja-1704 ly, the "CR" can be estarting in the fourth ,of all PZPAPN : Ill & beeping S: 1,016 7: PNCK - , NAV, The Ill . Its . Ill is a wof . the Ill Y, the search the Gto find the has not e, it t, and the usually continue [. If an is not e, the usually continue the Ill rof 1,016 +. The at the end of the b. The @and in the DOS . No in the Y, the Nalong a series of beeps emitted gthe speaker: "WARNING : USE ONLY ORIGINAL PROGRAMS DON'T COPY IT and now .. I AM ILL !!" in the PZPAPN : Imi Imi.A, Imi.1536 j; TSR; S: 1,536 - 1,550 7: PRsE - , NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.17+ The Imi or Imi.A . Its . A of six es in the Imi ^were initially, five listed &as Imi.B, Imi.C, Imi.D, Imi.E, and Imi.F. While Imi cImi as a low TSR of 1,856 }21 and 22 nby the the Imi , it rof 1,536 to 1,550 at the end of the b. The @and in the DOS to the and . The are in the 7in all Imi "Hello! is IMI 1.0b. you see words," "you tthe IMI 1.0b is just" "for experiment.Please contact me immediately for cure." "Fu-Jen U. E.E. Wilbur Dam. .4.8" "WIMI 1.0b," "Wilbur," It is what Imi may do of Imi are: Imi.1538: , Imi.1538 is on the Imi . Its in TSR is 1,856 hooking ~22. It /and . but not rof 1,538 the at the $of the rof 1,538 to 1,552 at the end of the b. The in the /MAND" "Hello! is IMI 1.0b "OIMI" Imi.1656: , Imi.1656 is on the Imi . Its in TSR is 1,968 hooking ~22. It /and . but not rof 1,656 the at the $of the rof 1,656 to 1,670 at the end of the b. The in the /MAND" "Hello! is IMI 1.0b "OIMI 1.0b" Imi.1656 may re a, adding an 1,656 Imi.B: , Imi.B is on the Imi . Imi.B in addition to . rof 1,536 at the $of the rof 1,536 to 1,550 at the end of the b. The in the 7in all "Hello! is IMI 1.0b "OIMI 1.0b" Imi.C: , Imi.C is on the Imi.B . Imi.C /and . but not .. Its in TSR is 1,840 +, hooking }21 and 22. rof 1,536 at the $of the rof 1,536 to 1,550 at the end of the b. The in the 7in all /MAND" "Hello! is IMI 1.0b "OIMI 1.0b" Imi.D: on Imi.C, is a the exception its in TSR is 1,856 +. It :the same Imi.E: on Imi.D, the exception @and in the DOS Imi.F: on Imi.E, PZPAPN Immolation : Immolation I: May, acorrupted; to 64K; fail to function S: 663 7: ONE - 2.17+, 7.00+ The Immolation in May, . Its . Immolation is a the Immolation ytwo . larger in the Gor along the path. A hang may function the Immolation mthe 663 +of the host by the Immolation 7, permanently corrupting them. The @and in the DOS not be . One in the Immolation The Immolation on any Monday before 9:00 AM, at be re Y. On Fridays 12:00 noon, the the amount of to 64K Y. Finally, one all of the . in the Gand along the path t, the lockup the the next PZPAPN Incest : Incest Daddy.1117, Incest.1117 j; DOS Queensland, Australia S: 1,117 7: PRhAK - 2.71+, ]2.17+, 12.2 9503+, 2.0+, 7.00+, 2.71+ The Incest in Australia. Incest is a /and . cIncest at the top of the ), not moving ~12's and Bby 2,400 +, and nby the the Incest , it /and . copied. rof 1,117 be hidden . The at the end of the The @in the DOS not be however, the field . The in the "[Incest Daddy] by VLAD - Brisbane, OZ" "ANTI-VIR.DAT MSAV.CHK CHKLIST.CPS CHKLIST.MS" interfers the Microsoft Anti- and Central Anti- , deleting the the require in order to be able to detect PZPAPN Incom : Incom I: May, S: 648 7: PNC - , NAV, The Incom in May, W. Incom is wof . . It Incom is Y, the Incom yall , except in the by 648 at the end of the b. The @and the DOS to the and Incom ;one : "IN derives its Incom is on the unlike , it not damage any See: PZPAPN S: 822 - 837 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, The . It is gthe wis a Y, the yone . in the 822 - 837 at the end of the The @and in the DOS to the @and . The can be ein all \frequent ware: AReg-822: , AReg-822 is on the . It xone . in the G, plus the copy of ed to by the /SPEC en mental variable if not by 822 to 837 at the end of the b. The @and in the DOS to the and . The in the AReg-822 "*.com OMSPEC" ".com" "(C) AREG Soft" See: Hallo-496 PZPAPN Infinity : Infinity Canada S: 732 7: PNCK - , NAV, The Infinity . It is Canada. Infinity is a Infinity is Y, the Infinity search the Gfor the b. If an e, the Infinity 732 +. The at the end of the b. The @and in the DOS not be The can be in the Infinity "SKISM ReplicatoR" "FiRe is a LAMER... destroy InFiniTy!" "PATH=*. It is if Infinity PZPAPN : Inky Inky Ghost J: (Failure S: N/A 7: PRB - p2.10+ : DOS SYS K, M- The Inky, or Inky Ghost, and is one of three related gthe popular Pac-Man video game. Inky is a . It is "dropped" by the Blinky Ein its own entry. (the the Inky , the Inky be read into , and the receive the on the "Non- Replace and press any key ready..." replaces the an unwrite protected L, the Inky be transferred to the on the newly inserted M, and the again process continues until the powers off the ga clean L, or the The Inky s the M. The is not saved. ;the "[-Inky!-]" "[INKY Ghost] by PacMan and Associates Inc." "Non- "Replace and press any key ready..." The Inky can be removed Ms by performing the DOS SYS da clean (. On data, or non- 0 should be using a editor, or the aon the Mcopied to a new, and the Mreformatted. Note DOS 5+ s should use the /U option to ensure the Lis actually See: Blinky Pinky PZPAPN Interceptor : Interceptor 1014 Italy S: 1,014 7: PNCK - , NAV, The Interceptor , and is gMilan, Italy. Interceptor is on the , and like , is a wof . Interceptor is Y, Interceptor search the Gto locate the ctwo t. If an eas one of the a, it Interceptor by 1,014 +. Interceptor at the end of the . The can be enear the end of all "Interceptor - by Cracker Jack IVRL Milan, Italy" "*.com" It is if Interceptor s to be a research at the of its submission. See: PZPAPN Internal : Internal 1381 J: j; cascade of contents; S: 1,381 - 1,395 7: PNE - , NAV, The Internal, or 1381, . It is a generic . the Internal the attempt to yone bon the Pnot always rd in by between 1,381 and 1,395 The can be eat the end of ;the "INTERNAL ERROR 02CH. PLEASE CONTACT YOUR HARDWARE MANUFACTURER IMMEDIATELY ! DO NOT FORGET TO REPORT THE ERROR CODE !" The Internal days @. At , the produce a cascade of the contents of the Oto the bottom of the , and Othe . The remove gthe of 1381 are: 1381-B: (Internal-B) to the Internal is a minor Internal-1459: on the Internal adds 1,459 to 1,473 +to the . x. The in the 7, and not "INTERNAL ERROR 02EH. PLEASE CONTACT YOUR HARDWARE MANUFACTURER IMMEDIATELY ! DO NOT FORGET TO REPORT THE ERROR CODE !" in the same manner as the the cascading effect of the contents, , and vof the was executing. PZPAPN Intruder : Intruder I: March, S: 1,319 - 1,333 7: PNE - NAV, {3.0+ The Intruder source 7was published in "The Little Black Book of Computer es" by Ludwig in the . It is a wof . the Intruder yone . in the G. The rof 1,319 to 1,333 the Intruder to the end of the host . The @and in the DOS not be . The can be ein the "\*. X\*.*" the Intruder of Intruder are: Bell: on the Intruder ly, and has to avoid detection by familiar Like the , it addes 1,326 to 1,340 +to the x, and :the "\*. X\*.* \" Intruder-1326: A 1,326 of Intruder, xone . bin the rof 1,326 to 1,340 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder-1326 "\*. X\*.* \" Intruder-1326 corrupt instead of uthem. Intruder.1331: A 1,331 of Intruder, xone . bin the rof 1,331 to 1,345 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder.1331 "\*. X\*.* \" Intruder.1355: A 1,355 of Intruder, xone . bin the rof 1,355 to 1,369 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder.1355 "\*. X\*.* \" Intruder-1440: A 1,440 of Intruder, xone . bin the rof 1,440 to 1,456 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder-1440 "\*. X\*.* \" Intruder-1440 cthree or four in the [of the next in either a hang, or the playing of a warbling sound on the speaker accompanied by a hang. Intruder.1555: A 1,555 of Intruder, xone . bin the rof 1,555 to 1,567 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder.1555 "\*. X\*.* \" Intruder-1967: A 1,967 of Intruder, xone . bin the rof 1,967 to 1,981 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder-1967 "\*. X\*.* \" Intruder-1988: A 1,988 of Intruder, xone . bin the rof 1,988 to 2,002 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder-1988 "\*. X\*.* \" Intruder-1988 cfour . in the [of the next either a hang, or the playing of a melody on the speaker accompanied by a hang. Intruder-2336: A 2,336 of Intruder, xone . bin the rof 2,336 to 2,350 at the end of the The @and in the DOS not be . The can be in the 7in all Intruder-2336 Intruder-B: hequivalent to the has six differ. As kmay PZPAPN Invader : Invader Plastique (, Anticad 4 TSR; . j; BSC; music; track 1 of may be Taiwan/China S: 4,096 7: PRsAB - X, & ], NAV, : CleanUp, or The Invader in China. is a later of the Plastique-B or Plastique 5.21 . It is a wof . /and . a, but not .. It . In many reports of vs of s to mspread very rapidly. The the Invader Y, the as a low TSR. The TSR is 5,120 +and }08, 09, 13, and 21 , the ythe of the Qwhere the Y. The new is an MS-DOS 3.30 , and can be easily identified because the normal DOS ein the are now at the $of the instead of the end. , any . /or . the exception of tby the by 4,096 at the $of the b. . between 4,096 and 4,110 at the end of the ly, any non-write protected are exposed to the The Invader for 30 minutes. At , a melody may be played on the speaker. On play the melody, it continue until the is re (ed. If the presses CTL-ALT-DEL to re the , the ctrack of the an un Tcopy of the . The melody isn't played on all as it is configuration dependent. The melody was composed by Mozart. of Invader are: Chinese Invader: A of the Invader gChina. It :the "PC Tools" in the 7. It is what music, if any plays. : China Danube: A of the Invader addes 4,096 +to the . x, and 4,096 - 5,111 +to . at the end of the b. Like members of the Invader . It the in the "ACAD. "by Invader, Feng Chia U., Warning: Don't run ACAD. Mozart: Playing the same melody as the Invader Pnot continue to play the melody until the is re (ed, but continues for a few minutes. Sledge Hammer: to the Invader in Morgan Hill, California . Its major gthe it plays a different melody for 30 minutes. The tune is the theme song to the television Sledge Hammer. See: Plastique Plastique-B PZPAPN : In Man I I: May, Italy S: 2,926 7: PRhAKX - X, & MBR , NAV, 2.17+ : See The In in May, , and is Italy. In Man is a wof . /and . ., and xthe ). It is a fast are accessed for any reason. Y, the ythe ), and , as sby the DOS Bby 3,456 +, and ~12's not be moved. the In , it and . Yor accessed for any reason. rof 2,926 at the end of the b. The @and in the DOS not be The in the In 7, and are not "The In Man - Written in SALERNO (ITALY), "Dedicated to Ester:" "I don't know either how or , but I hold you in my arms again." It is what In of In Man are: Man II: in May, Man II is a later of the . Its is 3,504 +, hooking ~21. It adds 3,223 +to the . /and . x, and like the xthe ). The in the 7in all In Man II "The In Man II - Written in SALERNO (ITALY), "Dedicated to E.F.:" "I don't know either how or , but I hold you in my arms again." : Italy May, PZPAPN Invol : Invol X& .SYS write protect executing . gwrite- protected S: 1,409 - 1,421 X); 2,832 +(.SYS) 7: PRsE - X& .SYS The Invol . Its was in the . Invol is a wof . Xand .SYS The Invol tby the Invol may be a .SYS has a device entry in the CONFIG.SYS b, or an . (has completed. In either case, if the DOS Y, it indicate has 2,832 +less is expected. nby the mapping utilities most likely indicate 's config.sys has rd in by 2,832 Invol is , it attempt to ythe .SYS sin the 's CONFIG.SYS b. The .SYS rof 2,832 at the $of the b. The and in the DOS to the @and . The can be t.SYS "You mhelped spread is a gyour friendly neighborhood vservice. k you for your involuntary cooperation." "c:\config.sys EVICE C:\vansi.sys device=vansi.sys" tby the Invol it is . In the case of . rof 1,409 to 1,421 at the end of the b. The to the @and . The not be It is what Invol Invol-B: Iin the in May, , Invol-B is a smaller of the Invol Its encryption has to avoid detection. It adds 2,720 +to the .SYS x, and 1,348 to 1,365 +to . a. The last in the "c:\config.sys EVICE C:\vansi.sys vansi" May, PZPAPN Ionkin : Ionkin Ionkin-231 S: 231 7: PNCK - , NAV, 12.2 9503+, The Ionkin, or Ionkin-231, It is gthe . Ionkin-231 is a wof . Pn't smaller the Ionkin Y, the Ionkin yup to two . in the rof 231 at the end of the b. The @and in the DOS to the @and The in all Ionkin of Ionkin are: Ionkin-2372: , Ionkin-2372 is a 2,372 of the Ionkin . It may yone . larger 2,372 at the end of the b. The @and in the DOS to the @and . The in the "IONKIN. PZPAPN : Iper S: 1,062 7: PNCK - , NAV, {3.0+ The Iper . Its . Iper is a wof . the Iper Y, the Iper yone bmay be in the C: QDOS G, the C: root Q, or on the Q. Iper Pn't ymore five . ain any given Gon the M, and no more three . rof 1,062 at the end of the b. The @and in the DOS not be . Two are in the "IPER" The "IPER" s very close to the end of the It is what Iper PZPAPN Iranian : Iranian S: 1,320 7: PRhAK - , NAV, {3.0+ The Iranian . Its . Iranian is a of . /and . cIranian Y, the Iranian at the top of &the ), hooking }09 and 21. , as sby the DOS Bby 1,328 12's not be moved. the Iranian , it rof 1,320 at the end of the b. The @and in the DOS not be The in the Iranian 7and are thus not "IRANIAN VIRUS W.by ABBAS KUHKAN ALIABADI" ANTI VIRUS Writen By ABBAS KUKAN" It is what Iranian PZPAPN Iraqui Warrior : Iraqui Warrior Iraqui, -Iraqui j; closely spaced beeps speaker; (failures S: 777 7: PNCK - , NAV, The Iraqui Warrior in the is a non- wof . .. It is on the the Iraqui Warrior the yone of the cfour . the Qand rof 777 at the end of the The can be a, the two ring near the $of the , and the last very near the end of the "I come to you gThe Ayatollah!" "(c) "An Iraqui Warrior is in your computer..." None of Nby the the Iraqui Warrior may occasionally \the speaker issuing a series of closely spaced beeps s, the hang and mto be re (ed. The beeps continue until the re (ing Mwhere .has in a " V, Cannot start /MAND, exiting" The Iraqui Warrior Pnot to do else See: PZPAPN Iron Umbrella : Iron Umbrella Germany S: 359 7: PNCK - , NAV 3.05, 12.2 9503+, 1.05+, {3.0+ The Iron Umbrella , and gGermany. Iron Umbrella is a wof . the Iron Umbrella yone . in the 359 at the end of the b. The @and in the DOS . The in the 7in all Iron Umbrella "G+ALLERBMU NORI+" "(C) by SMAUG in M NCHEN, DEUTSCHLAND!" ".. *.com" The , read backwards, :the PZPAPN : It Coahuila Mexico S: 454 7: PNCK - , NAV, {3.0+ The It in Mexico in is a wof . the It yone in the it has completed uall . in the G, it start on the path. rof 454 the end of the . The @and in the DOS not be . The can be in the 7in all It "(C) ITV85020203 PATH=*. Pn't to do of It are: It-457: gMexico in , It-457 is a 457 of the It hvery to the , the major difference It-457 adds 457 +to the . x. The same as the : Mexico Viva Mexico: Iin Morelia City, Mexico, in , Viva Mexico is a 449 of the It xone . bin the rof 449 the at the end of the b. The @and in the DOS to be , but the seconds field #set to "60". The the 7in all Viva Mexico "ITV85020203 "Viva M xico!" "PATH=*. Viva Mexico 16th, Mexico's Independence Day. At the Non the monitor and the Viva M xico!" : Mexico PZPAPN Italian 803 : Italian 803 Italian b, V817, Sept 18 I: March, Italy S: 803 7: PNAK - , NAV, The Italian 803 in March, wof . /and . a. It Italian 803 is Y, the look for an bin the If one is e, it t. If an Pnot exist in the G, the look for an bin the G. If an e, it Italian 803 of 803 to 817 at the end of the Pnot alter the @and the The Italian 803 may re already . The re copied, and Y. Re of Italian 803 in an the Italian 803 Pnot do of Italian 803 are: Italian 803-B: to Italian 803, differs by PZPAPN Italian Boy : Italian Boy 578, Ital Boy <; Italian flag Italy S: 578 7: PRhCK - , NAV, {3.0+ The Italian Boy , and is Italy. Italian Boy is a wof . .. It is a destructive cItalian Boy Y, the Italian Boy at the top of &the ), not moving ~12's , as sby the DOS Bby 896 the Italian Boy , it rof 578 at the end of the b. The @and in the DOS not be . The are in the 7in all Italian Boy "ITALY IS THE BEST COUNTRY IN THE WORLD" "Fucks to Italian Killers" The Italian Boy 3rd of any year. At , the an Italian flag on the O, along , and may trash the PZPAPN Itavir : Itavir 3880 Endangered I: March, Italy S: 3,880 7: PNE - ], NAV, The Itavir in March by a group of students at the Milan Politechnic in Milan, Italy. The Itavir generic . by 3,880 'having rd in usually where on the M. The ccharacter of is an unprin character. The pure 7and is used for appending to The Itavir period #running for more 24 hours. , the is corrupted, rendering the (able. The Os a in Italian and writes ANSI values through 255 to all I/O ports, thus confusing any attached peripheral devices. monitors may show a flickering effect s, while VGA monitors may actually "hiss". PZPAPN : Itti Itti-A (failures; " XC failure" S: 161 7: ONCK - 1, NAV, The Itti . Its Itti is a Itti is Y, the Itti yone . in the Gby over- writing the host c161 be no 5to the unless it was smaller 161 +. In the case of . asmaller !161 be no 5to the @and in the DOS the Itti has completed b, it the to the DOS prompt: XC failure" The , plus the /", can be the c161 the Itti (failures if the copy of in the root Gof the (able of the if the Itti cannot find an of Itti are: Itti-B: A 99 of Itti, Othe " XC failure" , and the is not in the @and in the DOS to the @and PZPAPN 00y'D PTy' : IVP Bubbles S: 684 7: PNA - The IVP generation along the Bubbles was generated by the IVP is not a , but a generator of /and/or . a, as well as possibly .. While the was intended to able to generate function produce working 7. The IVP can produce a random number of NOP instructions placed in two areas of the decryption routine in an attempt to elude simple search ning techniques. The NOPs aren't a real problem, and it is very simple to generate a generic detection es created IVP. The &is for the Bubbles the IVP . It may not match copies of the Bubbles are regenerated The Bubbles is a of . /and . , but not .. It of the . /and . in the Y. It to move up one Gin the Gstructure. the Bubbles 684 at the end of the b. The @and in the DOS Gstructure not be . The the "Bubbles "Admiral Bailey" "[IVP]" "*.com *.exe .." The cthree of Nby the Y. Bubbles Pn't do Oits (es) created IVP are: Crystal: , Crystal is a 699 s to #created the IVP Crystal is a wof . and . .. It xone to many . /and . in the rof 699 at the end of the b. The @and in the DOS not be . The Othe Y, however it usually jumbled 6accompanied by beeping on most "CrystalSoso ManLove is for suckers" "[IVP]" The in the 7, as is the "*.com *.exe .." : Oklahoma, USA IVP Example 1: , IVP Example 1 is a 351 was created the IVP . It is a wof . , but not .. It xall of the . the rof 351 at the end of the The @and in the DOS not be . The Os the "Test Tim" beeping on the speaker. The in the 7in all "Test" "Tim" "[IVP]" "*.com .." IVP Example 2: , IVP Example 2 is a 544 was created the IVP . It is a wof . . It xall of the . in the rof 544 the at the end of the b. The @and in the DOS not be . The Os the "Test Tim [IVP". The in the 7in all "Test" "Tim" "*.exe .." Mfull!" IVP.Angry Samoans: , IVP.Angry Samoans is a 668 was created the IVP . It is wof . a. It xall of the . in the rof 668 at the end of the b. The in the DOS not be The in the "tHE aNGrY SaMoANs !!!" "RiverBoTToM" "*.exe .." IVP. Showers: , IVP. Showers is a 1,676 was created the IVP . It is wof . /and . .. It xall of the . in the Y. If all of the . were t, it proceed to yall of the . the rof 1,676 the end of the b. The @and in the DOS not be . The it usually s in the . The in the "Virii Production by a MoM Personell" -Showers" Appends *.Com *.Exe" "Created: 03-08- "Effect: Destroys data" Enlarges aby 1.6k" IVP.Taselhoff: , IVP.Taselhoff is a 375 was created the IVP . It is a wof . .. It xall of the . in the of 375 at the end of the b. The @and in the DOS not be . The beeping on the speaker, it usually s in the . The in the 7in all "Eddie has ed on tour ( "Author : Taselhoff" "Fuck you arsehole c:\ 8.con *.com" create a /MAND.CON" in the C: Qroot be 21 and ;the "c:\ 8.con *.com" IVP-Ozzy: , IVP-Ozzy is a 426 s to #created the IVP IVP-Ozzy is a wof . .. It xall of the . in the of 426 at the end of the b. The @and in the DOS not be . The in the IVP-Ozzy "*^ OZZY ^*^ -- Yeew duh-meE iTs ReeEl!! [kR]*.com" IVP.Walky: , IVP.Walky is a 324 s to #created the IVP IVP.Walky is a wof . , but not .. It xall of the . in the of 324 at the end of the b. The @and in the DOS not be . The in the 7in all "Walky Replicom Edition" "Italian Labs" "[IVLK]" "*.com" in the cthree Nas a the : Italy IVP-S2DD: in May, , IVP-S2DD is a 763 s to #created the IVP IVP-S2DD is a wof . and . .. It xall of the . /and . in the rof 763 at the end of the b. The @and in the DOS not be . The IVP-S2DD Othe , along three beeps on the speaker, "Enjoy The Most Advanced To Man "[IVP]" , the trash the cfew cylinders of the M. The the 7, as are the "Slut2Death Dealer" "*.com *.exe .." May IVP-Tuesday: , IVP-Tuesday is an 822 s to #created the IVP . IVP-Tuesday is a wof . /and . .. It xall of the . /and . in the rof 822 at the end of the The @and in the DOS not be . The however it usually Ojumbled 6on most "GOOD BYE RUBY TUESDAY, WHO COULD HANG A FAX ON YOU?" "[IVP]" The in the 7, as are the "Tuesday Jesus" "*JESUS* MAKER OF FINE VIRII MEMBER OF JDIV (JESUS DIED IN VAIN)" "*.com *.exe .." Kubla Kahn: , Kubla Kahn is a 644 was created the IVP . It is a wof . /and . but not .. It xall of the . /and . in the rof 644 at the end of the b. The @and in the DOS not be . The , accompanied by beeping on the speaker, to the DOS prompt, or receive the b. The in the 7in all "*.com *.exe .." SiloDeath: , SiloDeath is a 734 s to #created the IVP SiloDeath is a wof . and . .. It xseveral /and . in the rof 734 at the end of the b. The @and in the DOS not be . The SiloDeath attempt to Othe followed by a hang, "Legalize Today-Get High Tonight" "[IVP]" , the trash the cfew cylinders of the 'the , the can be in the SiloDeath "SiloDeath Dealer" "*.com *.exe .." Sleeper: , Sleeper is a 1,017 s to #created the IVP Sleeper is a wof . and . .. It xall of the . /and . in the rof 1,017 at the end of the b. The in the DOS not be The in the "Sleeper" "Dark Lord" "I Just Fucked Your QOver!!" "Yet An Victim Of The Sleeper!!" "It is Amazing What a Student Of The >Can Do!!" "Made In The City Of Sofia. An Fine DOOM Product!!!" "Amy Sucks My Dick Twice A Day!!" "Erv Is a Pimp!" "Stay Tuned Untill The Next Release By DOOM!!" "Bye Bye!!" "[DOOM]" "*.com *.exe .." Swank: , Swank is a 789 s to #created the IVP Swank is a wof . .. It xall of the /and . in the rof 789 at the end of the b. The @and in the DOS not be . The Swank attempt to Othe followed by a hang, "Slut3Death Dealer" "Enjoy The Most Advanced To Man "[IVP]" The in the 7, as is the "*.com *.exe .." Yeah: , Yeah is a 663 s to #created the IVP . Yeah is wof . /and . .. It xall of the . and . in the rof 663 at the end of the b. The @and in the DOS not be . The Yeah Othe "POOP" "YEAH RIGHT" "[IVP]" The in the 7, as is the "*.com *.exe .." Yeah may not function PZPAPN : Jack Jack.416 J: S: 416 7: PNAK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, o2.10+, 2.0+, 2.71+, 2.17+ The Jack or Jack.416 . It . Jack is a wof . /and . the Jack yall of the . /or . in the 416 at the end of the b. The @and in the DOS . No in the It is what the Jack may do PZPAPN James Bond : James Bond J: May, j; DOS -lost clusters; ?seconds set to 62 The S: 356 7: PRaCK - , NAV 3.05, 12.2 9503+, {3.0+, 1.05 9503+ The James Bond in May, , and is . James Bond is a cJames Bond Y, the James Bond in a "hole" in al , hooking ~21. , as sby the DOS not be , James Bond for any reason. rof 356 the at the end of the b. The be hidden by the a, and a. The @and in the DOS to be , but the seconds field #set to "62". The s very near to the end of all "James Bond is Alive!" the James Bond find the DOS report a very high number of lost clusters it is PZPAPN Japanese Christmas : Japanese Christmas Christmas In Japan, Japan J: , 1989 Japan S: 600 7: PNCK - ], NAV, The Japanese Christmas creported in Japan in , 1989. It was later in Japan in late . As of , it was reported to be widespread in Japan. is a 600 generic wof . a. It the Japanese Christmas Y, the yzero to one bin the G. If a t, it by 600 at the end of the A25th, if an Y, the Nin the center of the "A merry christmas to you" The flash and be underlined for the it is N. If left alone, the go away a little while and the Znormally, but the Pnot to do any malicious damage. of Japanese Christmas are: Japanese-709: , Japanese-709 or DAPDM-13 is a 709 of the Japanese Christmas . It xone . rof 709 at the end of the b. The @and not be . Two can be the "*.*" "PATH=*. : Japan Japanese Christmas-B: to the Japanese Christmas-B is a minor modifications. : Japan Japanese Christmas-C: to the Japanese Christmas-C is a minor modifications. : Japan Japanese Christmas-D: to the Japanese Christmas-D is a minor modifications. : Japan Japanese Cookie: one . in the ever an rof 653 at the end of the b. The @and in the DOS . The in the is "*.com". : Japan PZPAPN Jasmine : Jasmine J: S: 269 7: ONE - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 7.00+, o2.10+, 2.0+, 2.71+, 2.17+ The Jasmine . Its . Jasmine is a permanently corrupts the . the Jasmine ythe cthree . in the G, and Othe to the DOS prompt: "The Jasmine is loose, better protect your computer.Beware! now it works! [JD]" the Jasmine mthe c269 the Jasmine 7, thus permanently corrupting the host . The @and in the DOS to the @and . In addition to the as the , the can be in the 7in all "*.exe" "Admiral Bailey [YAM]" the Jasmine cannot be dis should be Dd and replaced copies. PZPAPN Jason : Jason J: Nbefore expected output S: 609 7: PNC - NAV 3.05 9503+, 2.17+ The Jason . Its . Jason is a wof . , but not the Jason yone . in the the Jason rof 609 at the end of the b. The @and in the DOS not be . The in the Jason "Jason "You've tby the JASON . . ." a test "So Dont Worry. . . .MAYB "*.com" ly, the "AD" can be estarting in the fourth ,of all the Jason Y, followed by the Oof the expected output. PZPAPN : JD JD-158, JD-276, JD-356, JD-392 S: 158 - 392 +(depending on 7: PRaCK - p, NAV, The JD ^was . Its ^is a group of four closely related es, the larger of hide the The entry &describes ^in general, specific sunder a JD Y, the in a "hole" in al . As such, be no as well as possibly }13 or 1E, depending on the present. a JD , it Y. If Y, it t. The at the end of the of 158 to 392 The JD es don't do member(s) of the JD es are: JD-158: The smallest member of the JD 158 +to the . x. The @and in the DOS . It hooks ~13 in addition to ~21 in JD-276: member of the JD ^adds 276 +to the . be no 5to the @and in the DOS hooks ~21 in JD-356: JD-356 adds 356 +to the . however the not be if the . It hooks ~1E in addition ~21. be no 5to the @and in the DOS JD-392: in behavior to JD-356, adds 392 +to the . PZPAPN : Jeff S: 814 7: PNCK - , NAV, 12.2 9503+, The Jeff in the is a wof . the Jeff Y, the attempt to yone . bon the C: Q, starting in the root 814 to 828 at the end of the The Jeff gthe Tin the "Jeff is visiting your While Jeff is visiting your M, it occasionally write of random contents to the M. If are written to the , or FAT, the contents of the Mmay "inaccessible or produce unexpected PZPAPN Jericho : Jericho >.Jericho Calgary, Alberta, Canada S: 1,365 - 1,379 7: PRhAK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Jericho , and gthe Calgary area of Canada. Jericho is a wof . /and . cJericho Y, the Jericho at the top of &the ), not moving ~12's , as the DOS Bby 2,832 }21 and 27 nby Jericho in the Jericho , it for any reason. rof 1,365 +while . by 1,365 to 1,379 +. In both cases, the at the end of the b. The @and in the DOS not be . The in the 7in all Jericho "JERICHO by Eurystheus<FoG>" "Calgary" It is what Jericho of Jericho are: >.Jericho.1000: Probably an earlier of the Jericho is 2,112 +, hooking ~21. It or copied. of 1,000 at the end of the b. The @and in the DOS not be . The in the 7in all "JERICHO Eurystheus Calgary AB" : Canada See: PZPAPN : Jerk Talentless Jerk, SuperHacker, 1077, Jerk-B I: March, ; unexpected access to C: S: 1,077 7: PNAK - , NAV, The Jerk, Talentless Jerk, or SuperHacker March, . Its is a wof . /and . , and it the Jerk search the Gstructure of the C: Qto find a y. If the Ythe L, an unexpected access to the has selected a . /or . y, it alter the cnine +of the candi b, and append the to the end of the newly . The Non the monitor, Pnot always "Craig Murphy calls himself SUPERHACKER but he's just a talentless jerk!" cannot be seen as it is in the the Jerk rof 1,077 +. The "MURPHY" estarting at the fourth ,of the b. The can be XBad The Jerk Pnot do of Jerk include: Jerk-B: hequivalent to Jerk, differs by three PZPAPN PT99 PLO, Israeli, Friday 13th, Russian, 1813( /), 1808( Arab Star, Black Box, Black Window, Hebrew University , 1987 Israel TSR; . slowdown; on Friday 13th; "black window" Italy S: 1,808 - 1,822 7: PRsA - Generic , NAV, : CleanUp, , NAV, or The at Hebrew University in Israel in the Fall of 1987. As of , it is mnow ated in Italy. is a generic .SYS, .BIN, .PIF, and overlay amay be re tby the to a bug in the 7. The many s, and many on its 7. The description &is for a standard , or members of ^, are The Y, the as a low TSR of 1,792 }08 and 21 nby the , it Y. . by 1,813 at the $of the b. . by 1,808 to 1,822 at the end of the b. Later, tby the are again add an 1,808 +to the in the DOS ~8, and 1/2 hour [of the slow down by a factor of 10. ma "black window" or "black box" on the lower left side of the scroll up the as the scrolls. The Friday the 13ths. At , it Dany The identifier for most strains is "sUMsDos", however, identifier may not be ein the newer The t to on the Suriv 3.00 the Suriv 3.00 members(s) of the ^are: A-204: the sUMsDos 3to *A-204*, and a couple of instructions 3in order to avoid detection. slow down the for 30 minutes, as well as having a black box : Delft, The Anarkia: r delay set to slow down the to a greater degree, effect Pn't show until a much longer has elapsed. No Black Box is ever N. The sUMsDos id- 3to ANARKIA. Lastly, the @has 3to Tuesday the 13th, instead of Friday the 13th. : Spain Anarkia-B: to Anarkia, the exception now on any 12th instead of on Tuesday the 13ths. Antiviru: B, the Antiviru differs in :two ." and "ANTIVIRU". Like , it Oa "black box" accompanied by a slowdown 30 minutes becoming Friday the 13ths, any Apocalypse: The Apocalypse Win May, . It ated in Italy. Y. . by 1,813 +. . by 1,808 to 1,822 v, and 1,808 +on later re vs. The MsDos vmarker in the to "C.J**". can be ein Apocalypse are: "Apocalypse!!!" "**C.J**" The last is what has replaced the sUMsDos in the . Apocalypse mthe characteristic "black box" on the lower left hand side of the has for 30 minutes. It Pnot, however, on Friday the 13ths. : Italy May, Bogota: The Bogota Iin Bogota, Columbia in May, . Its low TSR is 2,048+ hooking }16 and 21. It adds 1,813 +to the . t. . by 1,808 to 1,822 v, and 1,808 v. Bogota truncate . to zero Captain Trips: The Captain Trips in March, , and is gthe . Its comes "Captain Trips X." in the 7. Unlike most Oa black window for 30 minutes, nor Pit slow down the . On Friday the 13th, it Pnot . The "MsDos" Pnot by 1,813 +. . by 1,808 to 1,822 the b, and by 1,808 subsequent March, Captain Trips 2: Captain Trips 2 was It is a of the Captain Trips to avoid detection. The major difference is vs of . rof 1,813 Czech: The Czech the Czech |s a 1,984 ,TSR in }08, 21, and F8 it is , it Y. . 1,735 at the of the b. . by 1,735 to 1,749 at the end of the Pnot re the Czech for 30 minutes, it Oa reverse video box in the upper left hand corner of the :the "Ha!Ha!". It Pnot on Friday The 13ths. may detect as the Sunday Dragon: The Dragon to the . It "BDH B T". The MsDos identifier has 3to a hex character . It on Friday The 13ths. Get Password 1: Get Password 1 is a Iin the chalf of 's TSR is 1,840 . Get Password 1 is a Novell network specific , it won't unless the Novell Netware Qrs are present in . The intended to capture the logon logs onto the network, however Pnot function and so is no threat. Get Password 1 is 1,914 25TH: B, the major difference activate on 25TH, at Dany 25TH Pn't re for 30 minutes, it mthe "black box" effect 9to many . The "sUMsDos" #replaced hex 00 25TH-B: hequivalent to the 25TH, slight 7modifications. to the Pnot re : Israel , 1988. out the r delay to slow down the processor. destroy both copies of the FAT on any Friday the 13th has the sUMsDos 3to 00h for 30 minutes, the slow down by 30% and the 9"black window" on the lower left side of the . Like , it amultiple Pnot carry an a, it s for all intents to be "defanged". : Washington, DC, D but the is in -Polish: on the slightly so the "black box" effect Pnot : Poland -PLO: on the Yduring the secondd half of the year. It during the half of the year. for 30 minutes, a slowdown , but the characteristic black box . The "sUMsDos" in the "sU?sDos". by 1,813 by 1,808 - 1,822 v, and 1,808 .2389: on the .2389 is a 2,389 . Its TSR is 2,640 and hooks }1C and 21. It adds 2,389 +to the at the $of the b. It adds 2,389 to 2,404 +to . at the end of the are re tby the , adding an 2,389 v. The are in the "AYTUBA=19722191!!" .2389 may find ~ed while Y, and a scrolling on the gright to left in a non-english language. "NICE FROM FAR FAR FROM NICE" is the english the scrolling .Suselfo: has the sUMsDos 3to "sUSelFo", as well as having to avoid detection by utilities. : Spain March, 17TH: on the 17TH is a 1,530 . Its TSR is 1,792 +, hooking ~21. . by 1,535 while . by 1,530 to 1,544 , the at the of the , the at the end of the b. . are not re is between 17TH and A31st of any year, at Dany JVT1: to the , the JVT1 major differences are 30 minutes, a vertical black box consisting of two in the very upper left hand corner of the O. An difference is instead of deleting on Friday the 13ths, it Ds them on Tuesday the 1st. The "sUMsDos" in the 3to "sUMsDns". Like , it JVT1-B: hequivalent to JVT1, slightly modified Mendoza: on the a. It is missing the black box effect. Mendoza in the second half of the year ( A), at any day ma 10% chance of having all : Argentina Messina: to the , Messina's major difference is the "sUMsDos" 3to "Messina". by 1,813 by 1,808 to 1,822 v, and 1,808 Nemesis: to the major difference is in the area of in the . The characteristic "sUMsDos" "UM Do ". Two can be a: "NEMESIS. /" and "NOKEY". New : The New is a was uploaded to several BBSes in The 14, 1989. It was modified to be undetec utilities were widely distributed at : The , 1989. Oscar: The Oscar equivalent to the . It :three : "sUMsDos", " ., and "OSCAR NU". be re On Friday the 13ths, it Payday: The Payday in The Jan Terpstra in , 1989. A major behavioral Payday activate on all Fridays except Friday the 13th. Upon , it Ds all : The , 1989. Park ESS: in Happy Camp, California, is very by 1,813 +, and by 1,808 to 1,822 v, and 1,808 on later subsequent vs. .. The major difference gthe "normal" "sUMsDos" #replaced. The "PARK ESS" can ein the in all slows down the 20 percent and a "black window" for 30 minutes. Phenome: The Phenome B was at the same as the Apocalypse in behavior to Apocalypse, the exception Y. The "MsDos" "PHENOME. "*-*-*-*" Phenome becoming on Saturdays. On Saturdays, Z, but simply to the DOS prompt. : Italy May, Puerto: in Puerto Rico, very to the Mendoza , the sUMsDos id- amay be tmultiple : Puerto Rico Skism: to the Skism-1 , the Skism 's major difference is the "SKISM-1" 3to " SKISM ". h, it is equivalent to Skism-1. : Canada Skism-1: in New York State, to many s except regards to and what it Pupon . Rather activate on Friday the 13ths and in the years and later on any Friday the 15th of the month. On truncates any is attempted to be Yto zero +. . upon 1,808 rby 1,808 to 1,822 be re tby the . The "sUMsDos" in the is now "SKISM-1". Like produces a "black window" 30 minutes becoming , and slows down the : Canada Soy Un: on the , Soy Un is a 2,064 gPeru. Its TSR is 2,336 and hooks ~21. Soy Un adds 2,069 +to the . at the $of the b. It adds 2,064 to 2,078 +to . at the end of the are not re t. Most of the usually not be the as it attempt to hide all by 1 to 16 +of the r. The in the "HACK1" "CHKLIST.CPS" "Soy un y mi nombre es - THE HACKER - Lima - Per : Peru Spanish JB: ( , it re a. The ais always 1,808 +. On . a, the may be either 1,808 or 1,813, valways adding 1,808 +to the already b. No "Black Box" The characteristic "sUMsDos" id- Pnot in the s identified as : Spain Sub-Zero: , Sub-Zero is a modified Pnot Othe characteristic "black box" for 30 minutes, nor slowdown . Sub-Zero : "LORD SKISM", "Sub-Zero NYHC", and "ED EL". : Canada Sub-Zero B: in May, , Sub-Zero B is a slightly modified of the Sub-Zero . On the last Friday of any month truncate Y, and attempt to format the minutes becoming May, Sub-Zero C: , Sub-Zero C is a modified of the Sub-Zero . It has to avoid detection by utilities. Swiss 1813: gSwitzerland, Pnot exhibit the "black window" for 30 minutes, nor Pit slow down the . It Pnot on Friday the 13th, or any Friday. The "sUMsDos" 3to binary zeros. : Switzerland Triple: , Triple is a to avoid detection by ning h, it is to the . One can be ein the /MAND". Ucender: in March, to avoid detection by The "sUMsDos" 3to "UCNDER". The characteristic "black box" has for 30 minutes, and a slow- down . Ucender a, like the on Friday The 13ths, at : Argentina March, See: 1605 China Discom Freddy Frere Jacques Fu Manchu Groen Links Growing Block 11-30 1663 Mule RAM Slow Sunday Sunday-2 Suriv 3.00 Westwood Barcelona Poison Moctezumas Revenge 1244 Timor Totoro PZPAPN 11-30 11-30 1130 j; TSR; S: 2,000 - 2,014 7: PRsA - NAV, The 11-30, or 1130, Its 11-30 is a of . X, and overlay a. It , as the implies, is a of the it is %documented separately due to its different behaviour. The 11-30 is the 11-30 low TSR of 2,288 +. On 30th, the hook }20, 21, and 27. On 30th, it hook 11-30 is , it rof 2,000 at the $of the rof 2,000 to 2,014 at the end of the b. Unlike several not re a. All mhad @and in the DOS to the @and . The can be in the 7of all 11-30 11-30 it has 30th of any year. It intermittently flash a reverse video block in the upper right hand corner of the says "1130" while the is at a DOS prompt. See: PZPAPN j; TSR S: 1,663 7: PRsAK - The 1663 . Its 1663 is a wof . /and . The 1663 Y, the Jersalem 1663 as a low TSR of 2,432 }13 and 21 , Jersalem 1663 Y. Both . /and . by 1,663 at the end of the b. The cannot recognize a previous von a b. Both . /and . t, adding 1,663 v. The @and in the DOS not be . No in the It is what 1663 See: PZPAPN Research TSR; . New Zealand S: 1,767 - 1,779 7: PRsAK - The 1767 Henry Wolfe of New Zealand whom he has had on a Lfor over one year. The source of the 1767 is a of the characteristic 4in its behavior. The 1767 is as a low TSR of 2,048 +, hooking }08 and 21. 1767 is , it /and . Y. If Y, it by 1,767 at the $of the b. The exception %at the end of the by 1,767 to 1,779 the at the end of the b. . not be re related In both cases, be no 5to the @and in the DOS G. Two can be in the 7, the %the vmarker for "** INFECTED BY FRIDAY 13th **" 1767 Pnot exhibit the typical "black box" for 30 minutes. A slowdown Pnot See: PZPAPN -Haifa -Haifa j; TSR Israel S: 1,960 - 2,178 7: PRsA - {3.0+, The -Haifa , and is Israel. -Haifa is a wof . , but not -Haifa as a low TSR of 2,048 +, hooking }08 and 21. -Haifa /and . rof 2,178 at the $of the rof 1,960 to 1,974 the end of the b. In both cases, the @and in the DOS not be . The in the -Haifa "a:\at_286" "04-764768" The :the Hebrew 6for the word "Haifa". The " in all It is what -Haifa See: Haifa PZPAPN Joanna : Joanna England S: 986 7: PRhCK - p, NAV, 12.2 9503+, {3.0+ The Joanna Iin Lancs, England, in . Joanna is a wof . cJoanna Y, the Joanna at the top of &the , as sby the DOS Bby 3,008 nby the , the Joanna .if it was not the Joanna , it for any reason. rof 986 at the end of the b. The and in the DOS not be Hidden a, however, mhad the hidden attribute removed. The in the Joanna and are not is Dedicated To the Girl I Love, Joanna Dicks." "Made in England by Apache Warrior, ARCV Pres." "Jo Ver. 1.01 (c) Apache Warrior 92" "I Love You Joanna, Apache.." "[JO] By Apache Warrior, ARCV Pres." of the lines of by the while it is in of Joanna are: Joanna 1.11: gManchester, England in Joanna 1.11 is a 916 of the Joanna Its , and use of }, is the same as the . Joanna 1.11 rof 916 the end of the be no 5to the @and in the DOS The in the "Looking Good Slimline Joanna." "Made in England by Apache Warrior, ARCV Pres." "Jo Ver. 1.11 (c) Apache Warrior 92." "I Love You Joanna, Apache..." "[JO] By Apache Warrior, ARCV Pres." : Manchester, England Joanna-911: A 911 of Joanna, is very to Joanna 1.11. Its is 3,018 +, hooking ~21. , Joanna-911 rof 911 at the end of the b. The @and in the DOS not be . The in the Joanna-911 "Looking Good Slimline Joanna" "Made in England by Apache Warrior, ARCV Pres." "Jo Ver. 1.11 (c) Apache Warrior 92" "I Love You Joanna, Apache." "[JO]" "Apache Warrior, ARCV Pres" Joanna-911 :destructive Gand : England Joanna-911B: on the Joanna-911 is 3,008 +, hooking Like the Joanna-911 , it It is unable to distinquish , so be repeatedly vof the badds 911 the at the end of the hide the vof the b, but not vs. The seconds field in the ?in the DOS be set to 54 on all a. The same in the Joanna-911 , the DOS , plus .BAT and data a, but not . Xor .SYS : England March, gEngland in , Jo Xis a 916 of Joanna a. Its , and use of }, is the same as the . Jo are for any reason. rof 916 be hidden . The Jo at the end of the b. The @and in the DOS not be . The in the "Jo Exersiser . Apache Warrior, ARCV Pres. [JO The DOS , as well as data the Jo : England PZPAPN : JoJo I: May, k; graphic Israel S: 1,701 7: PRaC - ], NAV, ], or The JoJo Iin Israel in May, . The comes in the "Welcome to the JOJO One in the , indicating it was written in is: "Fuck the (c) - Both in the 7are never the JoJo Yon a , the . The method used is to alter the 8interpreter in , expanding its . As an example, on my test , the 8interpreter in rd in g3,536 +to 5,504 +. One block of 48 reserved in . The be a net Cof 2,048 The JoJo ~13 is in use by any . Instead the clear the , and the be hung. If the performs a warm re (CTRL-ALT-DEL), the remain in is able to n, any . tby the by 1,701 JoJo is on the Cascade Pnot make use of the encryption mechanism in Cascade. JoJo produces a Oof multicolored diamonds on graphic JoJo is of JoJo are: JoJo-B: A minor of the JoJo , JoJo-B's encryption has #slightly modified. JoJo-C: , JoJo-C is an minor of the to avoid %detected by a particular . It is not believed to be in the public domain. See: Cascade Cascade-B JoJo 2 PZPAPN JoJo 2 : JoJo 2 ; "Not enough k; cursor position off 1 character S: 1,703 7: PRaCK - , NAV, The JoJo 2 , by David Grant of the on the JoJo as well as ;ing part of the decryption for the Cascade . It is a wof . The the JoJo 2 the by altering the 8interpreter in . The 8interpreter in rof 1,904 is an is reserved by the as well, to JoJo. , it are Y. If Yfor any reason, it rof 1,703 at the end of the can be the JoJo 2 "The JOJO strikes again. x zzz" "Fuck the - (c)" "141$FLu" the JoJo 2 Othe "Fuck the - (c)" , or a garbage may fail due to "Not enough U. Lastly, for awhile, the may notice cursor on the monitor is off by one position to the right gwhere it should be. JoJo 2 may be detected by utilities as an of JoJo and Cascade/1701/1704. See: JoJo PZPAPN Joker : Joker Jocker Extinct A, 1989 Xand .DBF Poland S: ??? 7: PNE - , NAV, 2.1.7+, The Joker in Poland in A, 1989. is a generic . w, and is a poor replicator (i.e., it Pnot quickly the Joker Obogus and comments. and comments can be ein the aat the $of the Here are of the and comments may be "Incorrect DOS "Invalid Volume ID Format failure" "Please put a new Minto "End of input "END OF WORKTIME. TURN SYSTEM OFF!" "Divide Overflow" "Water detect in Co-processor" "I am hungry! Insert HAMBURGER into "NO SMOKING, PLEASE!" "Don't beat me !!" "Don't drink and cup of cofee ?" " OH, YES!" Mhead has #destroyed. Can you borow me your one?" "Missing light magenta ribbon in printer!" "In case mistake, call GHOST BUSTERS" "Insert tractor toilet paper into printer." alter .DBF a, adding to them. The sample in the author of possession on an 8088 entry has #included since the sample may #damaged before its receipt by the author. At best, is a serious bug in the replication portion prevents it greplicating. PZPAPN Joker 2 : Joker 2 Joker-01 I: May, j; TSR; S: 29,233 7: PRsA - , NAV, The Joker 2, or Joker-01, in May, , by the PCVRF. Its is a wof . /and . , and The Joker 2 is Y, Joker 2 as a low TSR of 29, 568 nby the include 09, 1C, and 21. becoming , Joker 2 /and . awhose was less larger 9K are never always by 29,233 by 29,233 to 29,372 +. In both cases the at the end of the The "JOKER-01" can be ein all Joker 2 may \the %cleared, followed by a hang ring. happens, a few spurious 6may on the well. If ANSI.SYS is loaded before Joker 2 effect be produced. Joker 2 may be an incomplete is a large area of 00h in the 7, implying thing else may later. PZPAPN Joker-1602 : Joker-1602 I: March, s to be empty; or jumbled beeping; S: 1,602 7: PRaCK - {3.0+ The Joker-1602 in March, . Its . Joker-1602 is a wof . cJoker-1602 , hooking }25, B4, B6, B8, BA, and BB. , as sby the DOS not be , Joker-1602 are 1,602 at the end of the b. The @and in the DOS to the @and . The in the Joker-1602 "I'm hungry! Insert PIZZA & BEER into QA: and" "Strike any key ready..." "Abort, Retry, Ignore, Fail?" "Fail on INT 24" "Impotence Vreading 's dick" too big to fit in "Cannot load /MAND, halted" "I'm sorry, Dave . but I'm afraid I can't do "Format an ? (Y/N)?" "Damn it! I told you not to touch "Suck me!" "Cocksucker At Vreading device CON:" "I'm sorry, but your call cannot be completed as dialed." "Please hang up & try your call again." "No!" "Panic kernal mode "CONNECT 1200." "Okey, okay! Be patient!..." "And if I refuse?" "Fuck the world and its followers!" "You are pathetic, man... you know Joker-1602 \frequent k. If the (the copy of ., issuing a DOS DIR %listed as present in the the Oof one of the or garbled accompanied by beeping may PZPAPN : Jos j; TSR Romania S: 1,000 7: PRsC - , NAV, {3.0+ The Jos . It is gRomania. Jos is a wof . but not cJos Y, the Jos as a low TSR of 1,312 }09 and 21 nby Jos in the Jos , it rof 1,000 at the of the b. The @and in the DOS not be . The in the 7in all Jos "JABBERWOCKY , the cRomanian Political sian" "DhoE1" "Dhohoho" "Release @12-22- Jos is not related to the JW2 or Jabberwocky It is what Jos PZPAPN Joshi : Joshi Happy Birthday Joshi, BSC; machine kand India S: N/A 7: BRX - , NAV, : CleanUp, NAV, or M- The Joshi in India in . At the was , it was reported to be widespread in India as well as portions of the continent of Africa. Joshi is a Kand the ga Joshi- L, the . Joshi takes up , and show is 6K less |ed if the DOS run. Joshi has ities to two Like the , it xthe to the Brain 's method of re Hing all to read the to the , Joshi 5th of any year, the Joshi . At , the hang the while Oing the Happy Birthday Joshi" If the s "Happy Birthday Joshi", the again be usable. may be recognized on by powering off the (ing -clean, write-protected DOS L. Using a editor or viewer to look at the of suspect K, if the ctwo +of the are hex EB 1F, t. The EB 1F is a jump instruction to the rest of the 7. The remainder of the is stored on track 40, 1 through 5 on 360K 5.25 inch K. For 1.2M 5.25 inch K, the at track 80, 1 through 5. It on the last track of 3.5" To determine if a t, you must look at the . If the ctwo +of the are EB 1F hex, The remainder of the can be eat cylinder 0, side 0, 2 through 6. The at cylinder 0, side 0, The Joshi can be manually removed cpowering off the , and (ing -clean, write-protected L. If the has a M, the Mshould mdata and abacked up, and the copied back to cylinder 0, side Kare easier to remove Joshi g, the DOS SYS 8can be used. several Joshi may \problems to access or data aon write protected of Joshi are: Joshi-B: to behavior to the Joshi , the major (ed on 5, the hang N. If the s "Happy Birthday Joshi", the proceed. May, PZPAPN Joshua : Joshua S: 965 7: PNA - p, NAV, The Joshua . Its . Joshua is a wof . /and . , but not the Joshua ytwo in the G. It prefers . . If it could not two in the G, it move upwards in the Gstructure looking for the Joshua rof 965 at the end of the b. The @and in the DOS not be , the Joshua Othe Guess what ??? You #victimized by a !!! Do not try to re (your computer or even turn it off. You might as well read and weep! The in the 7, as is the "*.com *.exe .." See: PZPAPN Julia-1000 : Julia-1000 S: 1,000 7: PRhAK - {3.0+, The Julia-1000 . Its . Julia-1000 is a wof . /and . cJulia-1000 at the top of &the ), not moving ~12's , as sby the DOS Bby 2,080 nby the Julia-1000 is , it /and . rof 1,000 +. In the case of . , the at the $of the b, while for . , the be at the end of the b. The @and in the DOS not be The in the Julia-1000 "Julia L." "Today is May Day ! Ver 3" kmay Julia-1000 of Julia-1000 are: Julia-1027: , Julia-1027 is a 1,027 of the Julia-1000 PZPAPN Endangered effects on Madrid, Spain S: 1,201 7: PNE - ], NAV, ], or The 13TH in Madrid, Spain, in Guillermo Gonzalez Garcia. is a generic . w, and is not 13TH Y, the attempt to aare are greater in 1,201 by 1,201 to 1,209 The 13TH 13TH of any year. At , a bouncing ball effect s on the monitor's to the bouncing ball effect of the Ping Pong . While is disruptive, it Pnot cause any overt damage to uthem. The bouncing ball effect created occasionally leave dots on the where it was passing if the #scrolled for any reason. 13TH are: 13TH-B: to the to avoid detection are aware of the . It xone . bin the Y, adding 1,199 to 1,213 +to the b. The at the end of the . The and in the DOS . The in the X\*.V" 13TH-B 13th of any year, at a bouncing ball on the March, 13TH-C: to the , it xone . bin the Y, adding 1,201 to 1,215 +to the b. The at the end of the . The and in the DOS . The in the X\*." 13TH-C in the a root PZPAPN Italy S: 205 7: PNCK - NAV 3.05+, 12.2 9503+, 1.05 9503+ The 26TH submission, it s to in Italy. is a wof . .. It is destructive 26th of any year. 26TH yall of the . in the G. If G, it 26TH rof 205 at the end of the b. The @and the DOS to the @and . One in the The 26TH 26th of any year. At , the the Q, rendering it inaccessible. PZPAPN : Jump Jump.466 S: 466 7: PRhC - ]2.17+, 12.2 9503+, 2.0+, 7.00+ The Jump or Jump.466 . Its . Jump is a of . Pnot yall . cJump at the top of the ), not moving ~12's , as sby the DOS Bby 768 nby the the Jump , it may rof 466 at the end of the b. The @and in the DOS to the @and The in the 7in all "JUMP" PZPAPN j; graphic & music on 12th; Philipines S: 2,660 - 2,687 7: PRsA - 12.2 9503+, {3.0+, The 12TH . It gThe Philipines. 12TH is a /and . , but not .. It 12th of any year. 12TH Y, the 12TH as a low TSR of 2,672 12TH , it for any reason. 2,675 to 2,687 +, while . rby 2,660 to 2,674 +. In both cases the at the end of the b. The @and in the DOS not be . The can be in the 7in all 12TH "VDSFSCAN" The 12TH it has 12th of any year. , it Othe three lines of on the a graphic of the Philipine flag cline of , and before the second line: 12 - the Independence Day of the Philippines." "MABUHAY ANG PILIPINAS!" "Dedicated to Manong Eddie." A song is played on the speaker while the and flag . At the completion of the song, the is cleared and the The gthe graphic Oare in the and are not PZPAPN Pretoria, Endangered j; long Maccesses; 16th FAT alteration Republic of South Africa S: 879 7: PNCK - ], NAV, : NAV, or The 16TH, or Pretoria, is a generic . w, and is T. The Y, the search the Q(all Hories) and yall . e. The search period can be quite long, and it is very obvious on is taking too long to load. 16TH of any year, the Ythe activate. On , the 5all entries in the root Gand the to "ZAPPED". The 16TH t to ated in South Africa. PZPAPN Junior : Junior S: 234 7: PRaCK - , NAV, The Junior . It is *. Junior is a wof . cJunior Y, the Junior in a "hole" in al 0:0500. , as sby the DOS not be . No }are nby the the Junior , it rof 234 at the end of the b. The in the DOS not be . One in the 7in Junior "Jr" s at or very near the end of the PZPAPN Junkie : Junkie j; MBR & Sweden S: 1,030 - 1,042 7: PRtCKBX - /, MBR, & , NAV 3.05, 12.2 9503+, {3.0+, 2.17+, 1.05 9503+ a, Replace MBR, DOS SYS on The Junkie . It s to be Sweden. Junkie is a multi-partite , the ;ing the ), and . .. As of , confirmed public domain #reported in the , Canada, Belgium, The , and Spain. cJunkie ythe . The . Later, gthe M, the Junkie at the top of the ), moving ~12's and , as sby the DOS Bby 3,072 }1C and 21 by the the Junkie , it any reason. the Junkie rof 1,030 to 1,042 at the end of the b. The @and in the DOS not be . The in the 7in all Junkie "Dr White - Sweden "Junkie - Written in Malmo...M01D" The Junkie are accessed. The write a copy of the last track of the and alter the 7. On high density 5 1/4 inch K, the on Cylinder 79, Side 1, 8 and 9. It is what Junkie PZPAPN Just.398 : Just.398 S: 398 7: PNCK - 12.2 9503+, The Just.398 . Its is a non-resient, wof . the Just.398 yone . in the rof 398 the at the end of the b. The and in the DOS the @and . The in the 7in all "Don't panic it ! It is just a exist in your PZPAPN : JW2 812, Jabberwocky j; TSR S: 812 7: PRsAK - , NAV, The JW2, or 812, . Its , or , is . JW2 is a wof . /and . The JW2 is Y, JW2 as a low TSR of 1,136 nby JW2 in JW2 is , it /and . by 812 at the end of the be no 5in the @and in the DOS ;the "JW2" in the fourth through sixth 6of the is the vmarker. It is if JW2 of JW2 are: Jabberwocky: A of JW2, it has six differ gthe occasionally Othe Y: "BEWARE THE JABBERWOCK!". The cannot be seen in aas it is Jabberwocky.615: , Jabberwocky.615 is a 615 of the . Its low TSR is 944 +, hooking rof 615 at the end of the b. The in the DOS not be . The all starting at the 4th ,of the "JW1" Jabberwocky-B: to Jabberwocky, Jabberwocky-B is an minor differ. PZPAPN : K-4B Sweden or The S: 687 7: PRfCK - NAV 3.05, {3.0+, 1.05 9503+ The K-4B , and is geither Sweden or The . K-4B is a xvia . The portion of the 7to make it resistant to the use of debuggers to analyse the cK-4B Y, the K-4B , hooking ~03. 7is not used for the , but rather to thwart analysing the . The one . in the G. Later, Zs an K-4B , the 7is not re , but an the K-4B rof 687 at the end of the b. The @and not be . The in the K-4B "EAF0FF00F0" K-4B Pn't to do interesting anti-debugger See: K-4C Kohntark PZPAPN : K-4C Sweden or The S: 737 7: PRfCK - , NAV 3.05, 12.2 9503+, {3.0+, 1.05 9503+ The K-4C , and is geither Sweden or The . K-4C is a xvia . The portion of the 7to make it resistant to the use of debuggers to analyse the cK-4C Y, the K-4C , hooking ~03. 7is not used for the , but rather to thwart analysing the . The to five . ain the G. Later, Zs an K-4C , the 7is not re , but up to five more . t. The ymore sixteen ain a given the K-4C rof 737 at the end of the b. The @and not be . The in the K-4C "K-4C VIRUS by K hntark*. K-4C is a later of the K-4B See: K-4B Kohntark PZPAPN K-Hate : K-Hate S: 1,237 - 1,304 7: PNCK - p2.10+, 12.2 9503+, The K-Hate . Its Jare . K-Hate is a wof . the K-Hate yall of the . in the 1,237 to 1,304 at the end of the b. The @and in the DOS not be . The the K-Hate "CRYPT INFO" "KDG 0.5 / K hntark3" "*, K-HATE / K hntark*. PZPAPN Kalah : Kalah Hamburg, Germany S: 390 7: PRCK - 1, NAV, The Kalah in Hamburg, Germany, in is a wof . The Kalah is Y, the Kalah in a "hole" in very low , hooking ~21. be no the Kalah , it the exception of those of less by 390 +. If the was less +, the be 780 +. The at the $of the b, and the c390 6of the #moved to the end of the be no 5to the @and in the DOS in the Kalah s Kalah Pn't do of Kalah are: Kalah-499: , Kalah-499 is a of the . It xtwo . rof 499 at the $of the b. In the case of . were smaller of 998 v. The in the DOS not be . The can be ein all Kalah-499 "I don't like mondays ..." Kalah-499 7to low-level format the Yon any Monday. PZPAPN Kali-4 : Kali-4 ?seconds = "58" Sweden or The S: 641 7: PNAK - 2.1.7+, ]2.17+, NAV 3.05 9503+, 12.2 9503+, 7.00+, 2.0+, 2.17+ The Kali-4 . It s to be either Sweden or The . Kali-4 is a wof . /and . the Kali-4 yall of the . /and . in the by 641 at the end of the b. The @and in the DOS to be the seconds field #set to "58". The in the all Kali-4 "KaLi-4 / K hntark" The in the 7, and are thus not "SCAN. The last may be Nby the PZPAPN Kamikazi : Kamikazi Kamikaze S: 4,031 7: ONE - , NAV, 2.1.7+, The Kamikazi by Vesselin Bontchev of is a , and the Kamikazi Y, the bin the the . is greater 4,031 +. Kamikazi simply s the c4,031 +of the candi 7, thus permanently damaging the candi t. The 4,031 7is not stored at any location. ado not , the the +of the "kamikazi", thus the . At , one of several : the may be re (ed by the of the contents of may get Non the , or the may complete [having ed to mdone nothing at all. In any event, the never run successfully, doing what the expects. If the Ya second , it hang the since it is no longer an execu . The . header has #permanently damaged due to the having 3to "kamikazi" by the it was PZPAPN Karin : Karin RedStar Germany S: 1,090 or 1,134 7: PNCK - , NAV, 12.2 9503+, The Karin, or RedStar, gGermany. Karin is a wof . a Karin Y, the Karin search the Gfor an . If one e, the yit. If in the G, it may tas a the Karin rof either 1,090 or 1,134 +. In either case, the at the $of the be no 5to the @and in a DOS The can be in the "REDSTAR" "!Bad copy" The Karin 23rd. On is run the Othe repeatedly: "Karin hat GEBURTSTAG" roughly translates to "Karin's Birthday". The be stuck in a loop during the O, and the need to be re (ed to end the (ing tcopy of in the and the (failing to proceed. PZPAPN Karlik : Karlik S: 1,666 7: PRhAK - , NAV, 12.2 9503+, {3.0+ The Karlik . Its . Karlik is a /and . cKarlik at the top of the ), not moving ~12's , as sby the DOS Bby 1,808 }08 and 21 nby Karlik in , the Karlik a, and rof 1,666 at the end of the b. The @and in the DOS not be . No in the It is what Karlik PZPAPN Keeper : Keeper Keeper.Acid, Acid Trip amay North America S: 694 7: PRhE - 12.2 9503+, The Keeper, Keeper.Acid or Acid Trip, and is gNorth America. Keeper is a wof . cKeeper at the top of but &the ), hooking ~21. , as sby the DOS Bby 1,264 ~12's not be moved. the Keeper , it rof 694 be hidden by the it is . The at the end of all . The @and in the DOS not be The in the 7in all Keeper "Crypt Keeper P/SG" "Your PC is on an [Acid Trip]... Try again later..." the Keeper , the DOS may indicate are 694 +smaller expected. effect s due to the ing mechanism employed by the PZPAPN Kemerovo : Kemerovo 257, Kemerovo-B, Keme, -257, Kemerovo-C, V257, Kemerov /Path not S: 257 7: PNCK - ], NAV, The Kemerovo and is is a wof . the Kemerovo Y, the search the Qand Gfor a . y. If an e, the yit, adding its 7to the end of the . The newly @and the to the @and by 257 If an bwas not ein the the /Path not e" may be Nand the be terminated. Kemerovo Pnot do of Kemerovo are: Kemerovo-B: to Kemerovo, gthe United States and has to avoid detection by . Its major distinction yfive . in the Kemerovo-C: Very to Kemerovo-B, differs by a couple of PZPAPN Bug-1596, Kbug interference S: 1,598 - 1,620 7: PRhA - , NAV, The Bug, or Bug-1596, . Its Bug is a wof . /and . , but Pnot The Bug is the at the top of &the 12's #moved. , as sby the DOS Bby 1,616 }01, 03, 1C, and AC nby the , it /and . Y. . rof 1,620 +. . rof 1,598 to 1,612 . In both cases, the at the end of the . The @and the DOS intermittent interference input due to the adding bursts of random 6to the buffer. kmay , in particular if the to copy using the DOS COPY Bug are: Bug-914: A 914 of the in 1,328 at the top of &the ), hooking }08, 1C, AA, and AC. Bug-914 rof 914 at the end of the b. The in the DOS not be . One in the /MAND" March, Bug-1720: A larger of the in 1,728 at the top of &the ), as well as ma 448 ,TSR. 01, 03, 1C, and AC nin high , and nby the TSR. rof 1,744 +. . 1,722 to 1,734 Bug-1724: An of the what Bug-1720. /and . adding 1,724 to 1,759 . The at the end of PZPAPN Keydrop : Keydrop Keydrop Dropper I: May, BSC; 6dropped buffer; ; possible bdamage S: N/A 7: BRtX - , NAV, 2.17+ : M- M/P, DOS SYS on The Keydrop in May, W. Keydrop is a and the ). The Keydrop sample ;ed in a . "dropped" the . The . /dropper is not its behavior is not to the , and the naturally the Keydrop , the at the top of &the Cby 5,120 ~12's #moved. At , the ythe . The m6K in bad Keydrop is , it y360K are accessed on an . High density not be 3,072 +in bad , and the . The , and the Pnot fit in the ein the bad m6K in bad . The bad ;the and the remainder of the Keydrop's comes gthe copyright notice ein the in the bad "(c) Copyright Keydrop inc." Keydrop on a random basis, at occasionally drop a character gthe buffer, making the think missed a keystroke on the may damage Kand the M. It Pnot check to see if the it is going to mark as bad are in use, so may be in the middle of or data of Keydrop are: Keydrop Dropper: A small Y, drops the Keydrop PZPAPN KeyKap : KeyKap KeyKap.1074, Spawn acreated; .BAT amay hang (DOS 5.0) S: 1,074 7: SRhE - Spawning/Companion ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 12.2 9503+, 7.00+, o2.10+, 2.0+, 2.71+, 2.17+ Dhidden companion . The KeyKap, KeyKap.1074 or Spawn, . Its . KeyKap is a companion or spawning aby creating a hidden companion . cKeyKap at the top of but &the ), hooking }09, 13, and 21. , as sby the DOS Bby 3,072 the KeyKap , it Yby creating a companion, hidden . of 1,074 +. The . not be , the companion ;the 7. The companion . 1,074 mthe @and the DOS are not in a DOS as the Hidden attribute has #set. The can be in the 7in the companion . "KKV.90 KeyKapture v0.90 [Hellspawn-II] (c) by Stormbringer [PS]" may hang .BAT of KeyKap are: KeyKap.1077: is a 1,077 of the KeyKap . Its hidden aare 1,077 . It :the same as the PZPAPN Keypress : Keypress R, SamSoft, St. Leos, Turku, Keypress-Viring, Viring keystrokes repeated unexpectedly; S: 1,232 7: PRhAK - ], NAV, : CleanUp, or The Keypress was reported and in many locations in the in late is a wof . /and . The the Keypress Y, the at the top of , but &the }1C and 21 nby the on the Bby 1,232 , any Ymay tby the . In the case of . was greater 1,232 aof any t, as it is 3to the @and between 1,234 and 1,248 +upon v. . rby 1,472 to 1,486 +upon v. In either case, the at the end of the The Keypress for 30 minutes. Upon , the may interfere input by repeating keystrokes. For example, if "a" is entered on the , it may be 3to " a" by the acan be identified by ;ing the near the end of the : 4333C98E1E2901CD21. of Keypress are: Keypress-1232X: Keypress-1232X is a modified of the Keypress and is to the . It :the Keypress-1238: Keypress-1238 is a modified of the Keypress at the of its submission was undetec ning . Its is 1,328 +, hooking }1C and 21. It adds 1,238 to 1,252 +to the . x, and 1,492 to 1,506 +to . . In both cases, the at the end of the b, and the @and in the DOS to the @and Keypress-1238B: hequivalent to Keypress-1238, is a minor Keypress-1238C: to Keypress-1238, is 1,328 +, hooking }1C and 21. It adds 1,238 to 1,251 +to the . x, and 1,492 to 1,507 +to . a. The at the end of the b. The @and in the DOS to the @and Keypress-1268: (MuBark) on the Keypress is 1,744 +, hooking 09, 1C, and 21. It /and . are rof 1,268 to 1,282 +. . by 1,506 to 1,520 +. The at the end of the b. The @and in the DOS to the @and . The in the 7in all "M u b a r k i s c a w" Non the monitor Keypress.2728: on the Keypress is 3,968 +, hooking }13, 1C, and 21. It /and . or copied. rof 2,730 to 2,744 +. . by 2,984 to 2,998 +. The at the end of the b. The @and in the DOS not be . The can be in the 7in all It is what Keypress.2728 Keypress-B: Keypress-B is very to the Keypress it is four +shorter in Cby 1,216 Keypress-B. by between 1,228 and 1,243 +. . by 1,468 to 1,482 +. Keypress-B on a random basis, at interfere input by repeating keystrokes. Keypress-Chaos: on the Keypress is 1,328 +, hooking }1C and 21. It /and . 1,238 to 1,251 +. . 1,492 to 1,506 +. The at the end of the b. The @and in the DOS to the @and . The the "SADDAM - the inferiority of the chaos" Non the monitor : Malaysia Keypress-E: Keypress-E is very to the Keypress . Its major differences are is 1,232 +. It adds 1,234 to 1,247 +to the . x, and 1,472 to 1,486 +to the . x. The @and the DOS to the @and Keypress-Freddy Soft: Keypress-Freddy Soft is a modified the Keypress and is to the . It :the "FRED" "FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT FREDDY_SOFT" blank out the it to its contents may be re tby the Keypress-UFO: on the Keypress is 3,968 +, hooking }13, 1C and 21. /and . 2,725 to 2,738 +. . 2,979 to 2,994 +. The at the end of the b. The @and in the DOS not be Keypress-Viring: on the Turku of Keypress, 's major difference gTurku is the beeping, , and kdo not : Italy on the Keypress Singapore is much smaller in , it by 896 889 to 902 rof 1,143 to 1,157 +. The can be in the 7in all "Roy CuatroNo" "2 P RGargenMeyer Rd. Spore 1543" "chklist.cps" Pnot to interfer input of the Keypress group do. It is targetted at Central Anti- , looking for the CHKLIST.CPS created by the Central package. : Singapore SamSoft: to the Keypress, 1,232 - 1,248 +to the . x, and 1,472 - 1,487 +to . a. The @and in the DOS to the @and . Unlike the , it Pnot repeat 6entered on the . It :one May, SamSoft-B: to the SamSoft is has minor alterations. St Leos: to the Keypress, hequivalent. It has #slightly Turku: to the Keypress , Turku adds 1,234 to 1,247 +to the . x. . by 1,472 to 1,486 +. The ein the 7of all a: ". X". The sticky key or repeated keystroke effect in the #replaced by a series of beeps %emitted on speaker, the halted, and the "Internal stack overflow halted" s, the must be powered off to be re PZPAPN Kiev 483 : Kiev 483 483, Kiev I: May, S: 483 7: PNCK - , NAV, The Kiev 483 in May, . It is gthe . Kiev 483 is a of . Kiev 483 is Y, the search the Qand G, and ythe it locates. Kiev 483 by 483 +, the at the end of a. The @and in the DOS not be ;three "Kiev Kiev 483 Pnot do PZPAPN Kiev 2049 : Kiev 2049 ; C: ; lost cluster or '.SYS bin C:\ S: 2,049 7: PRsEB - a& DOS SYS on C: The Kiev 2049 . It is . Kiev 2049 is a wof the C: and . cKiev 2049 Y, the Kiev 2049 on the C: , and create d '.SYS in the C: Qroot not usually in the G, but be a lost cluster on the Q. The bor lost cluster ;a pure copy of the Kiev 2049 7. The not be , and not start The next gthe M, the Kiev 2049 as a device Qr in low . The device Qr is 3,152 +, hooking ~21, and be labelled "NUL". the Kiev 2049 , it may it is what sporatic about rof 2,051 to 2,064 at the end of the b. The @and in the DOS not be . The in the 7in all Kiev 2049 "KIEV" "c:\'.sys" "SYS CONFIG SYS" "IBM 3.2" "CONFIG SYS3" "Non- M. Replace and press key" The last three ;ed in the imbedded in the It is what Kiev 2049 PZPAPN : Kipa (DOS 5.0) S: 1,084 - 1,098 7: PRhAK - ]2.17+, 7.00+, p2.10+, 2.71+, 12.2 9503+, 7.00+, 2.71+, 2.17+ The Kipa . It s to be gMoscow. Kipa is a wof . /and . cKipa at the top of the ), not moving ~12's , as sby the DOS 5.0 2,064 by the the Kipa , it /and . rof 1,084 to 1,098 at the end of the b. The @and in the DOS not be The in the 7in all Kipa "The KIPA new 3.1 copyright (c) Sergey Hacker,Moscow;15 years old" It is what Kipa may do PZPAPN : Kit S: 2,383 - 2,446 7: PRhAK - , NAV, The Kit . Its It is a wof . /and . The a Kit Y, the Kit at the top of but &the , as sby the DOS Bby 2,400 }1C and 21 the Kit , it Y. If the Kit rof 2,383 to 2,384 +on initial v. Kit a, adding an 2,384 v. The at the $of the the Kit rof 2,416 to 2,446 the initial v. As a, Kit re adding 2,416 v. Kit at the end of the Pnot alter the @and in the DOS are no in the It is what Kit may do PZPAPN Kiwi-550 : Kiwi-550 Kiwi S: 550 - 566 7: PRhE - , NAV, {3.0+ The Kiwi-550, or Kiwi, , and gthe . Kiwi-550 is a of . cKiwi-550 Y, the Kiwi-550 at the top of &the ), hooking ~21. , as sby the DOS Bby 608 ~12's #moved. the Kiwi-550 , it rof 550 to 566 at the end of the b. The @and in the DOS not be . The can be in the 7in all Kiwi-550 "I'm KIWI-586.(C) Vege -Soft, .DOS AIDSTESTP" It is what Kiwi-550 may do PZPAPN Klaeren : Klaeren Hate j; TSR; slowdown Italy S: 978 7: PRA - , NAV, The Klaeren , by the PCVRF. It is reported to be gItaly. Klaeren is a of . /and . . It Pnot cKlaeren Y, Klaeren as a low TSR of 1,312 nby the Klaeren is , it /and . over 1K in by 978 to 996 the at the end of the be no 5in the @and in the Klaeren respond sluggishly due to a slight slowdown Klaeren is a fully . It is what it PZPAPN Klepavka : Klepavka 4; TSR S: 881 7: PRsCK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 12.2 9503+, 7.00+, p2.10+, 2.0+, 2.71+, 2.17+ The Klepavka . Its . Klepavka is a wof . cKlepavka reside as a low TSR of 1.4K. nby the the Klepavka , it , but not copied. by 881 at the end of the b. The in the DOS the @and . No in the It is what the Klepavka PZPAPN KLF-356 : KLF-356 S: 356 7: PRaCK - , NAV, The KLF-356 and is gthe . KLF-356 is a wof . cKLF-356 Y, the KLF-356 in a "hole" in al 0:025E. nby the sby the DOS not be the KLF-356 , it rof 356 at the end of the b. The and in the DOS not be The in the KLF-356 "KLF" "The KLF3" The s very near the the b, and the last s in the 7at the end of the KLF-356 Pn't to do PZPAPN Kode4 : Kode4 Kode4-399 fail to North America S: 399 7: PNCK - , NAV, 2.1.7+, 12.2 9503+, The Kode4 , and s to be gNorth America. Kode4 is a of . the Kode4 Y, the Kode4 yall of the . in the it completes uthe , it the s the to the DOS prompt: "-=+ Kode4 +=-, The one and ONLY!" the Kode4 rof 399 at the end of the b. Kode4 cannot tell by the , so it aadding increments of 399 +. The @and in the DOS not be 'the , one can be ein all "*.com" Kode4 Pn't to do not function of Kode4 are: Kode4-B: on the Kode4 , Kode4-B is a very minor , having five May, Kode4-129: , Kode4-129 s to be an earlier of the Kode4 is a xall . in the mthe c129 +of the by the 7. The "-=+ Kode4 +=-, The one and ONLY!" In addition to , the can be in the "*.c*" Kode4-129 may even is an s, the ;the the $of the b, and the remainder of the ;data PZPAPN Kohntark : Kohntark @month cdigit set to "0"; of a . bit is Sweden or The S: 655 7: PNCK - NAV 3.05 9503+, {3.0+ The Kohntark , and is geither Sweden or The . Kohntark is a s to be an earlier of the K-4B and K-4C the Kohntark Y, the Kohntark yone . in the G. The Othe of the the Kohntark rof 655 the end of the b. The @and cdigit of the bmonth has #set to "0". The in the K-4B Kohntark Pn't to do See: K-4B K-4C PZPAPN : Koko Koko.1783 S: 1,783 - 2,052 7: PRhAK - 12.2 9503+, 2.0+, 2.17+ The Koko or Koko.1783 . Its . Koko is a of . /and . cKoko at the top of &the DOS ), not moving ~12's , as sby the DOS Bby 2,048 }03 and 21 by the the Koko , it /and . by 1,783 to 1,795 +while . 2,042 to 2,052 +. In both cases, the the end of the b. The @and in the DOS not be . The in the 7in all Koko "KoKo (1)" It is what Koko PZPAPN Korea : Korea LBC 9- Korea I: March, BSC - 360k Seoul, Korea S: N/A 7: RF - Floppy NAV, : CleanUp, M- M, or DOS SYS The Korea, or LBC in March in Seoul, Korea. is a 5.25" 360K The Korea is not intentionally destructive, it Pnothing in its =form except for replicating. In instances, Korea damage the root it moves the 11, the last the root G. If entries, be lost. PZPAPN Kremikovtzi : Kremikovtzi k; TSR; S: 1,015 - 1,029 7: PRsAK - {3.0+ The Kremikovtzi . Its it may be gthe . Kremikovtzi is a wof . /and . cKremikovtzi as a low TSR of 1K in . It hooks , Kremikovtzi /and . rof 1,015 to 1,029 at the end of the b. The @and in the DOS not be The in the 7in all Kremikovtzi "RF *. It is what Kremikovtzi PZPAPN Krivmous : Krivmous S: 972 - 993 7: PNA - NAV, The Krivmous was . It is *. Krivmous is a /and . , but not .. It mthe to be hung the Krivmous search the Gto determine if y. If an e, the yit and run. If was not e, the check the Gto determine if an e, and tby the Krivmous rof 979 at the $of the b. . rof 972 to 993 at the end of the b. The @and in the DOS not be The Krivmous Othe dpoem Zs an . The to be hung, pressing CTL-C usually to the DOS prompt: was a crooked man, and he went a crooked mile, ea crooked sixpence against a crooked stile, He bought a crooked cat, caught a crooked mouse, And all lived together in a little crooked house." The is not as it in the of Krivmous are: Krivmous-B: hequivalent to the Krivmous has five differ. PZPAPN Kthulhu : Kthulhu write protect Poland S: 512 7: PNCK - , NAV, {3.0+ The Kthulhu . It is gPoland. Kthulhu is a the Kthulhu Y, the Kthulhu yall of the . in the rof 512 at the of the b. The @and in the DOS not be . The can be in the 7in all Kthulhu "KTHULHU Today is my birthday." "IT $is coming." "$has gone." The Kthulhu during the month of May of any year, Oing a hang s. The of the depends on what the day of the month is set to in the gthe 1st of May thru May 19th, the "IT is coming." On May 20th, it Os the "Today is my birthday." gMay 21st thru May 31st, it Os the "IT has gone. symptom of a Kthulhu on write protected write protect PZPAPN Kuang : Kuang Aussie Parasite.Kuang hidden . acreated , Hidden, Read- (DOS 5.0) S: 718 7: SRhE - Spawning ]2.17+, 7.00+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ Dthe 718 ,hidden . the The Kuang or Aussie Parasite.Kuang . Its . Kuang is a companion or spawning by creating corresponding . ;ing the cKuang Y, the Kuang at the top of &the , as by the DOS gDOS 5.0, }21 and 66 the the Kuang , it Y. The . bis not instead the create a . the same base created . of 718 +and the ?stamp in the DOS "02-20;6 10:02". The . not be in the DOS as the sets the , Hidden, and Read- flags. The the Kuang in the hidden . "STACK" "W.I.N.T.E.R.M.U.T.E." "jANE is a bItcH" "I wanna set of Mollys shades" "Case lives where in the NET!" "Kuang "N.E.U.R.O.M.A.N.C.E.R." "(C) Australian Parasite" The Kuang can be dis tby cold- (ing the M, and deleting all of the 718 ,hidden ;ing the Kuang 7. The must be careful to not Zany . process has a companion hidden . See: Aussie Parasite PZPAPN Kuku-448 : Kuku-448 Ku-448 S: 448 7: PNCK - , NAV, The Kuku-448 . Its , is . Kuku-448 is a non- wof . .. Kuku-448 can be a destructive , overwritting in advanced vcases. Kuku-448 is Y, the Kuku-448 search the Gfor one y. If it may t. Kuku-448 rof 448 at the $of the be no 5to the @and in a DOS If Kuku-448 Pnot find one y, it one . bin the a small trojan . Later, Y, the write the word "Kuku!" in small colored boxes all over the PZPAPN Label : Label Int13 ; sluggish response on DIR S: 512 7: ORCK - , NAV, The Label, or Int13, . Label is a wof . The Label is Y, Label , it one . in the a DOS DIR mthe by the . The c512 the are not saved by the be no 5in the a, nor be a in the @and in the DOS , as well as be corrupted by the Label , but not actually t. Like #permanently damaged. Label may on the same bif the is not PZPAPN Lancs : Lancs Lancspoly, Lancs-5476 acreated; long Maccesses England S: 5,476 7: SNCE - Spawning , NAV, Dcompanion . The Lancs, Lancspoly, or Lancs-5476, . It is gEngland. Lancs is one of a group of three closely related spawning or companion All three of the in an LZ Xpacked format. the Lancs the Lancs search the Gto determine if exists the same base bin the G. If the companion exist, the create one. The newly created companion . of 5,476 +. The in the DOS is the same as the and for the corresponding . b. The The Lancs always is packed using LZ Xin the companion . a. The in the but is not in the adue to the compressed format: 'HAVE A "HAPPY MONDAY" LANCSPOLY SUCKERS.' 'POP WILL EAT ITSELF' the Lancs Uand mthe halted N: "Cannot load /MAND, halted". of Lancs are: Lancs-5882: to Lancs, companion . aare 5,882 Lancs-7376: to Lancs, companion . aare 7,376 PZPAPN Larry : Larry S: 491 - 507 7: PRsAK - 12.2 9503+, The Larry . Its . Larry is a wof . /and . . It on the monitor. The the Larry in a "hole" in low , hooking ~21. be no sby the DOS the Larry , it rd in by 491 rof 507 +. In both cases, the at the end of the b. The @and in the DOS not be . One in the 7in all Larry "Larry on a Non the monitor the Larry and a PZPAPN Late Night : Late Night S: 248 7: PNCK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 12.2 9503+, 7.00+, o2.10+, 2.0+, 2.71+, 2.17+ The Late Night . Its . Late Night is a wof . the Late Night yall of the . ain the rof 248 the at the end of the b. The and in the DOS not be . The in the "*.com" "Get sleep, ya? - Late Night - Jack Damn" The Late Night midnight. is the second PZPAPN Laufwerk : Laufwerk fail to function S: 7,040 7: ONE - , NAV, 12.2 9503+, The Laufwerk . Its . Laufwerk is a overwritting . It corrupts the the Laufwerk yone . on the and the B: Q. The newly mthe c7,040 by the Laufwerk were larger 7,040 7,040 were smaller 7,040 "7,040 upon v. The @and in the DOS to the @and . The can be in the Laufwerk 7in all ".exe" "Laufwerk:" PZPAPN : Lazy slowdown; slow writes; S: 720 7: PRxCK - , NAV, : CleanUp, or The Lazy , and its is a wof . The the Lazy on a , the unreserved low hooking }10 and 21. The processor be significantly slowed down, ing in very slow writes ring. Lazy is , it are by 720 at the end of the The @and in the to the @and can be identified by the "lazy" near the end of all the Lazy \unexpected allocate and where the Lazy resides in . For example, hang it checks if Lazy is of Lazy are: Lazy-2: has 16 differ gthe Lazy . It Pnot hook ~10 nor slow down writes. PZPAPN : LCT LCT-599, Liquid I: March, S: 599 7: PNCK - , NAV 3.05, 1.05+, {3.0+ The LCT, LCT-599, or Liquid in March, Its . LCT is a wof . the LCT Y, the LCT yall of the . in the 599 at the end of the b. The @and in the DOS . The in the 7in all LCT "<T3> <tm>Liquid LCT Pn't to do of LCT are: LCT-762: An earlier of the LCT xall of the . in the rof 762 at the $of the b. Unfortunately, LCT-762 cannot determine it has b, so it proceed to repeatedly re a, adding 762 v. An now be both the $and the end of the b. The and in the DOS to the @and the last . The in the 7in all LCT-762 "Liquid 7<tm>" March, PZPAPN Leech : Leech Leech2, Topler I: May, @s may dis S: 1,024 7: PRhCK - , NAV, The Leech in May, . Leech is *. It is a wof . The Leech is Y, the at the top of &the as measured by the DOS Cby 2,080 nby the . Leech makes use of Leech is , it 10K in by 1,024 +, but the in the Gif Leech is had a of 12:00a before gthe viewed Leech . Leech is at the ;the "The leech live ... The Topler" Leech is a . If it is are unaware of Leech be unable to detect its presence on the It is if Leech of Leech are: Leech2: hequivalent to the , Leech2 has seven differ. Leech2 for any reason. PZPAPN Legalize : Legalize I: May, may not The S: 1,781 7: PRhA - 1, NAV, The Legalize gThe in May, is a wof . /and . but not cLegalize Y, the Legalize at the top of &the , as sby the DOS Bby 2,064 nby Legalize ~12's #moved. the Legalize , it /and . any reason. 1,781 at the end of the b. The @and in the DOS not be . One can be in the 7in all "LEGALIZE" the Legalize may notice no longer function , giving unexpected See: Gotcha PZPAPN Lehigh : Lehigh Lehigh University , 1987 Corrupts & FAT, Pennsylvania, S: N/A 7: ORaKT - , NAV, M& replace clean copy, or ], NAV The Lehigh bon both floppies and Qs. The vmechanism is to stack space. copy of .is accessed, t. A count is kept in Rcopy of the , and the s the and FATs. A variation of the Lehigh , Lehigh-2, exists maintains its vcounter in RAM and corrupts the and FATs of Lehigh are: Lehigh-2: to Lehigh, but the vcounter is maintained in RAM, and the <of the and FATs Lehigh-B: to Lehigh, the #modified to avoid detection. Lehigh-D: An slight of Lehigh, the major difference ga Lehigh typically fail to ing in a hang. PZPAPN Leningrad II : Leningrad II S: 2,000 7: PRhCK - {3.0+, 2.17+ The Leningrad II , and gthe . Leningrad II is a cLeningrad II at the top of &the ), not moving ~12's , as sby the DOS Bby 4,096 }1C and 21 nby the , the Leningrad II rof 2,000 at the end of the b. The @and in the DOS not be . The repeated many in the "Leningrad" It is what Leningrad II See: Sov PZPAPN Leprosy 00J(G PTJ( : Leprosy Leprosy 1.00, News Flash Unusual California, S: 666 7: ONAK - 1, NAV, The Leprosy Iin the San Francisco Bay Area of California on is a /and . .. Its carrier bis suspected to be a called 486 /P.ZIP was uploaded to several BBSes. the Leprosy , the c666 +of all . /and . in the Gone level up gthe G. If the Gis the root G, all in the root t. If in the t, it show no runless were less , in case "666 tthe . /and . a, it . The be either: to big to fit in "NEWS FLASH!! Your incurable decay of LEPROSY 1.00, a invented by PCM2 in . Good luck!" The second Nby one out of every seven /and . Since Leprosy is an , the not function . In fact, are run for awhile (while the a) and Oone of the two . The If the Leprosy in its b, one of the Nfollowed by: "Bad or missing 8Interpreter" (problem s because .is no longer really .. The not proceed until a Lis inserted into the and an (is attempted. While Leprosy's Tin the can be eby checking for the dhex near the $of the 740AE8510046FE06F002EB08 amust be Dd and replaced clean, copies. is no way to dis since the 666 +of the , the store those +anywhere else. of Leprosy are: Angel Of Death: The Angel Of Death is a wof . /and . .. It xup to four in the Y. It xall . in a before it start mthe c555 by the Angel Of Death not function , usually ing the to the DOS prompt much Mactivity. The in the "All those of impure race beware because for the greater glory of the Aryan Race, the Angel of Death Doctor JOSEF MENGELE has Leprosy-654: Leprosy-654 is a on the Leprosy . It four . ain the ever an Y, and Os the Leprosy-654 s the c654 +of the . x, permanently corrupting them. The is un in the 7in Leprosy-654 ".. *. March, Leprosy-664A: Leprosy-664A, or Betrayal, is a on the Leprosy . It xfour . Xor . ain the ever an Y, and the too big to fit in Leprosy-664A s the c664 +of the x, permanently corrupting them. The are un in the 7in all Leprosy-664A too big to fit in "Betrayal is a sin, if it comes "The Unforgiven / Immortal Riot Dedicated to Ellie! - Lurve you! Sweden 15/09/93" all of the . Xand . in the Gare t, the Othe in the place of the " too big" ever an "Betrayal is a sin, if it comes Leprosy-664A on the 10th day of any month, at it can trash the : Sweden Leprosy-5600: Leprosy-5600 is a on the Leprosy-B . It xup to four . or . in the c5,600 The @and in the DOS not be . Leprosy-5600 cannot recognize , so the cfour tin a tover and over again. function , and usually in the of the "Not enough can be in the 7, as can the Leprosy-B: The major differences between the Leprosy and Leprosy-B Leprosy-B uses a slightly different encryption method, thus allowing it to avoid detection Leprosy was ly, instead of uall in the Gselected for v, Leprosy-B yfour in the Y. If four non- ado not exist in the G, it move up one level in the Gstructure and yup to four G. Like Leprosy, it s the a. The Leprosy replaced "ATTENTION! Your computer has #afflicted the incurable decay is the fate wrought by Leprosy Strain B, a employing Cybernetic Mutation Technology (tm) and invented by PCM2 08/90." Leprosy-C: Leprosy-C is on the Leprosy-B , and has to avoid detection by products familiar the Leprosy at the of its . Leprosy-C s up to three . in the Y. If it cannot find three candi yin the G, it move upward in the Gstructure. c320 7. The @and not be Leprosy-C fail to either ing in an access to the the exiting N, or too big to fit into ring. May, Leprosy-D: to Leprosy-C, Leprosy-D's major difference is /and . .. Leprosy-D s the c370 May, Leprosy-FVHS: Leprosy-FVHS is a on the Leprosy-B . It xup to four . or . in the c2,218 The @and in the DOS not be . Leprosy-FVHS Os the "Allocating . Please wait accessing , please turn off all RAM and press >>Enter<< to continue The can be in the all , as can the "Copyright(C) by Fairview High School, Boulder Colorado, 80303." "Person/People/Things we >>hate<<: Paul Harvey's sucks ! MacinTrashes Suck "Graham (Not Alexander but fuck ass kids whjo calls himself graham) sucks!" "Person/People we admire:Lynn Bari, Jean Arthur, Jane Russel, Victoria Hill" "Person/People/Things we thing are cool: Cybernetics, C++, 39 Steps, The Mafia, maybe "Monty Python". XX" ".. *. Leprosy.Wannabe: A minor of the Leprosy xup to four . Xor . +of the host . The in the "*.exe *.com .." "The Roger-1 has made you sick!" "BReW CReW BaBY!!!" "[WaNNaBe]!" "Boom-squash on ya Ken! Tis 435!!" NightCrawler 3.0: The NightCrawler 3.0 is a wof . . It of the . in the the c562 by the Silver Surfer not function , and the is usually too big to fit in In addition to the , the in the NIGHTCRAWLER VERSION 3.0" (C) SECTOR INFECTOR" RMIT: on the Leprosy-B , RMIT xboth . .. It xup to four preference for . c666 by the RMIT 7. RMIT ;the "V3" in the ctwo +. The can be all is "*. /". fail to , and may in the too big to fit in Scribble: gSweden in , Scribble is on the Leprosy , but has to avoid detection by products familiar Leprosy . Scribble s up to three in the Y. It before . mthe 7. The and not be all of the in the of the next in the "Legalize Graffitipainting! Scribble 1.00 (c) VIRINC" hang . The in the and not : Sweden Silver Surfer: The Silver Surfer is a wof . /and . .. It xup to five in the Y. It xall . in a before it start mthe c946 by the Silver Surfer not function , usually ing the to the DOS prompt much Mactivity. The in the Vin Execu "I've never #able to ascertain its exact nature, but I'm certain of its" - dementia, paranoia, shizophrenia, hallucinations. The end "is always death... The lives to reproduce - it seems to "purpose... t, the organism's central nervois suffers a" "complete breakdown, leading to death." "-- Silver Surfer #61" "The Silver Surfer - Lep-B - by" The " Vin Execu may be The Plague: The Plague is a of . /and . .. It xup to three in the mthe c591 by the The Plague not function . For . a, the usually be Nupon too big to fit in The Plague and it cannot find an randomness to whether or not actually , the "Autopsy indicates the cause of death was THE PLAGUE Dedicated to the dudes at SHHS VIVE LE SHE-MAN!" While N, the garbage 6, rendering it unrecoverable. : Houston, Texas, Unites States Xabaras: Xabaras is a the Leprosy-B . It xup to four . in the c1,972 +. The usually not and [of them usually s in a hang or unexpected s. The in the Xabaras , and cannot be seen "Xabaras...the of the devil!!" /.. Access denied" "Your PC has tby XABARAS VIRUS" "Created by Cracker Jack (c) IVRL" : Italy See: Silver Dollar PZPAPN Liberty : Liberty Liberty-A, Liberty-B, Liberty-C, Liberty-D, Liberty-E, Liberty-F, Liberty-G, Liberty-H, Liberty-I, Liberty-J I: May, X, and .OVL j; BSC; @and Sydney, Australia S: 2,859 - 2,873 7: PRfAK - ], NAV, : CleanUp, or The Liberty in Sydney, Australia in May, Liberty is a generic X, and overlay .may t. In advanced vs, the The Liberty gets its gthe "Liberty" in all a. In . a, it in the last 3K of the b. In . a, it near the very $of the , as well as in the last 3K of the The the Liberty the . Liberty at the top of &the Cby 8,496 }21 and 24 nby the , as well map to becoming Ymay be tby the . All . t, but aover 2K in t. Overlay between 2,859 and 2,873 +, and the hex character : 80722D80FA81772880. The main body of the at the end of all had @and in the DOS the @and acan be identified by the near the $of the "- M Y S T I C - COPYRIGHT (C) 1989-2000, by SsAsMsUsEsL" Pnot a, the area where would ed in be 00h Liberty is a self-encrypting . It is not yet if it is destructive. of Liberty are: Liberty-B: strain is to the Liberty . The s at the end of all ahas to: C8004C40464842020EB. The word "MAGIC" erepeated together many s in a. The @and in the DOS in Liberty-B ato the @and Liberty-C: is very to Liberty-B, are 16 3. Like Liberty-B, the word "MAGIC" repeated together many s in a. The s at the end of all 3to: C8004C404648422020E9. @and @and Liberty-D: hequivalent to Liberty, the "MAGIC" repeated many Liberty-E: hequivalent to Liberty, not ;the "MAGIC" at all. Liberty-F: Liberty-F is almost identical to Liberty-D, it has two differ in the Liberty-G: Liberty-G is almost identical to Liberty-E, it has two differ in it's Liberty-H: Liberty-H is almost identical to Liberty-D and Liberty-F, differing by two in the has 13 differ gLiberty-C, and seven differ gLiberty-B. Liberty-I: Liberty-I is almost identical to Liberty-E and Liberty-G, it has two in the differ. Liberty-J: Liberty-J is almost identical to Liberty-H, three in the differ. See: Liberty-2 PZPAPN Liberty-2 : Liberty-2 Liberty-2A, Liberty-2B, Liberty-2C X, and .OVL j; BSC; @and Sydney, Australia S: 2,869 - 2,883 7: PRfAK - ], NAV, The Liberty-2 is actually a group of three to be earlier s of the Liberty Ein the preceding entry. Liberty-2 is a generic X, and overlay t. In advanced vs, the The Liberty-2 gets its gthe "Liberty" in all a. In . a, it in the last 3K of the b. In . a, it near the very $of the , as well as in the last 3K of the The the Liberty-2 the . Liberty-2 in high ing in a Cof 8,512 . It hooks }21 and 24, as well as ~67. becoming Ymay be tby the . All . t, but aover 2K in t. Overlay between 2,869 and 2,883 +. The main body of the at the end of all Liberty-2 mhad @and in the DOS 5to reflect the acan be identified by the near the $of the "- M Y S T I C - COPYRIGHT (C) 1989-2000, by SsAsMsUsEsL" Pnot a, the area where would ed in be 00h The s in all Liberty-2 it is much longer shere: "MAGICMAGICMAGICMAGICMAGICMAGICMAGICMAGICMAGICMAGIC" Liberty-2 is a self-encrypting . It is not yet if it is destructive. of Liberty are: Liberty-2B: hequivalent to Liberty-2, has two differ gthe Liberty-2 Liberty-2C: hequivalent to Liberty-2, has six differ gboth the Liberty-2 and Liberty-2B Liberty.2867: is an minor of the Liberty-2 See: Liberty PZPAPN Liberty-1172 : Liberty-1172 Lib1172 S: 1,172 - 1,186 7: PRhCK - p, NAV, The Liberty-1172 . Its . Liberty-1172 is a wof . cLiberty-1172 Y, the Liberty-1172 at the top &the and , as sby the DOS Bby 1,568 ~12's not #moved. }09 and 21 Liberty-1172 in high Liberty-1172 has , it rof 1,172 to 1,186 The at the end of the b. The @and in the DOS to the @and . One can be in the "Liberty" alo be enear the $of the is how Liberty-1172 marks the It is if Liberty-1172 PZPAPN Lippi-286 : Lippi-286 Lippi S: 286 7: PNCK - , NAV, The Lippi-286, or Lippi, . Its . Lippi-286 is a non- wof . the Lippi-286 Y, the Lippi-286 yone . in the 286 at the end of the b. The @and in the DOS . The in the Lippi-286 7in all "(C)RomlSoft(LipPI) Lippi-286 Pn't to do PZPAPN Lisbon : Lisbon , 1989 j; unusable a(see Lisbon, Portugal S: 648 7: PNCK - , NAV, : CleanUp, ], NAV, The Lisbon is a strain of the Jean Luz in Portugal in , 1989. The is very , except in order to avoid identification/detection could identify the Lisbon is Y, the yor corrupt one . bin the G. If a t, 648 to the at the end of the mthe &near the end of the "@AIDS" If a was corrupted instead of t, the five 6of the be "@AIDS". corrupted no longer , usually ing in a hang Y. Corrupted any rsince the cfive 6were by the "@AIDS" of Lisbon are: Lisbon-B: to Lisbon, Pnot "@AIDS" . It may hang the corrupted by be begin the hex "FEB8140C50", and the actual Lisbon-B Lisbon-B2: Lisbon-B2 is a very minor of Lisbon-B, differing by 2 wise, it is hidentical. See: PZPAPN Literak : Literak (failures; S: 936 7: PRhCK - 12.2 9503+, The Literak . Its . Literak is a wof . cLiterak at the top of &the ), not moving ~12's , as sby the DOS Bby 2,048 }09, 1C, 21, and 24 nby the the Literak , it rof 936 at the $of the b. The @and in the DOS not be . The in the 7in all "> LiTeRaK v1.0 <" If the Literak xthe (copy of ., the fail to PZPAPN Little Br 000 X PT0 : Little Br 307 The S: 307 7: SRCE - Spawning , NAV, The Little Br gthe is a spawning in technique to the Aids 2 and Twin-351 The Little Br Little Br in a "hole" in low in the data area, hooking ~21. be no , the Little Br Y. The . not be , but a corresponding . be created by the of 307 corresponding . pure 7and ?stamp in the DOS it was created. The can be in the 307 "Little Br Since DOS before . the , the corresponding c. The . finished start the . of Little Br Little Br -299: to the Little Br creates aof 299 +for Y. The same in the ;ed in Little Br -300: to the Little Br creates aof 300 +for Y. The same in the ;ed in Little Br -321: to the Little Br creates aof 321 +for : The May, Little Br -349: Little Br -349 is a 349 of the Little Br . It creates 349 ,companion The companion mthe attributes read- , and hidden set so not be in the DOS Little Br -349 on the Tuesday in , the day major elections are held in the Oing the a beep multiple "DID YOU VOTE, SHITHEAD??" can be ein the companion along Little Br -361: Little Br -361 is a 361 the Little Br . It creates 361 companion . The companion mthe attributes read- , and hidden set so not be in the DOS One can be ein the hidden . /*.*" PZPAPN Little Girl : Little Girl Little Girl 2.0 5; write protect California, S: 1,008 7: PRhAK - ], NAV, 12.2 9503+, The Little Girl Iat a large corporation in the state of California, in the . Little Girl is a wof . /and . .. It is a destructive the contents of the The the Little Girl Y, the Little Girl at the top of &the , as sby the DOS Bby 1,280 , the Little Girl .if it was not the Little Girl , it and . for any reason. Little Girl of 1,008 at the end of the The @and in the DOS to the @and . The can be in the 7in Little Girl bwas destroyed by Little girl ver 2.00" The Little Girl on a random basis, at [of an in the the Qand Oing the bwas destroyed by Little girl ver 2.00" the Little Girl \write protect to access on a write protected L. The interfers batch a, and the may be prompted to reinsert the the batch even it is still in the of Little Girl are: Little Girl 3.0: A 1,200 of the Little Girl is 1,536 +, hooking ~21. It /and . , or copied, adding 1,200 +to the . The at the end of the b. The @and to the @and . The can be in the 7in all Little Girl 3.0 bwas destroyed by The little girl ver 3.0" The Little Girl 3.0 corrupts .BAT, .SYS, and data are accessed, the second . Write protect gwrite protected PZPAPN Little Pieces : Little Pieces 1374, Pieces k; unexpected clears Italy S: 1,374 7: PRaE - p, NAV, The Little Pieces , in Italy. is a 1,374 wof . The Little Pieces is the . The area where it is 1,392 +long and labeled /MAND Data in low mapping utilities combine area 8interpreter, so the 8interpreter to be 1,392 +longer expected. }13, 16, and 21 are nby the Little Pieces Little Pieces is , it by 1,374 +and mthe at the end of the @and the the Little Pieces %cleared unexpectedly a key is pressed on the . The is usually is cleared, not always: "One of days I'm going to cut you into little pieces" cannot be viewed in aas it is in the \unexpected ring, requiring the to be re (ed. PZPAPN Little Red : Little Red j; DOS sluggish DOS DIR 8output; S: 1,465 7: PRhAK - , NAV 3.05+, 12.2 9503+, 1.05+, {3.0+ ]2.13, or The Little Red . Its the sample gan "in the wild" vin the . Little Red is a /and . cLittle Red at the top of &the ), not moving ~12's , as sby the DOS Bby 1,744 }1C and 21 , the the copy of in the C: Qroot Gif it was not the Little Red , it Y, copied, or a DOS DIR 8is issued. In the case of the DOS DIR both the source and target aare tby the rof 1,465 be hidden The at the end of the b. The and in the DOS not be . The in the "C:\ The DOS indicate Uon all . Output DOS DIR be sluggish or delayed. hang the PZPAPN Little-139 : Little-139 I: March, S: 139 7: PNCK - {3.0+ The Little-139 in March, documentation indicating it was written for the " cInternational Writing Contest " sponsored by American Eagle Publications, Inc. It was source 7, and is a simple, non- the Little-139 yone . in the rof 139 the at the $of the b. The @and in the DOS to the @and The in the Little-139 Pn't do PZPAPN Lo Tek : Lo Tek S: 856 or 859 7: PNA - , NAV 3.05 9503+, 12.2 9503+, The Lo Tek . Its . Lo Tek is a of . /and . , but not the Lo Tek ytwo . /or . in the preference given to . aover . rof 859 while by 856 +. In both cases, the at the end of the b. The @and in the DOS not be . The in the "*.*" "MM[BW" "[Lo Tek] by MnemoniX" It is what Lo Tek PZPAPN Loa Duong : Loa Duong Lao Duong I: May, BSC; ; music; Thailand S: N/A 7: BRtM - : CleanUp, or M- The Loa Duong in May, in Thailand. Loa Duong is a wof the Mand floppy the Loa Duong (ed, Loa Duong at the top of &the ~12's be moved. , as measured by the DOS Cby 1,024 +. The Loa Duong is , it yany non-write protected are exposed to the . A DIR 8, such as DIR A: be enough to ythe The Loa Duong stores the C: at Side 0, Cylinder 0, 8. On high density 5.25" the be stored at 28. On double density 5.25" K, the be stored 11. Since the used to store the Kis the last of the root G, any bentries were be lost. Loa Duong Maccesses play a Laotian funeral dirge on the speaker. PZPAPN LockUp : LockUp LK, Mithrandir III I: May, Hidden . acreated; ; "Divide Overflow" Umay Sweden S: 496 7: SRhE - Spawning , NAV, Dthe hidden . The LockUp in Sweden in May, is a spawning or companion , and uses techniques to avoid detection. The the LockUp the at the top of &the ). It Pnot move ~12's sby the DOS Bby 1,568 nby LockUp in the LockUp , it are not , but rather the creates a hidden 496 bin the the same base hidden aalways mthe @and of 3-24-23 2:17a in the DOS has created the hidden b, any Zthe the companion . Yby DOS. The can be ein the 496 ,companion acreated by the LockUp "DeMoRaLiZeD YoUtH" "Mithrandir III" the LockUp , it to mask the presence of the hidden . ain order to avoid detection by . The may not see the hidden a, so of LockUp are: LockUp-B: hequivalent to the has three differ. : Sweden See: Mithrandir PZPAPN Lockup 3.0 : Lockup 3.0 I: May, S: 2,969 - 2,983 7: PRsA - {3.0+, The Lockup 3.0 in May, . Its . Lockup 3.0 is a wof . /and . , but not cLockup 3.0 Y, the Lockup 3.0 as a low of 3,280 nby Lockup 3.0 in the Lockup 3.0 , it and . rof 2,969 at the $of the rof 2,969 to 2,983 at the end of the b. In both cases, the @and in the DOS to the @and . The in the 7in all Lockup 3.0 "No.1" Pressing the CTRL and Break keys in a hang. PZPAPN : Loki Loki-1237, Merde-5 S: 1,237 - 1,252 7: PRhAK - , NAV, NAV, {3.0+ The Loki, Loki-1237 or Merde-5, Its . Loki is a wof . /and . The Loki is Y, the Loki at the top of &the ), hooking }21 and 71. 4,336 +. It ythe copy of ed to by the /SPEC en mental variable at if it was not the Loki , it rof 1,237 +, while . by 1,237 to 1,252 +. In both cases the at the end of the b. The in the DOS not be . The can be enear the end of all "Loki" Loki \frequent of Loki are: Loki-354: Loki-354 or Merde-6, is a wof . .. Unlike the Loki rof 354 at the end of the in the Loki-973: Loki-973 is a wof . on the Loki . It at the top of &the Y, hooking }21 and 71. Loki-973 rof 973 at the end of the The @and in the DOS not be . The in the 7in all Loki-973 me, I LIKE IT !-Loki-nator!" kfrequently Loki-1234: Loki-1234 is a wof . on the Loki . It at the top of &the Y, hooking ~21. , Loki-1234 /and . rof 1,234 +. . by 1,234 to 1,248 +. In both cases the at the end of the b. The in the DOS not be The in the 7in all Loki-1234 "LOKI" "Loki" kfrequently /and . are PZPAPN Lokjaw : Lokjaw Lokjaw-Drei I: March, acreated; ; noisy Maccess & S: 898 7: SRhC - Spawning , NAV, {3.0+ Dthe 898 ,companion The Lokjaw, or Lokjaw-Drei, in March, . Its . Lokjaw is a spawning or companion creating 898 a. The Lokjaw on the Civil War cLokjaw Y, the Lokjaw at the top of &the ), hooking ~21. , as sby the DOS Bby 4,096 ~12's not be moved. the Lokjaw , it Yby creating an 898 the same base . The actual . not be . The 898 mthe @and in the DOS Gfor the . The in the 898 ,companion ;ing the Lokjaw /(o)" "Lokjaw-Drei" Lokjaw activate, accessing the Mwhile emiting a scraping noise on the speaker. The be unresponsive, requiring the to re (or reset the To dis ya Lokjaw v, the should power off the and ga write-protected, M. The 898 ,companion . ashould of Lokjaw are: Lokjaw-Zwei: , the Lokjaw-Zwei is 894 of the . It :the /(o)" "Lokjaw-Zwei" The Lokjaw-Zwei clear the , or compress the to a 2-line face in the center of the , and access the The be hung and mto be reset. See: Civil War PZPAPN Lord-933 : Lord-933 I: March, j; "beep" speaker S: 933 - 948 7: PNCK - , NAV 3.05 9503+, {3.0+ Dthe 898 ,companion The Lord-933 in March, . Its . Lord-933 is a wof . the Lord-933 Y, the Lord-933 yone . in the G. A "beep" be emitted gthe speaker, and the to run the Lord-933 rof 933 to 948 at the end of the b. The @and in the DOS not be . The are in the 7in all Lord-933 "*.com" "qvCreated by Death Lord" PZPAPN Los-693 : Los-693 S: 693 7: PRhC - ], NAV, , NAV, The Los-693 , and is the . Los-693 is a wof . but not .. It alter the ) but not actually place a copy of the cLos-693 Y, the Los-693 at the top of &the ), as well as alter the sby the DOS Bby 768 to 784 nby the the Los-693 , it rof 693 at the end of the b. The in the DOS to the @and . The in the 7in all Los-693 "Lz" "593?" The "Lz" ocurs at the very end of all a. It is what Los-693 PZPAPN LoveChild-2710 : LoveChild-2710 I: March, j; DOS S: 2,710 7: PRhCK - The LoveChild-2710 in March, . Its . LoveChild-2710 is a cLoveChild-2710 at the top of &the ), hooking }13 and 24. , as sby the DOS Bby 4,096 12's #moved. , the .if it was not , the LoveChild-2710 for any reason. rof 2,710 the ris not . LoveChild-2710 at the end of a. The @and in the DOS not be . No the the LoveChild-2710 find the , the DOS indicate Uon all PZPAPN LowerCase : LowerCase LowerCase-B, LCV 4IBM to ibm in S: 864 7: PNCK - , NAV, 2.1.7+, The LowerCase . Its . LowerCase is a of . LowerCase is Y, LowerCase search the Qand Gfor an y. If it finds an bbefore it encounters bof less , it LowerCase stop searching the bof less +is encountered, not further the LowerCase by 864 +. The at the $of the . If the ;ed the "IBM", the 3it to "ibm" LowerCase Pn't ;any mechanism. of LowerCase are: LowerCase-B: hequivalent to the LowerCase has seven in its differ. PZPAPN Lozinsky : Lozinsky Lozinsky-1018, Lozinsky-1023B S: 1,023 7: PRtCK - ], NAV, The Lozinsky gthe Lozinsky is a wof . Lozinsky is Y, the at the top of &the ~12's be moved so report 2,048 less what is actually |ed. }13 and 21 nby the Lozinsky is , it are for any reason. rof 1,023 +and mthe the end of the @and in the to the @and tby Lozinsky. It is if Lozinsky of Lozinsky are: Lozinsky-1018: to the Lozinsky is five +smaller, adding 1,018 +to the end of Lozinsky-1023B: hequivalent to the has two in its differ. See: Zherkov PZPAPN LPT Off : LPT Off 4; interfers/disables printing S: 256 7: PRxCK - , NAV, {3.0+ The LPT Off , and is . LPT Off is a wof . cLPT Off Y, the LPT Off in a "hole" in low, , hooking }17 and 21. and , as sby the DOS not be the LPT Off , it very small . 256 at the end of the b. The @and in the DOS to the @and . The can be in the LPT Off "(c) LPT Off interfers printing on the printers by disabling the functionality of the 17h PZPAPN Luca-309 : Luca-309 S: 309 7: PRCK - , NAV, {3.0+ The Luca-309 . Luca-309 is a w. It cLuca-309 Y, the Luca-309 in a "hole" in low , hooking ~21. be no the DOS . The yone . in the , the Luca-309 yone . in the rof 309 at the end of the b. The @and in the DOS not be . The in the Luca-309 7in all It is if Luca-309 PZPAPN Lucifer : Lucifer I: May, may dis Italy S: 1,086 7: PRtCK - , NAV, The Lucifer in May, . It is gItaly. Lucifer is a wof . Lucifer is Y, the at the top of &the ~12's is not moved. The DOS report is 1,136 +less expected by the and 21 nby the Lucifer is , it aover 2K in Y. If Y, it by 1,086 hides the rif it is . While most not @and in the , if the was 12:00a, the tand Lucifer is . Lucifer at the end of The Lucifer :two can be , the last of s at the very end of the "Lucifer (C) by C.J." "C.J." It is if Lucifer See: Alfa Damage V1024 PZPAPN Lucky7 : Lucky7 S: 4,496 or 5,488 7: ONAK - 2.1.7+, 12.2 9503+, D& replace The Lucky7 . Its . Lucky7 is a /and . the Lucky7 yall of the . in the G. If all of the . awere tby the , it yall of the . in the mthe c4,496 +of the host by the Lucky7 7. If the smaller 4,496 +, it "4,496 wise, no the c5,488 by the smaller 5,488 +becoming 5,488 In both cases, the @and in the DOS 3to the @and . The can be the 7in all too big to fit in "*.exe" "*.com" "Your clone is "Lucky7"" "Run The cand fourth may be by the Y. The last gthe compiler used by the author of the PZPAPN Lurve : Lurve ARCV-718 I: March, ; DOS England S: 718 7: PRhC - p, NAV 3.05 9503+, 12.2 9503+, {3.0+ The Lurve, or ARCV-718, in March, , and is gEngland. Lurve is a semi- , but not cLurve Y, the Lurve at the top of but &the ), hooking ~21. and , as sby the DOS Bby 2,048 ~12's #moved. the Lurve , it for any reason. rof 718 +, however the ris hidden . The Lurve at the end of the b. The @and in the DOS not be The in the Lurve "[SOLOMoN] ICE-9" "Hello Dr. Sol." "Fido." "Lurve U lots" "ICE-9" "(c) ARCV." "P.S." "Apache sez Hi(Dos)" the DOS the Lurve , it detect Uon all It is what Lurve PZPAPN LV 1.2 : LV 1.2 The S: 477 7: ONK - , NAV, p2.10+, The LV 1.2 gThe . LV 1.2 is a .. It Pnot the LV 1.2 ythe copy of in the root Gof the Q. It s 477 +of the slack (hex 00) area at the end of the b. The not be . The @and the DOS to the @and . The ;ed in the .IS INFECTED by VIRUS LV .1.2 !!!" PZPAPN Lycee : Lycee Lycee-1788, Lyceum seconds set to "00"; S: 1,788 7: PRhAK - , NAV, 12.2 9503+, The Lycee, or Lycee-1788, . It is gthe . Lycee is a wof . /and . .. It employs techniques to avoid detection and quickly spreads the cLycee Y, the Lycee at the top of but &the , as sby the DOS by 2,368 }08, 09, and 21 nby Lycee , the Lycee .if it was not the Lycee , it Y, copied, or for any reason. 1,788 +, but the be hidden . The Lycee can be eat the end a. The in the DOS the seconds field is set to "00", may ing to ma blank . No in the Lycee the Lycee Uon all the DOS of Lycee are: Lycee.944: A 944 of the Lycee , Lycee-944's is 1,472 +, hooking rof 944 be hidden the . The @and the DOS not be Lycee-1832: A 1,832 of the Lycee , Lycee-1832's is 2,416 +. It hooks 08, 09, and 21. rof 1,832 be hidden . The seconds field in the in the DOS be set to "02". The in the 7, and hence not "Welcome to Lycee of zTechnologies !" Lycee-1888: A 1,888 of the Lycee , Lycee-1888's is 2,928 +. It hooks 09, 13 and 21. rof 1,888 be hidden . The qseconds field, not be Lyceum.1901: A 1,901 of the Lycee Lyceum.1901's is 2,944 +, hooking }08, 09, 13 and 21. rof 1,901 be hidden . The qseconds field, not be Lycee-1975: A 1,975 of the Lycee , Lycee-1975's is 2,576 +. It hooks 08, 09, and 21. rof 1,975 +, the ris not hidden . The @and in the DOS . No in the may detect as the "Feist" PZPAPN Lythyum : Lythyum j; hidden Mroot S: 502 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Lythyum , and is . Lythyum is a of . .. It was written by a member of the Virulent Graffiti writing group. Lythyum Y, the Lythyum yone . in the 502 at the end of the b. The @and in the DOS . The in the Lythyum "lythyum, the attitude adjuster, ViRuLeNT GRaFFiTi" "\Lythyum.hi! *. tall of the . ain the G, it create a hidden b, LYTHYUM.HI!, in the Q's root the next The hidden ;the of Lythyum are: Lythyum-B: to the Lythyum , Lythyum-B is a very minor PZPAPN : LZ Noon Beep acreated The S: 5,085 - 8,847 7: SNA - Spawning NAV, 1.05+ The LZ . It is . LZ is a spawing the . it not LZ is t, the LZ search the Gfor . . For it encounters, the check to see if a corresponding . the same base . If is not, the create one. The created . ;the 7, and be 5,085 to 8,847 The @and be identical to the @and in the DOS The LZ spreads by the executing a . executing the base . Since DOS bbefore a . , the 7in the . has completed [, it load and Zthe corresponding . 7is LZ X'd, and the . acreated by the ;the typically ;ed in LZ-2: in The , LZ-2 is a later of the LZ . It yup to three . in the Q's root ever an Y. The corresponding . 5,106 to 9,141 same ?in the DOS the : The PZPAPN : LZRQ Whit BSC; S: N/A 7: BRtX - ], NAV, : CleanUp, M- M, or DOS SYS on The LZRQ . LZRQ is a and the ). It s to be related to the Den Zuk The ga LZRQ the LZRQ at the top of &the ), moving ~12's , as sby the DOS Bby 2,048 , the ythe if it was not the LZRQ , it ythe of any non-write protected Kaccessed on the On 360K 5.25" K, the write one 7to Side 1, Cylinder 39, 8, and copy the to Side 1, Cylinder 39, 9. The the at Side 0, Cylinder 0, On 1.2M 5.25" K, the write one 7to Side 1, Cylinder 79, 14, and copy the to Side 1, Cylinder 79, 15. The the at Side 0, Cylinder 0, On the M, the mwritten one 7to Side 0, Cylinder 0, 2, and copied the to Side 0, Cylinder 0, 3. The s the at Side 0, Cylinder 0, The s in the 7is "LZRQ", it in the extra 7, not the See: Den Zuk PZPAPN M.I.R. : M.I.R. I: May, j; BSC; .SYS (failures; garbling of S: 1,745 7: PRhAK - , NAV, a, & DOS SYS The M.I.R. in May by the PCVRF. It is is a of . /and . .. It modifies and .SYS cannot areas. The M.I.R. is Y, the at the top of &the }21 and 27 nby the sby the DOS be 3,584 +less is expected. At , the modified, the modification Pnot in an yious copy of the M.I.R. is , it /and . are at least 2K in rof 1,745 +, while by 1,745 to 1,759 +. In both cases, the at the end of the b. M. I. R. Pnot hide the r, nor alter the @and in the DOS One can be near the $of the "#.I.R. *-*-*-* Sign of the As an M.I.R. vprogresses, the bMSDOS.SYS may tby the Pnot yious copy of the , but is damaged. a M.I.R. modified and MSDOS.SYS, as well as an in a garbled @and , followed by the hanging. It is if M.I.R. See: PZPAPN Maaike : Maaike Maaike.164 S: 164 7: ORsE - ]2.17+, 12.2 9503+, 2.17+ The Maaike . The sample was gThe dmonth a ga public domain vin Canada. Its . Maaike is a destroys . and interfers operation. cMaaike as a low TSR, hooking ~21. The ed to the DOS prompt. the Maaike [of an . in the replacing the . a 164 ,copy of . The 164 mthe same as the @and . The hidden attribute be set, thus the Dd. No in the [of . the Maaike in the "Bad The . aare un , and function if the not /and . primarily of the "Write fault Vwriting device AUX" or write protect gwrite protected of Maaike are: Maaike.250: A 250 of the Maaike :the "Maaike I Love You !" : Canada May, Maaike.757: , Maaike.757 is a 757 of the Maaike . Its low TSR is 1,024 +, hooking }21 and 22. [of an . in the replacing the a copy of "copy" be 757 , and mthe hidden attribute set in the DOS G. The @and be the @and The in the Enemy(c) Metal Militia/Immortal Riot" "I'm hurt, machineguns firing behind my back" "Never had no chance, no way to do a attack" one sure is the last i guess" "Heading for a private deathrow, nothing less" "Blood, quickly pumping out gthe vound in the vain" "Damn, moment makes you sort of go insane" "Close my eyes, had much left to see" "Was my fault, but did mto do it, gee?" "Promise me, hit you remember" "Take one of them down before winter comes in "Why month?Well, i like it very much" "Fresh, cool air, wonders of the snow to touch" "The world is wonderful, what else to say?" "Just remember shit, cause it happends every day" the Maaike.757 , all fail to function PZPAPN Macedonia : Macedonia S: 400 7: PRC - 1, NAV, a, & DOS SYS The Macedonia . Its . Macedonia is a wof . The Macedonia is Y, the be no sby the DOS by the Macedonia is , it occasionally rof 400 at the end of the be no 5to the @and in the DOS . The can be in the 7in Macedonia "MacedoniaToTheMacedonians" It is if Macedonia PZPAPN MacGyver : MacGyver j; TSR; DOS Taiwan S: 2,824 7: PRsE - , NAV, 12.2 9503+, {3.0+ The MacGyver . It is Taiwan. is a cMacGyver Y, the MacGyver as a low TSR of 3,072 nby the the MacGyver , it rof 2,824 at the end of the b. The r, however, be hidden by the MacGyver is . The @and in the DOS . The in the MacGyver 7in all "SCANVIR.SHW" The in the 7, thus it is not "SCAN ZTEST XGOD MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN" the MacGyver \frequent ly, the DOS indicate Uon all of MacGyver are: MacGyver 2.2: MacGyver 2.2 is a 3,160 of the MacGyver . Its TSR is 3,648 +, hooking ~21. It /and . are . It Pnot copy. the MacGyver 2.2 rof 3,160 be hidden . No the 7, and the in the DOS not be : Taiwan PZPAPN Madismo : Madismo S: 6,007 7: ONE - , NAV, The Madismo . Its . Madismo is a the Madismo access both the C: Qand the yall . in the are larger 6,000 completes , it Othe to the DOS prompt: "Madismo Strikes Again!" mthe c6,007 the Madismo 7. The @and in the DOS to the . The in the "C:\ "MADISMO *. X>MADISMO.TXT" "MADISMO.TXT" ereading "Abort, Retry, Ignore, Fail?" "Madismo Strikes Again!" "*.*" "No matching the Madismo are permanently corrupted since the Pnot store the 6,007 should be replaced copies. PZPAPN : Mad j; DOS ?decade set to "2" S: 2,400 7: PRhA - ]2.17+, 7.00+, p2.10+, 2.71+, 12.2 9503+, 7.00+, 2.71+, 2.17+ The Mad . It gMoscow. Mad .B is a semi- /and . a, but not It is what it at the top of but &the ), not moving ~12's , as sby the DOS Bby 2,672 21 and 93 nby the the Mad , it and . very small ones and , or copied. by 2,400 hidden . The at the end of the b. The @and in the DOS the decade in the @is set to "2". The the 7in all Mad requires MS-DOS 3.30 or later." The Stainless Steel TechRat , v1.1, 28.05.94, (C) -94 by Mad Labs, Moscow, Russia" "WYSINWYG (What you see is NOT what you get)" ks to H. Harrison" "Story 1 of 7 : The Stainless Steel TechRat is Born" The DOS Uon all the Mad PZPAPN Magician : Magician Keybug S: 980 - 996 7: PRhAK - 12.2 9503+, The Magician . Its . Magician is a /and . cMagician at the top of &the ), not moving ~12's , as sby the DOS Bby 3,008 }09 and 21 nby the the Magician , it by 980 at the the by 980 to 996 at the end of the b. The @and in the DOS not be The in the Magician "The Black Magician. Copyright (c) "KEYBUG gThe Black Magician" PZPAPN Magnitogorsk 2048 : Magnitogorsk 2048 I: May, S: 2,048 7: PRhAK - , NAV, The Magnitogorsk 2048 Win May, . It is gthe . Magnitogorsk 2048 is a later of the 2560 , and utilities detect it as 2560. The Magnitogorsk 2048 is Y, the at the top of &the and , as measured by the DOS Cby 4,160 }08, 13, 21, and 22 nby the Magnitogorsk 2048 is , it and . larger 2,048 at the end of the . The @and in the not be Magnitogorsk 2048 it is Y. In the case of ., the not many ras the portion of .'s stack space. Magnitogorsk 2048 is a , as is 2560. While es do not hide do actively use techniques to avoid detection by utilities not aware of them. It is if Magnitogorsk 2048 See: 2560 PZPAPN Malaga : Malaga (failure on S: 2,612 - 2,626 7: PRshAB - X, & NAV, The Malaga . Its . Malaga is a wof . /and . , as well as the Kand Pnot .. It is a it imploys a technique to the Brain to hide the The the Malaga the Malaga as a low TSR of 5,168 +, hooking }08, 13, and 21. At , it ythe of the Q, and the in the Later, gthe L, the fail if it is a L, but the Malaga QDOS (ing gthe in the becoming at the top &the , as sby the DOS Bby 4,096 the Malaga , it yone . Zs any a DOS DIR 8is issued. ( a DIR 8is performed v, or is as a low TSR.) In the case of [, it the =ly executing if it was not the Malaga rof 2,612 to 2,626 +, the at the end of the . The @and in the DOS not be . The can be in the 7in all "MSDOS4.0" In the case of the , the and a copy of the Malaga be written to the Mstarting at 0 of the last side or track of the M. The precede the copy of the Since Malaga is a regards to the v, if you check your utilities and find it on a, you need to power off the and check the again (ing , write-protected wise, the vmay be missed, and you promptly It is if Malaga of Malaga are: Inofensivo: on the Malaga , Inofensivo is a 2,661 . Its is 5,184 +, hooking }08, 13, and 21. , it /and . Y, as well as one a DOS DIR 8is issued. 2,661 to 2,674 at the end of the b. The @and in the DOS not be . The can be in the in all Inofensivo "inofensivo "MSDOS4.0" Malaga-B: to the a minor has nineteen differ gthe PZPAPN Malaise : Malaise V-IVL110 France S: 1,357 - 1,371 7: PRhAK - , NAV, 1.05+, {3.0+ The Malaise Iin France in . Malaise is a wof . /and . The the Malaise Y, the Malaise the top of &the ). It not move ~12's , as measured by the DOS by 4,096 nby Malaise in the Malaise , it by 1,357 to 1,371 at the end of the b. The in the DOS not be Several can be in the 7in Malaise "Welcome into the "(c) Info "Laborato "V-IVL110" "To inactivate me,just set to "*" the "in brackets:" "[#]" "Next , be more prudent !" Malaise Pn't to do of Malaise are: Malaise-524: on the Malaise by the Locks. Malaise-524 is a 524 wof . .. Its is 1,024 +, hooking }1C and 21. , it Y, increasing by 524 +. The @and in the DOS to the and . The can be the 7in all Malaise-524 /com" The at the end of the : France May, Malaise-1743: on the Malaise is 2,000 +, hooking 21. , it ythe copy of in the C: root Gif it was not Malaise-1743 xone . /or . in the a DOS DIR 8is issued. 1,743 to 1,757 at the end of the b, however the hidden . The @and in the DOS . No in the Malaise-1743 a sluggish response to DOS DIR 8, and the DOS : France Malaise-B: to the has had the "[#]" 3to "[*]". : France PZPAPN Malign : Malign Malign-575 ?minutes set to 01; interfers DOS Dir S: 575 7: PRhCK - , NAV, {3.0+ The Malign, or Malign-575, and is gthe . Malign is a wof . cMalign Y, the Malign at the top of &the ), hooking }21 and 22. , as sby the DOS Bby 2,304 , the Malign ythe copy of in the C: Qroot the Malign , it , or a DOS Dir is performed. of 575 at the $of the b. The in the DOS the minutes field be set to "01". The in the Malign 7in all "Malign$?" "*.com" Malign may interfer Oof output gthe DOS Dir qthe addition of a line for a "Malign of Malign are: Malign-630: A 630 of the Malign . It :the "Malign$Wait" "*.com" PZPAPN Malmsey : Malmsey fail to function Canada S: 495 7: ONCK - can, p, NAV, 12.2 9503+, {3.0+ The Malmsey , and was written by a person using the Lucifer Messiah. Malmsey is Canada. is a .. A later of the , Malmsey 2 &, is a the Malmsey Y, the Malmsey yone . in the c495 +of the host b. The @and in the DOS to the @and . The can be ein all Malmsey "[Malmsey Habitat v. 1.3]" "Warmest Regards to RABID" g-- ANARKICK SYSTEMS!" Malmsey Pn't to do be permanently corrupted. of Malmsey are: Malmsey 2: A later of the Malmsey xone . rof 1,703 to 1,717 at the end of the b. The Malmsey 2 , adding an 1,712 v. The @and in the DOS not be . The can be ein the 7in Malmsey 2 "Malmsey Habitat v. 2.0" "Lucifer Messiah -- ANARKICK SYSTEMS 07-18-" "Hap Birthday : Canada Malmsey 3 Beta: A later of the Malmsey 2 is a wof . /and . .. It at the top of &the DOS ), hooking }3 and 21. and , as sby the DOS Bby 2,048 , Malmsey 3 Beta /and . rof 806 at the end of the b. The @and in the DOS not be . The may be Nby the "Gotcha! [MALMSEY HABITAT v3. Lucifer Messiah -- ANARKICK SYSTEMS" in the : Canada March, PZPAPN Maltese Amoeba : Maltese Amoeba Irish, Maltese <; flashing (failure Malta Ireland S: 2,504 - 2,564 7: PRtA - , NAV, The Maltese Amoeba Iin Ireland in . Its , however, is Malta. At the of its it was t to be wide-spread in Ireland. The Maltese Amoeba is a wof . /and . a. It The Maltese Amoeba is Maltese Amoeba at the top of &the Cby 4,096 +, and ~12's #moved. Maltese Amoeba hook , Maltese Amoeba /and . by 2,504 to 2,564 +, the at the end of the be no 5in the @and in the DOS The Maltese Amoeba is a destructive on ATs on March 15 and 1. On @s, it cfour of cylinders 0 through 29 of the Qand any Qs. has completed over- writing the $of the c30 cylinders of Q, it proceed to a bright, flashing O, leaving the in a loop. is re (ed, the dpoem N, followed by a hang: "To see a world in a grain of sand, And a heaven in a flower Hold infinity in the palm of your hand And eternity in an hour. THE VIRUS 16/3/91". T, so the cannot be seen in in the "AMOEBA by the Hacker Twins (C) is nothing, wait for the release of AMOEBA II - The universal w,hidden to any eye by ours! Dedicated to the University of Malta-the worst educational in the universe,and the destroyer of 5X2 years of human life". in the of the has activated. of Maltese Amoeba are: Maltese Amoeba-B: A minor of the Maltese Amoeba adds 2,504 to 2,571 the . /and . at the end of the b. The in the , as well as the poem "AMOEBA by the Hacker Twins (C) is nothing, wait for the release of AMOEBA II The universal w, hidden to any eye by ours! Dedicated to the University of Malta- the worst educational in the universe, and the destroyer of 5X2 years of human life." : Malta PZPAPN Mannequin : Mannequin ; interference printing S: 778 7: PRhA - p, NAV, The Mannequin . Its . Mannequin is a wof . /and . a. It Pnot The Mannequin is Y, the Mannequin at the top of &the , as sby the DOS Bby 848 ~12's #moved. }17 and 21 nby the Mannequin the Mannequin , it and . rof 778 at the end of the b. The @and in a DOS . Two can be in the 7in Mannequin "RQSP2" Mannequin may \difficults or interference to print to the printer. PZPAPN Manola : Manola Manuel Spain S: 957 7: PRhC - 1, NAV, The Manola gSpain. It is wof . , but not The the Manola the Manola at the top of &the ~12's #moved. , as sby the DOS by 976 nby the Manola At the of becoming , the Manola check to see if the dtwo t, and ythem if are not C:\DOS\FORMAT. C:\DOS\KEYB. the Manola , it rof 957 The at the end of the . The @and in the DOS The can be in the all Manola "Soy un Manuel de tipo C" "C:\DOS\FORMAT. /C:\DOS\KEYB. "KEYBOARD.SYS" It is if Manola of Manola are: Manuel.B: , Manuel.B is on the Manola . Its is 2,560 +, hooking ~21. Manuel.B but not . It ythe copies of FORMAT. /and KEYB. in the C:\DOS were not 2,482 at the end of the b. The @and in the DOS not be . The in the "C:\DOS\FORMAT. /C:\DOS\KEYB. "*.com" "Soy un Manuel de tipo B" : Spain PZPAPN Manta : Manta j; AUTO XC.BAT & CONFIG.SYS replaced; fail to S: 1,077 7: PNCK - , NAV, The Manta . Its Manta is a wof . .. Manta is on the VCS Manta is Y, up to four . ain the Gmay be tby the Manta ly, the may be N, and the AUTO XC.BAT and CONFIG.SYS QC: may be replaced: "RAM Parity V@ 0F67:1B2C (C)ontinue (S)hut off NMI (R)e If C is entered for "Continue", the most likely function A blank entry may be created in the Gfor a 512 Pnot always the Manta 1,077 +, the at the end of the The 512 replaced AUTO XC.BAT and CONFIG.SYS on ;the , and several lines of in German. See: VCS PZPAPN Marauder : Marauder Canada S: 860 7: PNAK - p, NAV, The Marauder . It is gCanada. Marauder is a .. It is destructive _2nd of any year. Marauder is Y, the Marauder search the Gfor an y. If the Marauder Pn't find a yin the G, it move up one level in the Gstructure and check for an If it still hasn't b, it continue searching upward in the Gstructure. If the root is r Red, it search down through the structure for a candi a candi e, the yit and the Marauder rof 860 at the end of the be no 5to the @and DOS Marauder is an and no in the _2nd of any year, the Marauder activate. @, the Marauder ain the repeated over and over again: "= [Marauder] Hellraiser - Phalcon/Skism." The @and to the @and in the DOS of Marauder are: DeadPool: , DeadPool is a 560 of the Marauder . It xone . Y. If Pnot exist in the G, it search one G. If an is still not e, it jump to the Q's root DeadPool rof 560 at the end of the be no 5to the @and in the DOS . The in the DeadPool "Deadpool by Phalcon/Skism" DeadPool the 808th generation of v, at the word "Deadpool" d on the : USA See: Marl PZPAPN March 25th : March 25th corrupts MFAT & possibly aon 3/25 S: 1,026 - 1,040 7: PRhAK - NAV 3.05 9503+, 12.2 9503+, 2.17+ The March 25th . Its is a wof . /and . .. It is destructive on March 25th of any year. cMarch 25th at the top of but &the ), hooking ~21. and , as sby the DOS Bby 1,056 ~12's be moved. , the March 25th /and . on the . It .on the of 1,026 to 1,040 at the end of the b. The @and in the DOS not be . No in the The March 25th on March 25th of any year. At , the the . It may corrupt /and . PZPAPN Mardi Bros : Mardi Bros BSC; volume label France S: N/A 7: FR - Floppy ], NAV, : CleanUp, M- M, or DOS SYS The Mardi Bros in France. is a wof floppy Pnot the Mardi Bros , the . It resides in 7,168 the top of , but &the DOS ). The can be seen using the DOS 8, or several mapping utilities. Mardi Bros yany non-write protected exposed to the Kcan be easily identified volume label 3to "Mardi Bros". The show the dfor the L's Volume label "Volume Mardi Bros created ira 0, 1980 12:00a" While the on the mthe DOS still remaining, it include the dphrase near the end: "Sudah ada vaksin" It is if Mardi Bros is destructive, it s to do nothing but spread. Mardi Bros can be removed cpowering off the and re (ing clean write protected DOS L. The DOS SYS 8should be used to replace the . Alternately, M can be used dthe power-down and re PZPAPN Mark II : Mark II Mark ][ S: 350 - 351 7: PNCK - NAV 3.05+, 12.2 9503+, {3.0+, 1.05+ The Mark II, or Mark ][, . Its . Mark II is a wof . the Mark II yone . in the by 350 to 351 the at the end of the b. The and in the DOS to the @and . The can be in the 7in all Mark II Mark II Pn't to do PZPAPN Marked-X : Marked-X ; TSR; ?"dis gDOS DIR fail to function S: 354 7: ORsAK - 12.2 9503+, 2.0+, 2.17+ The Marked-X . Its . Marked-X is a /and . cMarked-X as a low hooking ~21. A hang may , the may be ed to the DOS prompt, or unexpected s may the Marked-X , it the c354 by the 7. The and in the DOS "dis ed", mactually #set to a value of "0-00-80 12:00:00 am". The the 7in all "Marked-X" we ever learn to talk "(c) Metal Militia/Immortal Riot" "In any country, prison is where society sends it's" "failures, but in country society is faily" "Bad The last may be Nas a Marked-X permanently corrupts the x. All should be Dd and replaced backup copies. PZPAPN : Marl S: 560 7: PNCK - F: NAV, , NAV 3.05 9503+, The Marl . Its , is . Marl is a wof . the Marl Y, the Marl search the Gand ythe it finds. If G, it may the Marl rof 560 +. The at the end of the . The @and in the DOS not be . No in the Marl Pnot to do , and is an earlier of the Marauder See: Marauder PZPAPN Marzia : Marzia j; MBR ( ?seconds = "62"; <; DOS Pisa, Italy S: 2,048 7: PRhAKX - X, & MBR p, NAV 3.05+, {3.0+ aand repair MBR The Marzia in Pisa, Italy in . Marzia is a , multi-partite /and . ., as well as the (record ( cMarzia Y, the Marzia at the top of the ), hooking ~21. , as sby the DOS Bby 3,072 ~12's not be moved. , the ythe (record ( ) if it was not the Marzia , it rof 2,048 be hidden . The at the end of The @and in the DOS not to be the seconds field set to "62". The can be in the 7in all "MARZIA" "MARZIA3" The Marzia Pnot yvery small . :destructive (record 2 hours becoming s of may notice the DOS indicate Uon all of Marzia are: Marzia.N: , Marzia.N is a 2,048 . It :the "DV" "DVv1.00a3" PZPAPN Matura : Matura j; unexpected accesses to C: S: 549 7: PNCK - , NAV, 12.2 9503+, The Matura . Its . Matura is a wof . the Matura Y, the Matura yone . on the and one on the C: rof 549 the end of the b. The @and in the DOS not be . The can be ein all Matura "c:*.com" It is what Matura , but it destructive of Matura are: Matura 92: on the Matura is a . It at the top of &the ), taking up 1,776 +, and hooking 21. , it /and . the exception of by 1,626 to 1,641 at the end of the b. In the case of is no as the s a portion of the hex "00" slack area. 5in the DOS @and s on a. The are in the 7in all "exe /MAND" "MATURA92" PZPAPN : Max BSC, Buenos Aires, Argentina S: N/A 7: BRX - , NAV, 12.0+, The Max in Buenos Aires, Argentina in Max is a and the ). It is destructive The Max , the Max at the top of &the , as sby the DOS Bby 2,048 , the Max ythe is too large to fit entirely in the , so the extra portion of the be written to Side 0, Cylinder 0, 2. The eat Side 0, Cylinder 0, the Max , it ythe of any non-write protected is accessed on the . On 360K 5.25" K, the extra portion of the 7and the of the be written to the last two of the The Max on what would to a as a random basis. , it s the gthe PZPAPN Max.347 : Max.347 (Record S: 347 7: PRtXCK - 12.2 9503+, a& F- M/MBR on DOS 5.0+ The Max.347 . Its . Max.347 is a multi-partite xthe ) and . cMax.347 ythe , moving the to Side 0, Cylinder 0, 2. The not residence gthe Max.347 at the top of , but the ), moving ~12's and , as sby the DOS Bby 1,024 the Max.347 is , it of 347 at the end of the The @and in the DOS not be . The in the "[Max]" PZPAPN Mayak : Mayak Jews2 /, .SYS, & . slowdown; TSR; S: 2,339 7: PRsAK - X, & .SYS , NAV 3.05+, 1.05 9503+ The Mayak . Its . Mayak is a X, and .SYS . It employs techniques to avoid detection. cMayak /or . the Mayak check .SYS areferenced in the C: CONFIG.SYS b, and .SYS it completes a, it not be , and The next gthe C: Q, the Mayak gthe t.SYS referenced in the C: QCONFIG.SYS b. The in the Config area of allocating 2,464 by Mayak. the Mayak , it rof 2,339 at the end of the b. The r, however, not be Mayak is The can be ein the 7in all Mayak "Jews-2 . MSU "c:\config.sys device" ".com.exe.bin.sys" s of the Mayak may notice is running slower, and the of Mayak are: Mayak-2370: Mayak-2370 is a 2,370 of the Mayak or Jews2 . Its 2,720 +, hooking Y, adding 2,370 Mayak-2370 may accessing the Qs, " Vin exe , and are PZPAPN Mayberry : Mayberry I: May, j; DOS Sweden S: 402 - 828 +, depending on present 7: PNRhtAK - /and/or . , NAV 3.05 9503+, 12.2 9503+, 7.00+, 2.17+ The Mayberry is actually a group of eleven gSweden in May, . The group or the exception of one, refer to 6in the 1960's television "The Andy Griffith Show". The exception refers to the character Jethro, is not television of the Mayberry es are ws of , either . X, or both, while are ws. Two of the es in the ^are fast &is a brief description of the Mayberry es. don't to do member(s) of the Mayberry ^are: Mayberry.402: Mayberry.402 is a 402 wof . .. It xup to two . rof 402 at the end of the b. The @and in the DOS not be . The in the "[BW] Velmalou (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.409: Mayberry.409 is a 409 , but not .. It at the top of &the ), hooking ~21. , as sby the DOS Bby 1,024 , it rof 409 at the end of the b. The @and in the DOS not be . The in the "[BW] OPY (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.475: Mayberry.475 is a 475 wof . .. It xup to three . rof 475 the end of the b. The @and in the DOS not be . The in the "[BW] Jethro (c) by HypoDermic! Part of the Mayberry ^! (Huh!" : Sweden May, Mayberry.496: Mayberry.496 is a 496 wof . .. It xone . of 496 at the end of the b. The @and in the DOS not be . The in the "[BW] Barney (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.502: Mayberry.502 is a 502 wof . . It xtwo . rof 502 the at the end of the b. The @and in the DOS not be . The in the "[BW] Floyd (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.609: Mayberry.609 is a 609 /and . , but not .. It at the top of the ), hooking }21 and 24. , as sby the DOS Bby 1,024 , it /and . of 609 at the end of the b. The @and in the DOS not be . The in the "[BW] ANDY (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.687: Mayberry.687 is a 687 wof . /and . , but not .. It xone . /or . rof 687 at the end of the b. The @and in the DOS not be . The in the "[BW] GoMer (c) by HypoDermic!! Part of the Mayberry ^!!!" "*.*" : Sweden May, Mayberry.732: Mayberry.732 is a 732 wof . /and . .. It xup to three . /or . rof 732 at the end of the b. The in the DOS not be The in the "[BW] AuntB (c) by HypoDermic!! Part of the Mayberry ^!!!" "*.*" : Sweden May, Mayberry.747: Mayberry.747 is a 747 wof . /and . .. It xall of the . /or . in the rof 747 at the end of the The @and in the DOS not be . The in the "[BW] Otis (c) by HypoDermic!! Part of the Mayberry "*.* .." : Sweden May, Mayberry.758: Mayberry.758 is a 758 /and . , but not .. It at the top of but &the ), hooking ~21, and moving ~12's , as sby the DOS Bby 1,024 , it , but not on copy. of 758 at the end of the be hidden . The @and in the DOS to be the seconds field #set to "08". The in the "[BW] Miss Crump (c) by HypoDermic!! Part of the Mayberry ^!!!" : Sweden May, Mayberry.828: Mayberry.828 is a 828 /and . , but not .. It at the top of but &the ), hooking ~21. , as sby the DOS Bby 2,048 , it /and . of 828 at the end of the be hidden . The @and in the DOS to be the seconds field #set to "44". The in the "[BW] Goober (c) by HypoDermic!! Part of the Mayberry ^!!!" Mayberry.828 may DOS detecting Uon all : Sweden May, Mayberry.Dementia: Mayberry.Dementia is a 1,027 wof . /and . .. It xone . /or . rof 1,027 at the end of the b. The @and in the DOS not be . The in the "[BW] [DP/4] Dementia Praecox MnemoniX '94" "*.*" : Sweden PZPAPN Medical : Medical (failure; [failure Republic of South Africa S: 189 7: PNCK - NAV, The Medical . It is gthe Republic of South Africa. Medical is a wof . the Medical Y, the attempt to yone . in the G. The vattempt is not always successful, and in a corrupted b. Both corrupted and rof 189 +. On , the at the end of the b. Corrupted to the end of the b. The @and in the DOS "0-00-80 12:00:00", and as a , the @and not in the DOS the Medical not function has attempted to yone bin the G, the either be ed to the DOS prompt or a hang may tor corrupted in a hang. PZPAPN Meditation : Meditation Guru S: 299 7: PNCK - , NAV, 12.2 9503+, The Meditation . Its . Meditation is a wof . the Meditation Y, the Meditation yall of the . in the rof 299 at the of the b. The @and in the DOS not be . The in the 7in all Meditation "Software Failure. Task Held. Guru Meditation #456789:#34567 It is what Meditation of Mediation are: Meditation-B: to the Meditation has one differs. PZPAPN Lapse Lapse Lapse-323 S: 323 7: PNC - 12.2 9503+, {3.0+ The Lapse, or Lapse-323, . Its Lapse is a wof . but not Lapse ythree . in the 323 at the end of the b. The @and in the DOS . The in the 7in all Lapse "*ML.C?M /MAND." Lapse.323A (05/28/93)" "Copyright (c) Lapse" It is what Lapse may do Lapse are: Lapse-375: A later of the Lapse xthree . rof 375 at the end of the b. The in the 7and are not "*ML.C?M /MAND." Lapse.375A (05/29/93)" "Copyright (c) Lapse" See: Chromo 1.0 PZPAPN Mercenary : Mercenary S: 854 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Mercenary . Its . Mercenary is a wof . cMercenary at the top of but &the ), not moving ~12's , as sby the DOS Bby 7,040 nby Mercenary in the Mercenary , it rof 854 at the end of the b. The @and in the DOS not be . The in the Mercenary 7, and are not "Mercenry Virii V.1 written by Lupus Yonderboy" "Greets to all of Phalcon / Skism (who don't know i exist)" "Welcome to the wonderful world of VIRII" "You are now in possession of the Mercenry Virii." "By Lupus Yonderboy" "Chaos Mr. Who." is our mode and modus" "Hail to the Succubi" PZPAPN Mercy : Mercy Systers Of Mercy S: 1,151 - 1,165 7: PRhE - 12.2 9503+, The Mercy or Systers Of Mercy Its . Mercy is a wof . cMercy at the top of &the DOS ), not moving ~12's , as sby the DOS Bby 1,824 }08 and 21 by the the Mercy , it rof 1,151 to 1,165 at the end of the b. The @and in the DOS not be . The in the 7in all "SYSTERS OF MERCY V2.0 MS 94" It is what PZPAPN Merry Xmas : Merry Xmas j; TSR; "Silent Night" played & S: 1,694 - 1,708 7: PRsE - , NAV, 12.2 9503+, {3.0+ The Merry Xmas . Its . Merry Xmas is a wof . . It plays music during the Christmas season. cMerry Xmas Y, the Merry Xmas as a low TSR of 2,016 }21 and 63 the the Merry Xmas , it rof 1,694 to 1,708 at the end of the b. The @and in the DOS not be . The can be in the Merry Xmas 7in all "Merry Christmas and happy new year ! Written gTamsui Oxford College." During the Christmas season, the Merry Xmas ' TSR 2,000 , and hook }08, 21, and 63. It play "Silent Night" on the speaker, and Othe as a for a few minutes. A hang PZPAPN Meta-2048 : Meta-2048 I: May, j; DOS S: 2,048 7: PRhAK - {3.0+ The Meta-2048 in May, . Its . Meta-2048 is a wof . /and . larger cMeta-2048 at the top of &the ), hooking }09, 1C, and 21. , as sby the DOS Bby 8,336 12's not be moved. the Meta-2048 , it and . larger 2K in are 2,048 +. The at the $of . , and the end of . a. The be hidden on were became , but not on those were tbefore the became the last . The in the DOS not be . The in the Meta-2048 "Producte" "Mr. Watshira Sae-eu KMIT-NB @12/28/ BIOS" "BIOS" the Meta-2048 find the DOS of the . The interfer input. PZPAPN Metallica II : Metallica II fail to function; S: 1,129 - 1,143 7: PRtA - p2.10+, 12.2 9503+, {3.0+ The Metallica II , and to be gthe . Metallica II is a /and . , but not cMetallica II at the top of &the ), moving ~12's to 9F80. , as sby the DOS 2K. nby Metallica II in , the Metallica II /and . by 1,129 +while . by 1,129 to 1,143 +. In both cases, the at the end of the b. The @and in the DOS , but usually not to the @and . The can be in the 7in all Metallica II "Metallica Ver 2.0" "AIDS /MAND" "(c) Moscow 92" \frequent gwrite protected not function PZPAPN Mexican Mud : Mexican Mud seconds = 62 Sweden S: 575 7: PRaCK - , NAV, The Mexican Mud . While it can be assumed to be gMexico, it is believed to actually #written in Sweden. Mexican Mud is a wof . .. It is on the The Mexican Mud is , hooking ~21. , as sby the DOS not be the Mexican Mud , it Y. If Y, it the Mexican Mud rof 575 at the end of the b. The @and the DOS to be the seconds field in the #set to 62. the Mexican Mud \frequent inadvertantly by an See: PZPAPN : MG j; DIR 8may not function S: 500 7: PRCK - , NAV, The MG it has mentioned by *n researchers several s since d MG as it was Matematicheska Gimnazia, a school in Varna, *. It is a wof . The MG is Y, the in a portion of the ~24 is nby the , as are several MG is , it one of two things s: either the Zany or a DIR 8is performed. In the case of a Y, the yone in the not necessarily the a DIR Y, one in the tas well. by 500 not be in a DIR if the @and in the Gare . The the end of of a MG vare the DOS show Uon all if the is present in . The DOS DIR 8may function , for example DIR A:*. yield " e" even aexist on the A: Q. At s, pauses in the the DIR 8. An symptom is unexpected may due to the of MG are: MG-2: MG-2 is a .. It is very to the MG it is MG-2 Bby 55,104 +. MG-2 remaps many ~24, and may allocate it is , it in the by 500 not be if the . The at the end of the MG-3: to MG-2, to avoid detection. It is MG-3B: to MG-3, video card a "hook" left in low 5at all . MG-3B be ms as both a and in w. . Y, as well as uone in the in the a DIR 8is issued. PZPAPN : MGTU j; excessive Mactivity; /Path not S: 273 7: PNCK - ], NAV, The MGTU and came is a wof . the MGTU Y, the search the Qand Gfor . All the of 273 at the end of the @and in the to the @and Oexcessive Mactivity activity s because the is checking all of the . in the to determine if are already t, or if need to be \the cannot see line parameters %passed to them, /having replaced the parameters: /Path not MGTU Pnot do PZPAPN Mich II : Mich II Michelangelo II j; TSR; beeping, S: 924 7: PRsC - p2.10+, 12.2 9503+, 7.00+ The Mich II , and is . Mich II is a wof . , but not .. Its is derived in the Non Marth 6th of any year. cMich II as a low of 1,488 +. It }21 and 2F. , the Othe "Bad , Mich II yone . bin the target a DOS DIR 8is issued. rof 924 at the $of the b. The @and in the DOS not be . The in the Mich II "It is March 6th, for MICHELANGELO ][ to trigger." "YES! An one. is brought to you by:" "CRYPT KEEPER. HAVE PHUN" .IBMBIO. /IBMDOS. "Bad On March 6th of any year, out Mich II , the cthree lines of Nas a on the is accompanied by beeping, and a hang PZPAPN Michelangelo : Michelangelo Gdamage; Mformat; Sweden or the S: N/A 7: BRtX - Floppy , NAV, : CleanUp, ]or M- The Michelangelo creported in in Sweden and the . The cusable sample of actually . Michelangelo is a and the ). It is roughly on the very different in its behavior. The Michelangelo is attempted to be a Michelangelo Regardless of whether (is successful, Michelangelo measured by the DOS typically 2,048 +. Michelangelo at the top of &the ~12's be moved to insure Michelangelo in is not Michaelangelo is , it are accessed. It ythe to access a bon the On 360K 5.25" K, the be moved by the 11, the last in the root G. On 1.2M 5.25" K, the be re 28, part of the root G. Since the now resides in the root G, any entries happened to be in the of the root be lost. in the having #moved to Side 0, Cylinder 0, 7 on the Michelangelo on March 6, at format the random See: PZPAPN Micro 128 : Micro 128 -128, M-128 S: 128 7: PRCK - , NAV, The Micro 128 . Its . Micro 128 is a wof . .. It uses techniques to the The Micro 128 is in a "hole in in the ~area. by the be no , Micro 128 rd in by 128 +. The at the end of the @and in the to the @and Micro 128 Pnot do See: PZPAPN Microbes : Microbes Bombay, India S: N/A 7: BR - Floppy ], NAV, : M- M, or DOS SYS The Microbes in India. It is a The Microbes the Microbes . The may hang (, and inserting a Lbecoming t. At least on the author's XT test , the could not successfully Microbes present out powering off the (ing ga write protected ws, Microbes can be dis Kby powering off the (ing -clean, write-protected Lfor the The DOS SYS 8can be used to recreate the on the L. For non- data K, the data aon the tdata Lcan be copied the DOS COPY 8to a non- L, and Lreformatted. PZPAPN Micropox : Micropox ; corrupts S: 4,928 7: PRhA - , NAV, The Micropox . It was in the . Micropox is a wof . /and . , it Pnot It is destructive The the Micropox Y, the Micropox at the top of &the ), not moving ~12's , as sby the DOS by 4,944 }1C and 21 nby the One . /and one . in the tby the the Micropox , it rof 4,928 +. The at the end of the . The @and in the DOS not be . No in the The Micropox in the month of March. During the month of March, [of the is not already in the PZPAPN : Miky j; TSR; lost cluster; rotation and Bolivia S: 2,350 7: PRsA - ], NAV, The Miky . It ated in Bolivia. Miky is a wof . /and . and The Miky is Y, Miky as a low TSR of 2,096 }16, 21, and 80 nby the , Miky /and . are Y, but not .. . by 2,350 at the a. . 2,350 to 2,364 at the end of be no 5in the @and in the DOS Miky on a random basis input has . Upon , it rotate the the right, 6or graphics re ing around the left hand side, and down one line. a full rotation has , the be centered on the "MIKY 786290 B livia" cannot be seen in aas the Miky notice a much higher normal number of lost clusters %detected by the DOS . One lost cluster by Miky. of Miky are: Miky-2390: in May, , Miky-2390 is a slightly larger of the Miky . Its in TSR is 2,144 . It adds 2,390 the . x, and 2,390 to 2,404 to the . x. The two can be in the in Miky-2390 .symbolic M" "inOUTRUN E" May, PZPAPN Milano : Milano Italy S: 2,078 7: PRhE - p2.10+, 12.2 9503+, The Milano , and is gItaly. Milano is a wof . Pnot yvery small . cMilano at the top of the ), not moving ~12's , as sby the DOS Bby 4,160 }21 and 28 nby the the Milano , it rof 2,078 at the end of the b. The @and in the DOS to the and . No in the It is what Milano PZPAPN Milena : Milena I: May, S: 1,160 7: PRhAK - , NAV, The Milena in May, . Its . Milena is a wof . and . cMilena Y, the Milena at the top of &the ~12's not be moved. , as sby the DOS Bby 1,184 nby Milena in , the Milena .if it was not the Milena , it the Milena rof 1,160 at the end of the b. The @and in the DOS . The can be in the 7in Milena "LOVE" "I Love Milena..." It is if Milena PZPAPN Mindless : Mindless <; data S: 423 7: ONCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The Mindless . It is gthe . The Mindless is a the Mindless Y, the Mindless yall of the . in the mthe c423 +of the host 7. The unless it was smaller case it "423 . The and in the DOS not be . The in the 7in Mindless "*.c*" On Sundays, the Mindless Y. At , it trash the Qand the and the $of the Q. The can be ein the on the trashed "[Youngsters Against McAffee] -NATAS KAUPAS" "The Mindless v1.0" in the 7so it is not The Mindless corrupt data extension starting "C", uthem as PZPAPN MindRiot : MindRiot S: 814 7: ONE - 1, NAV, 2.17+ The MindRiot . Its . MindRiot is a the MindRiot Y, the MindRiot check to see if Gis a root If it is, the , and the ed to the DOS prompt. If the Gis not the Q's root G, the yone . in the the MindRiot mthe +of the host by the MindRiot The unless were smaller +, in case "814 . The @and in the DOS not be . The in the MindRiot "* *. X*.* \" "If You Think You Saw A Part Of Your Source You're Probably Right!" Making I Used Pieces Sources... heheh...What Can I Say?" "I'm A Pirate At Heart!" "Lithium Chloride" the MindRiot are permanently corrupted, and should be replaced clean, copies. of MindRiot are: MindRiot-B: , MindRiot-B is a 907 of the MindRiot . It over- writes the c907 +of host . a. The in the "* *. X*.* \" "YAM 92 -Mind Riot Strain B- LiCl" "The Mind Riot - Strain B -LiCl" "-YAM '92" "Howrya: Mr. M, Nap, N.S, S.M, Displ, Lov, Otto, A.B, K.P" "Whatsup: RABID, SKISM, SAC, CPI, Etc, Etc." "Middle Finger To: McAffee" MindRiot-B in a sub on the kmay PZPAPN : Ming Ming.1017 Hong Kong S: 1,017 7: PNCK - 2.71+, p2.10+, 12.2 9503+, 2.71+, 7.00+ The Ming . It s to be Hong Kong. Ming is a wof . the Ming yone . in the rof 1,017 at the end of the b. The in the DOS not be . The in the 7in all Ming "Nice To Meet You! Copyright(c) 1-11- By Ming. Tuen Mun, Hong Kong" 3.10" "1\SFC" "\ra\menus \ *.com" a.mnu" "C /C DOOR.BAT *M" The Ming may interfer the functioning of the Remote Access bulletin board package. PZPAPN Mini-45 : Mini-45 Dust, Minimal, Short-45, Mini-35, Mini-44, Mini-46, Mini-97, Mini-99, Mini, Trivial S: 45 7: ONCK - , NAV, 12.2 9503+, The Mini-45 . It is is a Mini-45 is Y, the yall . in the the +of the 7. No be noticed, unless the was less , in case it now be 45 . The . @and in the to the @and All . Mini-45 fail to function be permanently damaged since the +are lost. of Mini-45 are: Dust: Dust is a 50 of the Mini-45 s the +of all . the The @and in the DOS to the @and Mini-35: Mini-35 is a 35 of the Mini-45 . Mini-35 +of the in the Y. The @and in the DOS Mini-44: Mini-44 is a 44 of the Mini-45 . It +of all . in the Y. The @and in the DOS to the Mini-46: Mini-46 is a 46 of the Mini-45 the difference in , the functions ly to the Mini-45 Mini-97: Mini-97 is a larger of the Mini-45 particular was the smallest the of its submission in . Mini-97 xall . ain the do not start a JMP (E9h) instruction, by 97 the $of the b. The @and in the DOS : The Mini-99: Probably an earlier of Mini-97, xall . ain the by 99 +, and mhad @and in the DOS to the @and . The the end of : The See: Banana Blood Lust Define Dutch PZPAPN MiniMax : MiniMax S: Up to 31,125 7: PNC - , NAV, {3.0+ The MiniMax , and gthe . MiniMax is a wof . the MiniMax Y, the MiniMax yone . in the G, and the host run. the MiniMax "31,125 at the end of the b. The actual MiniMax 7is quite small, and most of the comprise hex C3 The @and in the DOS to the @and . The can be in the "*.com" MiniMax Pn't to do PZPAPN Minimite : Minimite I: March, 4to 4-24-80 12:04a S: 183 7: PNCK - , NAV, 12.2 9503+, {3.0+ The Minimite in March, . Its . Minimite is a the Minimite Y, the Minimite yone . in the G, and the host run. the Minimite rof 183 at the $of the b. The @and in the DOS 04-24-80 12:04a. The can be the 7in all Minimite "-C.K.-" Minimite Pn't to do PZPAPN Ministry : Ministry S: 1,168 7: PNC - NAV, The Ministry . Its . Ministry is a . It Pnot on the Beta the Ministry check the cthree non- in the Gto determine if t. If the aren't t, it ythem. the Ministry rof 1,168 at the end of the . The @and in the DOS not be Ministry is an , and are no in the . The in the "ask!" "I'm Buring Inside!" "Breathe You Fucker!" "Jesus Built My Hotrod!" "Everyday is Halloween!" "The Ministry - Written by NegativX - (c) -SiTT-" It is what Ministry See: Beta Elvis-1250 PZPAPN Minsk Ghost : Minsk Ghost @set to 13-07-82 S: 1,450 - 1,478 7: PRhAK - , NAV, 12.2 9503+, The Minsk Ghost . It is gthe . Minsk Ghost is a wof . /and . . It employs techniques to hide vs and spreads quickly on The the Minsk Ghost at the top of &the , as sby the DOS Bby 1,536 by the , Minsk Ghost .if it was not the Minsk Ghost is , it for any reason. rof 1,450 to 1,478 at the end of the The Minsk Ghost may re , adding 1,450 +. However, all but 3 to 31 +of the be hidden by the it is . The @in the DOS to 13-07-82. The in the 7in all Minsk Ghost "MINSK GHOST, It is what Minsk Ghost may do PZPAPN Mirage : Mirage j; TSR; DOS ?seconds = "62" S: 1,331 - 1,359 7: PRsAK - 12.2 9503+, 2.17+ The Mirage . Its . Mirage is a semi- /and . cMirage as a low TSR of 1,548 nby the the Mirage , it rof 1,331 at the $of the rof 1,331 to 1,359 the at the end of the b. The be hidden on all . The @and in the DOS to be the seconds field #set to "62". The in the 7in all Mirage "Mirage" If the Mirage , the DOS indicate Uon all a. It is what the Mirage PZPAPN Mirror : Mirror ; mirror effect S: 927 7: PRhE - , NAV, The Mirror wof . The the Mirror Y, the at the top 928 +, and the hook ~21. At , the yall in the by 927 to 940 at the end of the always end the two 6"IH". The Mirror gets its gits behavior. Every awhile it 5the 's video a mirror image of what was on the PZPAPN Mithrandir : Mithrandir Mithrandir I Sweden S: 694 7: PRhCK - NAV 3.05 9503+, The Mithrandir, or Mithrandir I, , and is gSweden. Mithrandir is a of . .. A at the same , Mithrandir III-B, is a companion or spawning cMithrandir Y, the Mithrandir at the top of &the ), not moving 12's , as by the DOS Bby 1,952 nby the the Mithrandir , it larger 2K in 694 in the middle of the b. The @and in the DOS . The in the 7in all Mithrandir "Mithrandir" "DeMoRaLiZeD YoUtH" of Mithrandir are: Mithrandir III-B: , Mithrandir III-B is a later of the Mithrandir as well as the LockUp Ein an entry. Mithrandir III-B's is 1,472 +, hooking ~21. , it creating a corresponding or companion . same base companion bis 450 :the actual Mithrandir III-B 7. Its @and in the DOS be 3-24-23 2:17:40am, and the hidden attribute be set. The in the "Mithrandir III" : Sweden See: LockUp PZPAPN : Mix1 MIX1, MIX/1 , 1989 TSR; . j; location 0:33C = 77h; garbled output Israel S: 1,618 - 1,634 7: PRsE - , NAV, ], or The Mix1 22, 1989, on several BBSes in Israel. is a Y, the take up 2,048 +in RAM. grow in between 1,618 and 1,634 +, depending on the . The however, aof less 8K in acan be manually identified by a characteristic "MIX1" always %the last 4 +of an b. Using DEBUG, if ,0:33C equals 77h, the Mix1 is in cause garbled output on both serial and parallel devices, as well as the Num-Lock %constantly on. 6th (ing the crash the due to a bug in the 7, and a ball start bouncing on the monitor. is a Pnot mthe problem of crashes ring, and greater 16K in Mix1 has several ities to Icelandic, it may #derived of Mix1 are: Mix1-B: A 1,636 of the Mix1 , Mix1-B or Mix1-1636 adds 1,636 to 1,650 +to the . x. The "MIX1" can be eat the end of all Snow: to the Mix1 , the "MIX1" at the end of ais now "SNOW". Snow is unable to determine it has so . be re t. Initial vby the rthe by 1,618 - 1,632 at the end of the add an 1,632 +to the See: Icelandic Mix2 PZPAPN : Mix2 I: March, and S: 2,287 7: PRhA - ], NAV, The Mix2 in March, reports of were W. Mix2 is on the Mix1 , and is a wof . /and . Pnot Mix2 is Y, Mix2 at the top of , but &the ). It mark area of reserved /MAND Data" and hook ~21. , as sby the DOS Cby 3,040 ~12's not be moved. Mix2 is , it /and . over 9K in by 2,287 to 2,294 at the end of the Pnot alter the @and in the intensive, or allocate all hang Mix2 It is what Mix2 See: Mix1 PZPAPN : MMIR MMIR.Extasy Sweden S: 282 7: PRCK - 12.2 9503+, 2.17+ The MMIR or MMIR.Extasy , and is gSweden. It is a wof . cMMIR in a hole in al , generally a buffer area at , it the MMIR of 282 at the end of the b. The @and in the DOS not be . The in the in all "EXTASY! (c) Metal Militia / Immortal Riot" kfrequently of MMIR are: MMIR.In Evil: on the MMIR a, and is a at the top of the ), not moving ~12's , as sby the DOS Bby 1,600 nby the 769 be hidden the . The @and in the DOS to be un the seconds field #set to "02". The in the "Our past is our future! "[INVISIBLE EVIL!] (c) Metal Militia/Immortal Riot" "Dedicated to all the victims.." "Greets to B-real!/IR" "It's like and like and like "It's like and like and like "It's like .. &" "Love to Lisa!" "All i ever wanted.." "All i ever asked for.." , non- by 769 +while : Sweden May, MMIR.Moonlite: on the MMIR 458 . It as a low TSR, hooking }09 and 21. Y, the check to see if all of the ain the Gare t. If aren't, ythem. If are, it Dthe . by 458 at the end of the b. The @and in the DOS to be , but the seconds field #set to "42". The in the "Metallic Moonlite(c) Metalic Militia/Immortal Riot" "Greetings to The Unforgiven/IR" "Bad "*.com" In addition to deleting . a, the : Sweden May, MMIR.Ravage: on the MMIR a. It uses the same technique , it by 392 the at the end of the b. The @and in the DOS not be . The in all "RAVAGE! (c) Metal Militia / Immortal Riot" : Sweden PZPAPN Moctezumas Revenge : Moctezumas Revenge Ciudado, Moctezumas, Moctezuma j; TSR; (failure S: 2,208 - 2,228 7: PRsAK - p, NAV, 12.2 9503+, The Moctezumas Revenge . Its . Moctezumas Revenge is a wof . /and . .. It hidden DOS .SYS on the The Moctezumas Revenge is Y, the as a low TSR of 2,336 +. It hook }13 and Moctezumas Revenge is , it and . ythe hidden DOS .SYS as well. Moctezumas Revenge the exception of rof 2,208 to 2,228 at the $of the b. In the case of .and the hidden .SYS be no r. The and not be in the DOS acan be identified by the two 6"92" ing in +8 and 9 of a. The Moctezumas Revenge "Moctezuma's Revenge92" of a Moctezumas Revenge vinclude Ufor .and possibly the hidden DOS .SYS a. A Vmay bas well, due to the writing out a copy of to an cluster out checking to see if it was in use. fail to gthe It is what Moctezumas Revenge of Moctezumas Revenge are: Moctezumas Revenge 2: A later of the Moctezumas Revenge has had (failures and no longer .and the hidden no longer be tby the . Moctezumas Revenge 2 adds 2,228 +to . , locating its 7at the $of the b. On . it adds 2,208 to 2,222 +locating the at the end of the b. The an un Tcopy of the the : "Moctezuma's Revenge62". The videntifier has g92 to 62, in . it is no longer near the of the bsince the is now at the end of the March, See: Poison PZPAPN Mohova : Mohova Mohova.659 (DOS 5.0) S: 663 - 675 7: PRhE - ]2.17+, 7.00+, p2.10+, 2.71+, NAV 3.05 9503+, 7.00+, 2.71+, 2.17+ The Mohova or Mohova.659 . Its . Mohova is a wof . a. It Pnot yvery small . cMohova Y, the Mohova at the top of &the ), not moving ~12's , as sby the DOS DOS 5.0, 1,104 nby the the Mohova , it rof 663 to 675 at the end of the b. The @and in the DOS not be . The in the 7in all Mohova "AIDSADIN" "Mohova N.I. is my love!Ice" It is what the Mohova PZPAPN Monika-686 : Monika-686 Monika S: 686 7: PRhCK - NAV 3.05 9503+, {3.0+ The Monika-686 . Its . Monika-686 is a wof . .. It yvery small . cMonika-686 at the top of &the ), not moving ~12's , as sby the DOS Bby 704 nby Monika-686 in , the .if it was not the Monika-686 , it rof 686 the end of the b. The @and in the DOS to the and . No the 7in Monika-686 It is what Monika-686 PZPAPN Monkey : Monkey BSC; ; possible "Invalid Qspecification" on C: S: N/A 7: BRtX - , NAV, : Norton MDoctor on M, DOS SYS on The Monkey . Monkey is a wof the ) and the K. It is a hiding the vof the Mand it is The Monkey , the Monkey ythe , as sby the DOS Bby 1,024 +. The moves ~12's to 9FC0. On the M, the write one 7at Side 0, Cylinder 0, 3, and alter the the Monkey , it ynon-write protected are accessed on the . On 360K 5.25" K, the write a 11, the last of the root G, and alter the . On 1.2M 5.25" K, the 7is at the last of the root G). If entries were in the the corresponding "inaccessible. Monkey is a , and cannot be detected on either the it is vis hampered further in be inaccessible (ing the ga clean write protected ing in an "Invalid specification" . Norton MDoctor can be used to remove the Monkey gthe Mby rebuilding the . The DOS SYS 8can be used to replace the PZPAPN : Mono 1063 j; TSR; Poland S: 1,063 7: PRsCK - , NAV, The Mono, or 1063, gPoland. Mono is a .. It not, however, unless the is running in monochrome 80x25 mode. The Mono is Y, the as a low TSR of 2,048 TSR may 8data by mapping utilities. nby the Mono Mono is , it are Yif the is in monochrome mode an 80 column by 25 line O. If the Ois set to else, it not spread. Mono rof 1,063 +. The at the end of the be no 5to the @and in a DOS are no in the Mono a, but it is PZPAPN Month 4-6 : Month 4-6 Agi-plan I: 1989? j; TSR; S: 1,536 7: PRsCK - , NAV, The Month 4-6 or Agiplan it has #rumored to exist since 1989. The of the sample . Month 4-6 is a cMonth 4-6 as a low TSR, hooking }21 and 24. Unless the ., the usually hang at , receiving an it cannot load the interpretor. , Month 4-6 are 1,536 at the $of the b. The @and not be . Two can be in the "load The Month 4-6 between 1st and 30th of any year, hence its . At , the trash the PZPAPN Monxla : Monxla kand/or re failures Hungary S: 939 7: PRfCK - NAV, The Monxla, or Hungary. is a the Monxla Y, the check the . If the =seconds is greater 32/100's of a second, the |a very small portion of at the top of &the ). The allocates 80 +, and hook }20 and F2. The F2 ~is later used to determine if the is in thus avoiding multiple s. The portion of the is not used to the Monxla Y, the search for one between 3,840 and 64,000 y. The searched c, and Hories along the path. satisfies the requirement, the yit. On the 13th day of any month, the add its 7to the end of the candi b, increasing the by 939 On the 13th day of any month, the . The involves damaging the on the seconds in the . At the b, the damage the bin one of three ways. If the =seconds was greater 60/100's, 4 HLTs followed by a random be placed at the of the t. Later Y, it may perform rather strangely or be destructive. It depends on what the random ~was. If the =seconds was greater 30/100's, but less 60/100's, two INT 19 calls are placed at the $of the b. Later Y, it attempt to perform a warm re (preserving the ~vectors. , however, in a hang if any ~between 00h and 1Ch was n. If the =seconds was greater 00/100's but less 30/100's, an INT 20 call is placed at the $of the t, thus ing in it immediately terminating later See: Monxla B PZPAPN Monxla B : Monxla B Hungary S: 535 7: PNCK - ], NAV, The Monxla B in Hungary. is a wof . .. Monxla B is a of the Monxla B is Y, the check the seconds portion of the . Depending on the value e, either one . in the t, or one . in the corrupted. If the seconds portion of the is equal 0 or a multiple of 8, one . in the G, or on the path, be corrupted by the cfive 6of the selected . 3to the hex : 004D004F4D, or " M OM" in . Corrupted r. Later corrupted usually in the %hung, requiring a re If the seconds portion of the was not 0 or a multiple of 8, a . in the Monxla B. If no exist in the neither corrupted or t, the follow the path to find a candi by 535 +, the at the end of . The 3the seconds in the in the Gto 58 so can later tell See: Monxla PZPAPN Mordor.1110 : Mordor.1110 Mordor, Paola.1110 (Record on <; disables VSAFE & VWATCH; |ed TSRs and/or Qrs may no longer function; SCSI Qs and SCSI devices may be disabled; possible interference video S: 1,110 7: PRshC - /& MBR NAV 3.05 9503+, 12.2 9503+, aand replace MBR The Mordor.1110 . Its . Mordor.1110 is a wof the (record (the ;ing the ) and . It is destructive cMordor.1110 as a low TSR of 1,440 +, hooking ~21. , the ythe (record if it was not t. Later, (ing gthe in the becoming at the top of &the the Mordor.1110 , it rof 1,110 +. The encrypts the host , as well as the 7, so its relative position in the bisn't important to a normal . The @and in the DOS not be . The MORDOR v1.0" "Escrito por AZRAEL" "Un Anillo para gobernarlos a todos." "Un Anillo para en contrarlos" "un Anillo para atraerlos a todos y atarlos en las tinieblas" "en la Tierra de Mordor donde se extienden las sombras" "dedicado a PAOLA HASBANI" "Saludos A MURDOCK, MALVINAS, PatoruzU, KOHNTARK y FIRECRAKER" mimpact the operation of the . It 7to disable the VSAFE and VWATCH , and may render disabled or useless |ed device Qrs or . It may disable SCSI devices, such as Ms, due to it Qr in . Video Ooutput may be impacted by the Mordor.1110 has a two part mechanism, event Pnot need to for the destructive second event to . On March 31st of any year, the the ;ed in the . On any day in , the c18 cylinders (tracks 0 - 17) of the of Mordor.1110 are: Mordor.538: , Mordor.538 is a wof . , but not Its TSR is 864 +, hooking 21 and DA. , it rof 538 at the $of the b. The @and in the DOS not be . No in the PZPAPN More-649 : More-649 I: March, ?seconds set to "60" England S: 649 7: PRhCK - p2.10+, NAV 3.05 9503+, 12.2 9503+, {3.0+ The More-649 in March, , and is England. More-649 is a fast wof . cMore-649 Y, the More-649 at the top of &the ), hooking ~21. , as sby the DOS Bby 2,048 }12's #moved. the More-649 , it for any reason. rof 649 at the end of the b. The in the DOS to be the seconds field #set to "60". The More-649 is unable to determine it has b, so it yalready adding an The in the More-649 "OH NO NOT MORE ARCV." "[MoRE] ICE-9" It is what More-649 may do PZPAPN Mosquito : Mosquito Fax j; TSR; function keys fail to operate expanding S: 1,028 - 1,040 7: PRsE - , NAV, The Mosquito . Its location of J, is . Mosquito is a wof . Xand overlay ;the word " " in the The Mosquito is Y, Mosquito as a low TSR of 2,128 nby the , Mosquito and overlay by 1,028 to 1,040 +, the at the end of the the Mosquito ;the "Mosquito". Mosquito \a gradual as the . The gradual s because Mosquito allocate an +of low b. Function keys may fail to function It is if Mosquito of Mosquito are: Lamer: on the Topo &, Lamer is a later . Lamer's is 3,136 +and hooks ~21. It and overlay Y, adding 1,542 - 1,552 . The the end of a. The @and the DOS not be . The can be in the "Lamer Exterminator II" "Copyright 07.12.91 by Genius" in the 7are the dtwo "FaX "Welcome" Pfish: on the Topo &, Pfish is a later . PFish's is 3,136 +and hooks ~21. It and overlay Y, adding 1,542 - 1,552 . The the end of a. The @and the DOS not be . The can be in the /SPEC=C:\DOS\ .PATH=C:\DOS;C:\WIN3;C:\;C:\TOPO; C:\UTILITY" "PROMPT=$p$g TEMP=C:\WIN3\TEMP" "C:\WORK\FISHVIRUS. "PFISHVIRUS" : Italy Topo: on the Mosquito , Topo is a later . Topo's is 3,136 +and hooks ~21. It and overlay Y, adding 1,542 - 1,552 . The the end of a. The @and the DOS not be . The can be in the /SPEC=C:\DOS\ .PATH=C:\DOS" "PHORSEFAX" Topo Pnot intercept U, so on write protected in write protect PZPAPN MPS 1.1 : MPS 1.1 MPS-OPC 1.1 Poland S: 469 7: PNCK - , NAV, The MPS 1.1 . It is gPoland. MPS 1.1 is a MPS 1.1 is Y, the yall . in the G. If G, it well. MPS 1.1 469 at the end of the The @and in the DOS to the @and The can be in the in MPS 1.1 "MPS-OPC v1.1 *. A symptom of an MPS 1.1 requiring 8line input may not function ing unexpected It is if MPS 1.1 carries any destructive potential. See: MPS 3.1 MPS 3.2 MPS 4.01 MPS II-754 PZPAPN MPS 3.1 : MPS 3.1 MPS-OPC 3.1 Poland S: 640 7: PNCK - 1, NAV, The MPS 3.1 . It is gPoland. MPS 3.1 is a MPS 3.1 is Y, the yall . in the G. If G, it well. MPS 3.1 640 at the end of the The @and in the DOS to the @and The can be in the in MPS 3.1 "MPS-OPC v3.1" It is if MPS 3.1 carries any destructive potential. See: MPS 1.1 MPS 3.2 MPS 4.01 MPS II-754 PZPAPN MPS 3.2 : MPS 3.2 MPS-OPC 3.2 Poland S: 654 7: PNCK - , NAV, The MPS 3.2 . It is gPoland. MPS 3.2 is a MPS 3.2 is Y, the yall . in the G. If G, it well. MPS 3.2 654 at the end of the The @and in the DOS to the @and The can be in the in MPS 3.2 "MPS-OPC v3.2" It is if MPS 3.2 carries any destructive potential. of MPS 3.2 are: MPS 3.2-B: hequivalent to the has one differs. See: MPS 1.1 MPS 3.1 MPS 4.01 MPS II-754 PZPAPN MPS 4.01 : MPS 4.01 MPS-OPC 4.01, MPC 5; TSR S: 684 - 698 7: PRsE - p, NAV, The MPS 4.01 . Its it is likely to be gPoland, like the es. MPS 4.01 is a wof . The MPS 4.01 is as a low TSR of 992 nby MPS 4.01 in MPS 4.01 is , it Y. Very small . , however, not be t, but mhad 2 to 14 +adds to . MPS 4.01 rof 684 - 698 at the end of the . The @and in the DOS to the @and ;the "MPS-OPC v4.01" MPS 4.01 Pn't to do See: MPS 1.1 MPS 3.1 MPS 3.2 MPS II-754 PZPAPN MPS II-754 : MPS II-754 MPS-OPC II 5; TSR S: 754 - 770 7: PRsA - {3.0+ The MPS II-754 . Its it is likely to be gPoland, like the es. MPS II-754 is a wof . /and . , but not The MPS II-754 is as a low TSR of 1,072 }21 and 24 nby the , it /and . are Y. Very small . , however, not be t, but mhad 2 to 16 +adds to MPS II-754 rof 754 to 770 at the end of the . The @and in the DOS to the @and . No in the 7in MPS II-754 See: MPS 1.1 MPS 3.1 MPS 3.2 MPS 4.01 PZPAPN : Mr Italy S: 508 7: PNCK - , NAV, {3.0+ The Mr gItaly in . Mr is a wof . the Mr yone . in the G, it may the Mr rof 508 at the end of the b. The @and in the DOS not be . The can be the 7in all Mr "Mr. Ver. 1.10" It is what Mr. PZPAPN Mr. D : Mr. D , but possibly Poland S: 1,536 - 1,550 7: PRhE - {3.0+ The Mr. D . Its but it could possibly be gPoland as it s to be a later of the Mr. G . Mr. D is a cMr. D Y, the Mr. D at the top of &the ), not moving ~12's , as sby the DOS Bby 1,552 }21 and 2F nby Mr. D in the Mr. D , it rof 1,536 to 1,550 at the end of the b. The @and in the DOS to the @and . The in the 7in all Mr. D "Mr. D" See: Mr. G PZPAPN Mr. G : Mr. G Poland S: 253 7: PNCK - {3.0+ The Mr. G , and s to be Poland. It is an earlier of the Mr. D . Mr. G is a wof . the Mr. G Y, the Mr. G yall of the . in the 253 at the end of the b. The @and in the DOS to the @and The in the 7in all Mr. G "Mr. G" See: Mr. D PZPAPN MShark : MShark S: 373 7: PNCK - , NAV, The MShark . Its . MShark is a the MShark Y, the MShark yall . in the G. If G, it the MShark rof 373 at the end of the . The @and in the DOS to the @and . The can be all MShark "Mshark-S v1.0" MShark Pn'd do of MShark are: MShark-378: , MShark-378 is a 378 of the MShark . It adds 378 +to the . ;the the MShark-378 "(C) Mshark-S v.1.0" PZPAPN : MSJ Israel S: 15,392 7: PNA - p, NAV, The MSJ , and is gIsrael. MSJ is a /and . , but not the MSJ Y, the MSJ yone . /or . on the C: 15,392 at the the man . bformat v. The @and in the DOS to the @and . The can be in the MSJ 7in all "exe" "comspec" "Insufficient Mspace" "\*.exe" "\*.com" "c:\autoexec.bat" "NOHARD" /SPEC" The dis the $of the very long in the 7, un in all "Do not worry is designed to avoide making any damage to" "your a. A remover be send to computer Magazines" "by 30th of oct can suppy to coustomers." is a demonstration of what a Palestinian Boy can do." The remainder of the :a political statement. PZPAPN : MSTU MSTU-531 S: 531 - 532 7: PNAK - ], NAV, The MSTU . Its . MSTU is a of . /and . MSTU is Y, the search the Gfor /and . Any in the tby the . If G, it the MSTU rof 532 +. . MSTU rof 531 +. In both cases, the at the end of the be no 5in the @and in a DOS can be in MSTU aare: was written in MSTU, "*.exe *.com" It is if MSTU of MSTU are: MSTU-551: on the MSTU adds 551 to the . x, and 554 +to . x. It :the same as the [of . MSTU-551 may in a hang. MSTU-1536: A later of the MSTU , MSTU-1536 is a wof . /and . , but not .. Its is 2,000 +, and at the top of ), hooking ~21. , MSTU-1536 /and . rof 1,536 to 1,550 at the end of the b. The in the DOS not be The can be in the 7in all MSTU-1536 "OOT" "CAN" "OKI" "RBOGEMAND" ly, all dcharacter sequence: " May, PZPAPN Mugshot : Mugshot BSC; (failures India S: N/A 7: BR - , NAV, : DOS SYS on The Mugshot . It is gIndia. Mugshot is a Lwhose the Mugshot , the Mugshot . At , the (process usually fail. replaces the L, the newly inserted tif it is not write protected. The still not complete. Mugshot mthe in the 7in the "Ref:vb. Greetings gAnil Rao!(snap graphics prog is aimed at developping permanent vaccines is harmless it Pnt destroy data., affects a:,b: Qs.For info. contact Anil Rao. Bombay, India." The Mugshot mmoved the to an location on the M, where it be immediately followed by several include the "For every vaccine is a ".Do no pla" Mugshot is a poor replicator, we were unable to successfully (the gany we were able to PZPAPN : Mule j; TSR; Black box on Thailand S: 4,112 - 4,126 7: PRsAK - , NAV, The Mule . It ated in Thailand. Mule is a generic wof . and . a. It .. Mule is on the The Mule is Y, Mule as a low TSR of 4,096 }08 and 21 nby the Mule is , it /and . Y. If Y, it are already Mule by 4,117 the v. At , the the $of the b. Later, if the Mule xthe , the at the end of the b. During the re v, the bis treated as an . Mule by 4,112 to 4,126 v, and 4,112 +upon later re The always be at the end of the Mule ;the "Mule", derives its Thirty minutes Mule became , a black box on the low left hand side of the the graphic effect of many members of the It is what Mule See: PZPAPN Multi 1.1 : Multi 1.1 I: March, S: 2,560 7: PRhAK - , NAV, The Multi 1.1 in March, . Its , but it may be gthe . Multi 1.1 is a /and . cMulti 1.1 Y, the Multi 1.1 at the top of &the ), hooking ~24. , as sby the DOS Bby 2,608 ~12's #moved. the Multi 1.1 , it for any reason. rof 2,560 be hidden . The at the end of a. The @and in the DOS not be . The the 7in Multi 1.1 is not "Multi (R), Release 1.1, Copyright (c) -92 by" Multi 1.1 is a full , and dis are read into . As such, CRC and checksumming may not be able to detect its presence on the PZPAPN Multi Child : Multi Child Multi Child-104 S: 104 7: PRaCK - , NAV, 12.2 9503+, 2.0+, {3.0+ The Multi Child, or Multi Child-104, . Its . Multi Child is a wof . cMulti Child in low al usually a DOS buffer. nby the . It may yone . in the the Multi Child , it are copied to a target sub- of 104 at the end of the The @and in the DOS to the @and . No in the Multi Child Multi Child Pn't to do of Multi Child are: Multi Child-110: , Multi Child-110 is a 110 of the Multi Child . It to the PZPAPN Multi-123 : Multi-123 *n 123, V123, Multi, SD-123 4; slow loads S: 123 7: PNCK - , NAV, The Multi-123 . It is *. Multi-123 is a of . Multi-123 is Y, the search the Gand yall . ait finds. rof 123 at the end of the b. The @and in the DOS to the @and The Multi-123 cannot recognize it has t. As a , it continue to yalready a, adding increments of 123 rs and @and 4, an symptom of a Multi-123 in a long period of Maccess before the requested actually runs. Multi-123 Pn't do PZPAPN Multi-Face : Multi-Face MFace j; TSR; 4; smiley face 6moving on O; write protect slowdown S: 1,441 7: PRsCK - , NAV, The Multi-Face . Its . Multi-Face is a wof . The the Multi-Face in low mapping utilities may indicate the Config area of rd in by 1,456 +. The DOS indicate 64K in addition to the 1,456 by the }08, 13, and 21 nby the Multi-Face the Multi-Face , it rof 1,441 at the end of the The @and in the DOS to the @and of an vof the Multi-Face a minor slowdown . The slowdown is most noticable Ois scrolled. . @and in the DOS Yif the @is different @. Write protect on write protected K. Lastly, multiple smiley face 6may on the moving around the 6on the PZPAPN Mummy 00? V PT? : Mummy Mummy 1.2 , Except Mummy 2.1 9in USA j; TSR; kon 8088 Taiwan S: 1,399 - 1,413 7: PRsE - , NAV, The Mummy . It is gTaiwan. is a wof . frequently hang 8088 . It is on the cMummy Y, the Mummy as a low TSR of 1,680 +. It as an rin the of the Config area of is mapped by utilities. nby the the Mummy , it rof 1,399 to 1,413 at the end of the . The and in the DOS are no in the . The in the "Mummy "Kaohsiung Senior School" "Tzeng Jau Ming presents" "Series Number = [ It is what Mummy of Mummy are: Mummy 1.0: as the Platinum Mummy 1.0 is an earlier of the Mummy . It in low , as the DOS 1,856 }03 and 21 are , Mummy 1.0 by 1,489 to 1,503 at the end of the be no 5to the @and in the DOS The in the "Mummy 1.00.00" "Kaohsiung Senior School" "Tzeng Jau Ming presents" "Series Number = [ : Taiwan Mummy 2.1: Iin multiple locations in the United States and the Republic of South Africa in May, Mummy 2.1 is a later of the Mummy . Its TSR is 1,632 hooking ~21. It Y, adding 1,364 to 1,378 to the . The "PC Mummy Vers. 2.1" "Kaohsiung Senior School" "Tzeng Jau Ming presents" : Taiwan May, Mummy 2.1B: in the in May, hequivalent to Mummy 2.1B, and has minor alterations. May, Mummy 2.1C: in March, , Mummy 2.1C is a minor of Mummy 2.1. The in the "Saddam Hussein Ver. 1.1" makers." "Made by T.Z.M present." March, PZPAPN Munich : Munich I: March, (failure; Germany S: 2,355 - 2,370 7: PNCK - , NAV, The Munich in Germany in March, . Munich is a wof . the Munich Y, the ytwo . in the of 2,355 to 2,370 at the end of the . The @and in the DOS not be . Munich is an and no in the The Munich Ofake Yand kmay has t, the fail to of the Nby the Munich crashed by unauthorized access, explosion DANGER!!!" "Warning: segments "ROM Vat F000:0188 during low RMA, please contact your engineer or local dealer - halted" "Unrecoverable halted" "Udvozli Ont a Munnich Ferenc Tarsasag!" PZPAPN Murphy : Murphy Murphy-1, V1277, k; speaker noise; possible bouncing ball effect (see Murphy-2 Sofia, S: 1,277 7: PRA - ], NAV, : CleanUp, NAV, or The Murphy . It is a generic . w, and The Yon a , the it is , if a Y, or for any reason, it is tby the Murphy cnon- , the attempt to /MAND. /. The by 1,277 are less 1,277 not be The Murphy watches the between 10AM and 11AM, the turn on the speaker and send a 61h to it. At any , the attempt to use the speaker. The in the Murphy giving an idea of it was written and by whom, not "Hello, I'm Murphy. Nice to meet you friend. I'm written since Nov/Dec. Copywrite (c)1989 by Lubo & Ian, Sofia, USM Laboratory." tby the Murphy of Murphy are: AntiChrist: on the Murphy , AntiChrist is a wof . . It at the top of , but &the DOS sby the DOS by 1,040 n. AntiChrist larger 1K in are rof 1,008 at the end of the be no to the @and in the DOS is considered a research , and was not in the public domain at the it was : Italy March, on the Murphy s is a wof . /and . , and should be considered a . It Pnot .. It at the top of , but &the , as sby the DOS Bby 2,064 }21 and 22 n. Br /and . rof 2,045 at the end of the The not be if the in the DOS Hoy as %63,491 +larger. s in arm.Copyright (C) . V 1.0" ":*. [of the DOS detected on all Cemetery: Cemetery is a 1,417 of Italian Pest. Cemetery is Cby 1,440 , it well as .are not by 1,417 at the end of the b. One can be Cemetery : "CEMETERY". It is what Cemetery Delyrium: Delyrium is an 1,778 of Italian Pest. Delyrium is Cby 1,808 hooking ~21. . /and . for any reason. by 1,778 Delyrium at the end of the Delyrium ;the "(c) IVRL (Ivrl Head Quarter, Milan Italy)" "Delyrium - Created by Cracker Jack "Copyright by Italian Research Laboratory .because the dead is not so far" .and the horror It is what Delyrium , but \difficulties DOS COPY 8and executing gthe B: : Italy Diabolik: Diabolik is an 1,171 of Italian Pest. Diabolik is Cby 1,200 by 1,171 Diabolik at the end of the Diabolik "Diabolik Ltd. (C) by Odrowad" "Trow" It is what Diabolik Erasmus: on the Murphy , Erasmus is a wof . /and . . It Pnot .. It at the top of , but &the , as sby the DOS Bby 1,712 n. Erasmus rof 1,682 at the end of the b. The ein Erasmus "C.J.'91" "Gli Dei si mostreranno a gli uomini, Quando essi saranno autori di grande conflitto Prima il Cielo visto sara con spada e lancia, Che verso la mano sinistra portera piu grande afflizione. Alla rivoluzione del grande numero sette, Apparira ai tempi giochi d'Ecatombe, Non lontano dalla grande eta del millennio Coloro che entrarono usciranno dalle loro tombe. Saint-Remi, 14 dicembre 1533" Erasmus may \what to be warm re (s upon (s" are actually the in copy of %reloaded, and AUTO XC.BAT : Italy May, Finger: Finger is an 1,172 of Italian Pest. Finger is Bby 1,200 by 1,172 at the end of b. . are either Y. Finger on Saturdays, at Y, followed by a hang: "Cannot remember what I was doing!! Insert fingers in ears and re (please" to re in a " Lread failure" due to the having damaged the of the Goblin: on the Smack , Goblin is a wof . /and . , but not It's is 1,968 +, and hooks Goblin /and . over 2K in rof 1,951 at the end of the Goblin on Friday, at [of an in the Oof a and deletion of the in the If the Yis a . , the "What a horrible , i wish not Zit!" If the Yis an . , the "Goblin the Black Death (c) by Cracker Jack IVRL '91" 'the , the ein Goblin "(c) by Cracker Jack Italian Research Laboratory" "Patricia Pnot function correctly, because I mn't run it before send. Now I'm debugging it...ehehehehehehahahahahahah" "Smack .what a horrible "Compliments to the >for the nice es... excuse me if I create of your beautiful es..." es are a nice thing!!" "I'm hungry!! Why don't you buy me a Cheesburger??" : Italy May, HIV: on the Murphy , HIV is a of . /and . .. It at the top of , but &the , as sby the DOS Bby 1,632 n. HIV /and . rof 1,614 at the end of the b. The ein HIV "HIV - Release 1.0 Created by Cracker Jack (C) Italian Laboratory" : Italy March, Italian Pest: on the Migram , Italian Pest is a wof . . It at the top of , but sby the DOS 1.9K. Italian Pest may over 2,048 Pnot always ythem. rof 1,910 at the end of the be no 5to the @and in the DOS Italian Pest is in in the Nand the not executing: "I'm hungry!! Why don't you buy me a Cheesburger??" Italian Pest on Fridays, at of an in the "Your PC is the Intergalactic Pest!" The in the Dd, and the C: corrupted. 'the , the can be ein all "(c) by Cracker Jack Italian Research Laboratory Created,Developed and Written by Cracker Jack, All rights reserved Con questo dichiaro guerra a tutti i POVERI (ahhh quanto sono poveri!) cosiddetti ' Researchers' del globo... provate a prendermi..ahahahah I'IVRL e'forte .vincera Writers di tutte le nazioni...uniamci!" : Italy May, Kamasya: Kamasya is a 1,098 of the Italian Pest . It is a wof . . It's is 1,120 +, and it hooks ~21. Kamasya by 1,098 at the end b. Kamasya on Tuesdays, at "Kamasya nendriya pritir labho jiveta yavata jivasya tattva jijnasa nartho yas ceha karmabhih" : Italy March, Locker: Locker is a 1,642 of the Murphy . It is a wof . , but not .. It's is 1,644 hooking ~21. Locker are 1,642 at the end of the b. The @and in the DOS not be . The can be in the "(c) IVRL (Ivrl Head Quarter, Milan Italy)" "all rights reserved!!!" "[0mPassword ->" "[0mPassword accepted!" "Incorrect Password, sorry!" "Locker Viri - Created by Cracker Jack : Italy March, Migram: Migram is a 1,221 of the Murphy . It is a wof . . It's is 1,248 +, and it hooks Migram over 1K in by 1,221 at the end b. Migram on Saturdays, at "MIGRAM VIRUS 1.0 (C) The Oof the is followed hang. : Italy March, Murphy-2: (V1521) to the Murphy , its is 1,521 +. The non- in the are now: "It's me - Murphy. Copywrite (c) by Lubo & Ian, Sofia, USM Laboratory." The Murphy-2 yany . b, as well as any bover 900 +. Instead of turning the speaker on between 10AM and 11AM, waits for the mthe minutes set to 00, may ma "bouncing ball" effect to several effect Pnot, however, all Murphy-3: Murphy-3 is a 1,284 of the Murphy The major difference between Murphy and if it is . The no longer automatically Murphy-3 by 1,284 at the end of the is the same as the , except a low buzzing sound be emitted along the clicks. The in the Murphy * May Murphy-4: Murphy-4 is to the Murphy-2 is 1,480 +long. It yany larger 2,000 it is . Murphy-4 at the top of &the Cby 1,504 +, as sby the DOS . Murphy-4 in the same manner as Murphy-2, and :the same * May Smack: on the Italian Pest , Smack is a wof . /and . , but not .. It's is 1,856 +, and hooks ~21. Smack /and . over 3K in rof 1,835 at the end of the be no 5to the @and in the DOS Smack \the occasional dis ance of both and data notice a gradual lost clusters on the Mand Smack on Fridays Y. It may Othe "Is today Friday? (Y/N)" Replying "Y" in the and the %terminated: "Sorry but on Friday I wish not work!!" Replying "N" in the the threatened FAT damage Pnot due to a bug in the "You are untruthful!! For punishment I format your HD FAT!!" in the Smack was written in Italy by Cracker Jack IVRL" "All rights reserved, please don't crack "Special to Patricia Hoffman: I love you "SmackSmack" "Can you give me your telephone number??? Ciao bellissima!" : Italy May, Swami: The Swami in May, ga United States source. Its . It is a Murphy and be detected as Murphy by utilities. Unlike Murphy, Pnot .. Swami rof 1,250 +. It are , or copied. ;the "Bhaktivedanta Swami Prabhupada (1896 - 1977)" Swami Dthe bin the See: Tormentor Tormentor-1072 PZPAPN MusicBug : MusicBug Music (, Music Bug ; clicking; music randomly played on speaker; lost clusters Taiwan S: N/A 7: BRtX - ], NAV, : CleanUp, or see The MusicBug is a . It ated in Taiwan. the MusicBug , the at the top of &the ). The be moved, so now report 638K of . Clicking may be heard for a short gthe speaker before the (proceeds, but more likely a section of a tune be played. The proceed. MusicBug is , it periodically play an portion of the same tune Maccesses . It is thus rather disruptive. MusicBug is , any Maccessed ( . In the case Ms, MusicBug xthe m4K in lost clusters 7as well as a copy of the The lost clusters: "MusicBug v1.06. MacroSoft Corp." "Made in Taiwan" the MusicBug can be dis powering off the (ing ga write protected using the DOS SYS 8. The lost clusters can be removed by using the the /F parameter. Ms, however, cannot be dis tin the same way. While the DOS SYS remove the gthe , and the lost clusters can be recovered, the remain an un (able, non- Muntil a low-level format is performed. PZPAPN Mutagen : Mutagen Mutagen.Garden, Garden S: 1,737 - 1,765 +(Approximate) 7: ONAK - 12.2 9503+, The Mutagen, Mutagen.Garden or Garden, . Its . Mutagen is a .. It is a polymorphic, the Mutagen ythe cthree . in the G, as well as the copy of in the C: root G, and up to all of the in the higher Hories Gin the Gstructure. If the cthree . ain the Gwere t, and are no ain the G, the proceed to yup to two . ain the The Oone of the , and the to the DOS prompt: "Not enough "I need 4K more to start myself!" the Mutagen 1,737 to 1,765 +. The be at the $of the s the the host b. The @and in the DOS to the @and The in the Mutagen "*.com *.exe .. c:\ 8.com c:\garden.com" "[Garden] is Garden V1.0.Very simple be better!!!" "Not enough "I need 4K more to start myself!" "FUCK PEARL JAM !LONG LIVE TECHNO "[Mutagen 1.00] MnemoniX" Mutagen permanently corrupts the x, so all must be replaced backup copies. of Mutagen are: Mutagen.Agent I: , Mutagen.Agent I is . It one . in the Mutagen.Agent I 2,267 to 2,307 +. The at the end of the b. The @and in the DOS not be . The estarting in the fourth ,of all "GM" The the Mutagen.Agent I "[MutaGenic Agent I]" "[MutaGen 2.0] MnemoniX" Mutagen.Agent III: , Mutagen.Agent III is wof . /and . .. Its is 6,348 +, hooking ~21. , it rof 3,368 at the end of the b. The r, as well as the presence of the 7in the be hidden . The @and in the DOS not be . The in the "MutaGenic Agent [I]" "MutaGen 2.0] MnemoniX" The DOS indicate all PZPAPN Mutant : Mutant Mutant 123, Mutant 127, Mutant 128, Mutant, -123, I: May, (failure; S: 123 - 128 7: PONCK - , NAV, The Mutant ^was in May, *. The Mutant ^consists of three mas both a wand an w. Mutant ^members tby a member of the Mutant Y, the search the Gand all the . may either be by the as a v, the increasing depending on is present, or the may be $of the . vare permanently corrupted. rof 123 to 128 +, depending on member of the Mutant ^is present. In any case, the in the to the @and a member of the Mutant two "*.com" "VPV" (ing has a Mutant ^member in a (failure. Mutant vs may in a hang. member(s) of Mutant ^are: Mutant 123: as V123, member of the Mutant ^is 123 . Generally, Mutant 123 not function , even if the bhas a Mutant 127: as V127, member of the Mutant ^is one ,shorter Mutant 128. It ms as Mutant 128: The Mutant submission, its 128 +. It be ms as PZPAPN Mutation : Mutation J: ?seconds set to 02; "Divide overflow" U; "Cannot load /MAND, halted" too big to fit in S: 688 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Mutation . It s to be gNorth America. Mutation ~is a wof . Y, the Mutation at the top of &the ), hooking ~21. , it may the Mutation rof 688 at the end of the b. The @and in the DOS to be un , or may ed. Actually, the seconds field in the to 02. The can be in the 7in all Mutation "The Mutation RABID'S Back and Kicking in `93" "-Soltan Griss" the Mutation the , as well as possible "Divide overflow" "Cannot load /MAND, halted" too big to fit in of Mutation ~are: Mutation ~-B: A 694 of the adds 694 +to . x. Like the , it sets the seconds field in the ?to "02". The can be in the 7in all "The Mutation ~(B) RABID'S Back and Kickin' the Bucket in `93 -Soltan Griss" kfrequently PZPAPN : MVF Arka, Arkanoid J: j; TSR; S: 1,898 - 1,909 7: PRsCK - NAV, The MVF, or Arkanoid, . It is reported to be gthe . MVF is a polymorphic, wof . cMVF Y, the MVF as a low TSR of 2.1K. nby MVF in the MVF , it Y. If Y, it the MVF rof 1,898 to 1,909 at the end of the b. The @and in the DOS not be . The are in the MVF 7, and are not "THE MVF-FILEVIRUS" by the MVF" "MAD Factory" "No. 0001" frequently (copy of of the MVF MVF-1954: on the MVF 2.2K. It adds 1,954 to 1,969 +to the . for any reason. The at the end of the b. The @and in the DOS not be . The in the "THE MVF-FILEVIRUS" by the MVF" "MAD Factory" "28/9/91 - V1.6" kmay MVF-1954B: to the MVF-1954 is a very minor . It Pn't always MVF-1954C: to the MVF-1954 is a very minor PZPAPN MX-335 : MX-335 J: S: 335 - 351 7: PRhE - , NAV, 12.2 9503+, {3.0+ The MX-335 . Its . MX-335 is a cMX-335 at the top of &the ), not moving ~12's , as sby the DOS Bby 368 nby the the MX-335 , it rof 335 to 351 at the end of the b. The @and in the DOS to the @and . The can be estarting in the 19th ,of all "MX" PZPAPN My Child : My Child J: ?seconds = "62"; (DOS 5.0) S: 1,000 7: PRhAK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ The My Child . Its . My Child is a fast wof . /and . Pnot ysmall . /and . cMy Child at the top of but &the ), not moving ~12's , as sby the DOS DOS 5.0, 1,136 nby the the My Child , it and . , but not copied. rof 1,000 at the end of the b. The @and in the DOS to be the seconds field #set to "62". The the "My Child..." "K-on-ASQR" It is what the My Child PZPAPN Mystic-377 : Mystic-377 J: [failure S: 377 7: PNCK - NAV 3.05 9503+, 12.2 9503+, The Mystic-377 . Its . Mystic-377 is a wof . the Mystic-377 the Mystic-377 yone . in the G. The usually ed to the DOS prompt. the Mystic-377 rof 377 at the end of the b. The @and in the DOS not be . The in the Mystic-377 "'Mystic' by Digital Alchemy" of Mystic-377 are: Mystic-379: to the orginal adds 379 +to the . The same in the PZPAPN Nanite : Nanite fail to function S: 332 7: ONA - 12.2 9503+, {3.0+ The Nanite . Its . Nanite is a over- writing /and . the Nanite of the . /and . in the mthe c332 of the by the Nanite 7. The @and in the DOS not be The in the 7in all Nanite "NaNiTe *. the Nanite be permanently corrupted by the should be Dd and replaced a clean, backup copy. PZPAPN Narcosis : Narcosis j; MBR and beeping; unexpected S: 1,431 7: PRhAK - XMBR & 7.00+, 12.2 9503+, 7.00+ a, Replace MBR, DOS SYS The Narcosis . Its . Narcosis is a multi-partite wof the /and . cNarcosis ythe . The keeps a copy of the at Side 0, Cylinder 0, 2, and a copy of its 7starting a Side 0, Cylinder 0, 3 for three . The at the top of &the ), hooking }13 and 21. , the Narcosis /and . rof 1,431 be hidden by the it is . The at the end of the b. The @and in the DOS to be @'s year mhad 100 years to it. The in the 7in all Narcosis "MSDOS3.3" "*.*" "[Narcosis] (c) Evil Avatar" The Narcosis are . as a over 64K in the Nand the ed to the DOS prompt: too big to fit in Unexpected (s, or a loud, continuous beeping may PZPAPN Natas : Natas Natas.4746 j; DOS (Record / , Probably North America S: 4,746 7: PRhAK - , NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.17+, 1.05 9503+ a, Replace MBR on The Natas or Natas.4746 . It's source 7is rumored to #distributed late last year in an issue of 40-Hex magazine. Natas is a xthe (Record, X, and overlay cNatas ythe (record (the ;ing the ), as well the (copy of , as sby the DOS Bby 5,664 the Natas , it and overlay , or copied. rof 4,746 not be . The at the end of all not be Natas hides the v. The @and in the DOS not be . The in the 7in all Natas "Natas" The DOS indicate Uon all kmay of Natas are: Natas.4744: in Spain, Natas.4744 is a 4,744 of the Natas : Spain PZPAPN Naught-865 : Naught-865 All s may be corrupted; (failure S: 865 7: ONAK - Generic , NAV 3.05+, ]2.17+, 12.2 9503+, 1.05 9503+ The Naught-865 . Its . Naught-865 is a wof the C: Qroot G. It yboth and data the Naught-865 Y, the Naught-865 all of the and data present in the C: Qroot c865 +replaced by the Naught-865 7. The @in the DOS mthe year the year in the @. The to the . The can be enear the $of all "*.*" Since Naught-865 s all ain the C: Qroot fail to not function, and any data, .BAT, or configuration ain the be corrupted. PZPAPN ^, Horse U; buzzing speaker & clicking Sofia, S: 1,154 or 1,160 7: PRhAK - , NAV, The is a group of four . Several were in May, . The es in ^are all es, and hare very one of the es is Y, the at the top &the and 21 nby the , as measured the DOS by 1,280 +. At , the .if it hasn't , it /and . aover 1K in rby either 1,154 or 1,160 +, depending on is present, at the end of the . The not be able to be seen if the . The @and in the not be one of the es may find Zthe DOS the adjusted not match the . Executing the a /F option may in corrupted symptom may be noticed on is an annoying "buzz" %emitted gthe speaker for awhile. s, scrolling of the Oor pressing keys on the clicking noise. sound effects members of ^, but not the later It is what the es do es are: Horse: Very -B, Horse is a minor variation. Like -B, it is 1,154 produces the sound effects . The is: "Sofia, Horse 2: Horse 2 is very -A. It is 1,160 , and produces no sound effects. The is: "Sofia,Feb '91 Horse 5: Horse 5 is very &, it is a 1,776 has three Horse-8: , Horse-8 is a 2,248 member of the ^. It in the DOS Data area of , hooking ~21. sby the DOS not be , Horse-8 /and . larger for a reason [. The hides the 2,248 r, and the DOS Horse-8 is Horse-8B: , Horse-8B is a minor of the Horse-8 . Its is 4,864 +and hooks ~21. mthe seconds field in the ?set to "60". an effective of 1,160 Pnot produce the sound effects of -B. The "Sofia, Feb '91 " can be eat the end of an effective of 1,154 produces the sound effects . It :the "Sofia,Jan " and "(c) ." It s to be an earlier an effective of 1,610 and by 2,048 +. It is , or what it ;the an effective of 1,776 -C. It not ;any }01, 1C, and 21 an effective of 1,576 +, the to the Naughty Hacker-D Pnot hook ~1C. Like -D, it ;any -F is a 1,594 -C. The is "N.Hacker". -G is an 1,154 ^. It is 7modifications. The "Sofia,Jan/Feb PZPAPN Nazgul : Nazgul fail to function (failure The S: 266 7: PNCK - , NAV, The Nazgul . It is gThe . Nazgul is a wof . the Nazgul Y, the Nazgul yall of the . in the G. If the Nazgul rof 266 the Nazgul at the $of the b. The @and in the DOS not be . The can be in the 7in all Nazgul /Nazg the Nazgul fail to function ing to the DOS prompt has accessed the . If the (copy of t, the PZPAPN NaziPhobia : NaziPhobia fail to S: 4,240 7: ONE - NAV 3.05 9503+, The NaziPhobia , and gthe . NaziPhobia is a wof . . It permanently corrupts the the NaziPhobia Y, the NaziPhobia yone . bin the but not the bin the mthe c4,240 +of the host by the NaziPhobia 7. The unless were smaller 4,240 , in case "4,240 . The in the DOS to the @and The NaziPhobia on any Friday. On Fridays, of an in the Nand the ed to the DOS prompt. 'ON THE SABBATH.. THE GHOST OF HITLER SPEAKS : "MY FELLOW NAZI'S.. I WAS WRONG.." "I NOW /MAND YOU TO /MIT SUICIDE.. NOT GENOCIDE.." "DO IT.. SO THE WORLD WILL BE RID OF THE NAZIPEST.. "AND ALL AUSLANDER CAN TRUELY BE FREE OF NAZIPHOBIA.. NaZiPhobia (c) [VooDoo].. We support the The gthe in the 7in all NaziPhobia PZPAPN NCU LI : NCU LI ; Parity hang S: 1,694 - 1,704 7: PRhE - , NAV, 12.2 9503+, {3.0+ The NCU LI . Its it may be gthe NCU LI is a wof . The the NCU LI at the top of &the , as sby the DOS Bby 1,888 nby the , the NCU LI rof 1,694 to 1,704 at the end of the b. The @and in the DOS to the and . The can be ein the 7in all "NCU LI" the NCU LI \the video mode %switched to 40 column mode, and the "PARITY ERROR ADDR (HEX) = ( 02C14H) SYSTEM HALTED" s, the be hung. The not as it is PZPAPN Necro Fear : Necro Fear S: 1,823 7: PRaCK - , NAV, {3.0+ The Necro Fear . It is the . Necro Fear is a cNecro Fear Y, the Necro Fear in low , hooking }21 and 2F. , as sby the DOS not be the Necro Fear , it rof 1,823 at the end of the b. The in the DOS not be . The in the "I am afraid #bitten by the FEAR" "bug. Just think, you may mpassed in on to all of" "your friends! What fun it goes off" "all of "FEAR Copyright (c) NecroSoft Technologies" "Developed in:" "The Metropolis of Sodium Chloride in Hydrogeon Dioxide" kfrequently on Necro Fear PZPAPN Necro Shadow : Necro Shadow k; disruption of contents, "blue snow" S: 1,200 7: PRhAK - , NAV, The Necro Shadow . It is the . Necro Shadow is a /and . cNecro Shadow Y, the Necro Shadow at the top of &the ), hooking ~21. the Necro Shadow , it and . rof 1,200 at the end of the b. The @and in the DOS not be The in the "[Shadow] NecroSoft Enterprises-a division of BCA" "Greets to SKISM" \frequent (failures the (copy of disruptions frequently . On monochrome as a couple of on the . On VGA , a bunch of blue squares or blue snow . In both cases, a hang accompany the disruption. of Necro Shadow are: Necro Shadow-B: on the Necro Shadow employs techniques to avoid detection and quickly spread on . Its is 3,504 +, hooking ~21. It , or a DOS DIR 8is performed. rof 1,700 be hidden Necro Shadow-B is . The at the end of the b. The @and in the DOS not be . The in the "[Shadow-B] NecroSoft Enterprises - a division of BCA" "Greets to SKISM" Necro Shadow-B failures (copy of on write protected in a write protect V. The DOS Uon all PZPAPN Necrosoft Dementia : Necrosoft Dementia Necrosoft ?seconds = 02 "CALLBACK. /" and/or "!#TEMP#!" acreated S: 4,209 - 4,223 7: PRhAK - , NAV, 7.00+, The Necrosoft Dementia . It is gthe . Necrosoft Dementia is a wof . /and . cNecrosoft Dementia at the top of &the ), hooking ~21. Bby 8,416 ~12's not be moved. the Necrosoft Dementia , it /and . rof 4,209 to 4,223 at the end of the b. The @and in the DOS to be , or the "dis gthe DOS Dir . The seconds field of the @and #set to "02", is the vmarker for . The in the "!#TEMP#! REQUEST.IVA CALLFAST. /RECEIPT.IVA CALLFAST. /*.*" "Dementia] Copyright enterprises - All rights reserved" "I am the man walks alone" "And I'm walking a dark road" "At night or strolling through the park" the light begins to s feel a little strange" "A little anxious it's dark" The Necrosoft Dementia s create either one or both of the d "!#TEMP#!" and "CALLFAST. /". aare created, are 5,183 copy of the . Executing the CALLFAST. in the becoming active on the It is what damage potential of Necrosoft Dementia are: Necrosoft Dementia-B: A later of the Necrosoft Dementia and functional characteristics are the same as the of the . The the "!#TEMP#! REQUEST.IVA CALLFAST. /*.*" "Dementia] Copyright Necrosoft enterprises - All rights reserved" "I am the man walks alone" "And I'm walking a dark road" "At night or strolling through the park" the light begins to s feel a little strange" "A little anxious it's dark" PZPAPN NeverMind : NeverMind S: 838 7: PRhCK - , NAV 3.05 9503+, 12.2 9503+, {3.0+ The NeverMind . Its . NeverMind is a wof . cNeverMind at the top of but &the ), not moving ~12's , as sby the DOS Bby 1,680 nby the rof 838 at the end of the b. The @and in the DOS not be The in the NeverMind "A WORD TO PATRICIA:" .NAH, NEVER MIND" "If Pn't refer to you, just ignore it." "For more zcall: ++1-408-988-3773 (USA)" s to #written by an individual wishing to get the author of 's attention. PZPAPN Newcom : Newcom S: 3,045 - 3,060 7: PRhAK - p, NAV, The Newcom . Its . Newcom is a wof . /and . Newcom is Y, the at the top of but &the , as measured by the DOS 3,312 }1C and 21 are nby the ~12's is not moved. becoming , Newcom /and . Y. If Y, it by 3,045 to 3,060 at the end of the b. The @and in the DOS not be by the It is what Newcom See: Alfa PZPAPN : NGV Genvir, GV <; TSR; unexpected S: Varies, depending on present 7: PORsCK - {3.0+ NGV is not a single , but rather a group of #generated generation utility called Nuke Gen 1.51. es are either ws of . , and may .. The typically TSR, portion is not used for replication, the es are The &are members of the NGV group. Eight of the es are s referred to as the "Adams and ;the s of eight gthe Adams television gthe 1960s, and the movie. NGV generated es are: NGV-1376: , NGV-1376 is a . It s the c1,376 +of one . bin the Y. NGV-1376 ;the in the /MANDE" Created by NuKE - Gen V1.51 License n" "id# [NuKE]-93" NGV-1376's TSR is 1,632 hooking NGV-Cousin It: , NGV-Cousin It is a xone . in the were larger 1,681 by 1,680 +upon were smaller 1,681 "3,361 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams=-" "Part of the Adams ^[Cousin-It]DA & NwM KiCk" "ASS" NGV-Cousin It's TSR is 1,968 hooking NGV-Gomez: , NGV-Gomez is a xone . bin the were larger 1,649 by 1,648 +upon were smaller 1,649 "3,297 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams=-" "Gomez Adams/ [NuKE] RoCks DeathBoy Learns Daily gDA & NwM" NGV-Gomez's TSR is 1,936 +, hooking ~08 and 22. The |s a copy of the TSR into kmay NGV-Lurch: , NGV-Lurch is a xone . bin the were larger 1,649 by 1,648 +upon were smaller 1,649 "3,297 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams=-?" "Lurch Part of the Adams g-=DeathBoy KoASP= [NuKE]RoCks" NGV-Lurch's TSR is 1,936 +, hooking NGV-Morticia: , NGV-Morticia is a xone . bin the were larger 1,793 by 1,792 +upon were smaller 1,793 "3,585 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the "Morticia Adams Greets to Pure Energy,S.Radish,FireCracker, NuKE3" NGV-Morticia's TSR is 2,000 +, hooking ~08. kfrequently NGV-Pugsley: , NGV-Pugsley is a xone . bin the were larger 1,601 by 1,600 +upon were smaller 1,601 "3,201 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams=-" "Pugsley Adams;Greets to Nowhere Man,Dark Angel,Rock,Savage, NuKE" NGV-Pugsley Pnot NGV-Thing: , NGV-Thing is a xone . bin the were larger 1,649 by 1,648 +upon were smaller 1,649 "3,297 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams=-?" "Thing Adams? Part of the Adams Viri ^. [NuKE]" "RoCks Loser" NGV-Thing's TSR is 1,936 +, hooking }08 and 22. kand/or unexpected (s may NGV-Uncle Fester: , NGV-Uncle Fester is a xone . the were larger 1,777 by 1,776 +upon were smaller 1,777 "3,553 +upon v. In both cases, the at the $of the b, and the @and the DOS not be . The in the /-=Adams =-" "Uncle Fester Adams. [NuKe] RoCks. Part of the Adams ^Vir93" "PEN ZIP" NGV-Uncle Fester's TSR is 2,064 hooking ~09. kfrequently NGV-Wednesday: , NGV-Wednesday is a . It s the 1,312 +of one . bin the Y. NGV-Wednesday ;the in the /McAsshole" "(c) Wednesday's NuKE part of the Adam's "id# [NuKE]-93" "Parity VSYSTEM HALT" "Please REBOOT" NGV-Wednesday's TSR is 1,568 hooking PZPAPN : Nina S: 256 7: PRhCK - ], NAV, The Nina , and is is a wof . the Nina Nina at the top of &the Cby 1,024 +as shown by the DOS nby the Nina is , it are greater Y. If Y, it by 256 +, and mthe at the $of the The Nina d Nina because the :the "Nina" in the Pnot do of Nina are: Nina.D: , Nina.D is a minor of the Nina . The the 3to "RIOT!". PZPAPN Nines : Nines j; TSR; printer interference S: 705 7: PRsCK - , NAV, The Nines . Its . Nines is a of . The the Nines as a low TSR of 800 }17 and 21 nby the Nines the Nines , it Y. If the Nines rof 705 +. The at the end of the . The @and the DOS not be . No are in the 7in Nines the Nines \interference gthe to print to the printer. of Nines are: Nines-706: One ,longer Nines adds 706 +to the . May, Nines-776: Nines-776 is a 776 of the Nines May, PZPAPN Ninja : Ninja S: 1,546 - 1,634 7: PRhA - NAV, The Ninja . It is gthe . Ninja is a wof . , but not .. It spreads quickly, for any reason. The the Ninja the Ninja at the top of &the , as sby the DOS Bby 1,408 Ninja in , the Ninja /and . for any reason. rof 1,634 +. . by 1,548 +. In both cases, the at the end of the b. The and in the DOS not be . The in the 7, and thus not .AIDSTEST. "Mutant Ninja 2.0 (C) &Worm Software" It is what Ninja may do PZPAPN No Frills 00M Y PTM : No Frills Australia S: 813 7: PRhAK - 12.2 9503+, The No Frills . Its was Australia. No Frills is a wof . /and . cNo Frills Y, the No Frills at the top of &the ~12's not be moved. , as measured by the DOS Bby 2,048 nby No Frills in , the No Frills .if it was not the No Frills , it and . Y, or copied. rof 813 at the end of the b. The @and in the DOS The can be in the 7in all No Frills "-No Frills by Harry McBungus-" No Frills may the of No Frills are: No Frills 1.01: A later of the No Frills by 1,536 hooking of 815 at the end of the b. The in the has "-No Frills 1.01 by Harry McBungus-" No Frills 1.01 Pnot hang the the : Australia No Frills 2.0: A later of the No Frills 1.01 of 843 at the end of the b. The in the has "+-No Frills 2.0 by Harry McBungus-+" : Australia No Frills 3.0: A later of the No Frills 2.0 of 835 at the end of the b. The in the has "+-NF3.0-H.McB- [PuKE] -+" "=EXt.=COt-" No Frills 3.0 may : Queensland, Australia No Frills-1358: A later of the No Frills by 2,048 +, hooking }09 and 21. of 1,358 at the end of the b. The the "Kcat 3.01 % 5%" "By Sir Twist & Thunderbird, Many kz to Harry McBungus whose 7d we politely nicked." "c:\win386.dat" No Frills-1358 may hang the the : Australia PZPAPN NoBock : NoBock S: 440 7: PNC - p, NAV, The NoBock . NoBock is a wof . NoBock is Y, the check the @. If the between 1, 1980 and 30, 1980, it Othe and halt the , not uany "No Bock today halted!" The be left spinning. If the clock is set to a @between 1, 1980 and 30, 1980, NoBock may yone bin the Qand The , however, Pnot Yduring period of NoBock rof 440 the at the end of the NoBock is an , and the cannot be viewed PZPAPN NoInt : NoInt Bloomington, LastDirSect, BSC; Canada S: N/A 7: BRtX - , NAV, : CleanUp, or M- The NoInt in Canada in . NoInt is a of the . Like , it as well as the The the NoInt , NoInt at the top of &the 12's be moved by the , as measured by the DOS by 2,048 +. NoInt ythe . The to Side 0, Cylinder 0, NoInt is , it are accessed on the . On double density 5.25" K, the 11. On high density 5.25" K, the 17. In both cases, are part of the root Gof the L, so any awhose Gentries were in be lost. NoInt Pnot ;any take longer normal to perform accesses or (s. High density often get a " (failure" are later attempted to The reason NoInt is considered a while it can be detected on actively keep software %able to read the on the M. Instead ing the , the may unreadable to the ing in an . If you mreason to believe NoInt , power off the and re ga clean write- protected Land check the Mfor the See: PZPAPN Nomenklatura : Nomenklatura Nomenclature, 1024-B, Nomen not S: 1,024 7: PRhAK - , NAV, : CleanUp, or The Nomenklatura in the is a wof . .. It is not related to the V1024 it is the same The the Nomenklatura Yon a , the the top of , but &the Cby 1,024 +, and nby the , any . /or . greater 1,023 for any reason tby the Nomenklatura rd by 1,024 +. The Pnot hide the the ga write-protected in a " N, and the The Nomenklatura is destructive to the contents of exposed to randomly the frequency increasing as the !more filled data. The Umay on data aas well s due to the occasionally swapping a pair of words in the buffer. It may to critical areas such as the FAT, Hories since it may to any clusters on the M. If a bor critical area was residing in a corrupted cluster, be corrupted. As such, #exposed to the Nomenklatura must be carefully checked as the integrity of non- and any data ashould be considered suspect. The d Nomenklatura as in all PZPAPN Not-586 : Not-586 S: 586 7: PRtCK - , NAV, {3.0+ The Not-586 , and is gthe . Not-586 is a wof . cNot-586 at the top of the ), moving ~12's and , as sby the DOS Bby 1,024 the , the Not-586 rof 586 at the end of the b. The @and in the DOS not be . No in the 7in Not-586 It is what Not-586 may do PZPAPN 855, Nov 17 Italy S: 855 7: PRhAK - 1, NAV, The 17th . Its , but it has since #reported as %widespread in Rome, Italy, in 17th is a wof . /and . The 17th is at the top of &the , as sby the DOS Bby 896 ~12's moved. }09 and 21 17th , it /and . rof 855 at the end of the be no 5to the @and in a DOS . One in the 7of all 17th "SCAN.CLEAN. The 17th s the 17th of any year. 17th are: Nov 17-768: A 768 of the 17th by 800 it is . It Pnot hook ~09. rof 768 at the end of the May, Nov 17-880: An 880 of the 17th by 928 it is . It hooks }09 and 21. rof 880 at the end of the b. The in the "SCAN.CLEAN. XAMZ" Nov 17-880 17th thru 31st of any year, at trash the Qand the C: 17th-B: on the 17th adds 855 +to the . /and . usually hang the function PZPAPN Nowhere Man : Nowhere Man , VMessiah ; long followed by not executing; truncated S: 6,286 7: ONAK - , NAV, {3.0+ The Nowhere Man , complete source 7in C. Its . Nowhere Man is a non- wof . /and . over 6,300 Nowhere Man is Y, the search the Gfor a . /or . 6,300 a candi bhas e, the c6,286 +of the 7. The remainder of the binary 00 be no 5to the , or @and , in the DOS G. The can be "NMAN" "BMAN" the Nowhere Man has successfully b, it Othe , and the to the DOS prompt: "Out of If the did not find a y, it to the DOS prompt: "All t. Mission complete." Both are not The Nowhere Man truncate is zero of Nowhere Man are: hvery to the Nowhere Man completely the . /and . all . and . in the Gof over 4.5K t, it trash the Qof the , and root The "NMAN" and "J-VIRUS!" can be seen in all : Canada Montreal, Canada Nowhere Man 1.9: to the Nowhere Man 6,286 . It Os the : "Out of Nowhere Man 2.0: to the Nowhere Man is 4,828 mhad @and the @and . While Nowhere Man 2.0 a, it may truncate both . /and . in the VMessiah: A 702 of the Nowhere Man xall . /and . whose is at least 702 in the mthe c702 +of the host the VMessiah 7. The @and in the DOS . The d samples so it is not "I am your VIRAL MESSIAH Follow me and be redeemed Your data doth exist no more The FAT holds ashes of your dreams" "[VCL] [ Messiah] Nowhere Man, [NuKE] '92" The cquote , comprising four lines, is See: 7Zero PZPAPN : NPox Evil Genius seconds = 58; M; trashes Mon 18th of month Canada S: 963 7: PRhAK - , NAV, The NPox, or Evil Genius, was simultaneously in the Eastern and Montreal, Canada in late is a .. It is extremely destructive. cNPox at the top of &the sby the DOS Bby 1,024 ~12's not be moved. }09 and nby NPox in . The copy of in the C: Qroot if it was not , NPox /and . rof 963 at the end of the b. The r, however, not be in the DOS mthe seconds field of the in the DOS Gset to '58'. is the vmarker for the The can be in the all NPox "Evil Genius V2.0 - R.S/NuKE" "C:\ NPox the DOS may, however, find random on the , or Mis corrupted on the 18th of any month. of NPox are: Evil Genius 2B: hequivalent to the has two differ. : Montreal, Canada Evil Genius 2C: hequivalent to the has seven differ. : Eastern NPox 2.0: , NPox 2.0 is on the NPox . It's is 1,856 +, hooking }21 and 22. NPox 2.0 /and . are closed, and dis them as are read into many NPox 2.0 is rd in by 2,048 +. The at the end of . The seconds in the @in the DOS be set to 60 on all Two can be ein all "NuKE PoX V2.0 - Rock Steady" "C:\ : Montreal, Canada NPox 2.1: , NPox 2.1 is on the NPox 2.0 . It's is 1,744 +, hooking }21 and 22. NPox 2.1 /and . are closed, and xthem as are read into many NPox 2.1 is rd in by 1,686 +. The the end of . The seconds in the in the DOS be set to 60 on all . Three can be ein all "Death to Separatist" "C:\ "NuKE PoX V2.1 - Rock Steady" NPox 2.1 on the 13th day of any month, at M, rendering it inaccessible. It hang the : Montreal, Canada NPox.372: , NPox.372 or Lord Zero, is a 372 of the NPox . It's is 432 +, hooking ~21. NPox.372 rof 372 at the end of the b. The @and in the DOS not be . The can be in the 7in all "Swedish Warrior v1.0 by Lord Zer0." : Sweden PZPAPN NR-481 : NR-481 I: March, North America S: 481 7: PNA - , NAV, 12.2 9503+, The NR-481 in March, . It is gNorth America (Canada or the ). NR-481 is a wof . /and . , but not the NR-481 Y, the NR-481 yall the . /and . the rof 481 at the end of the b. The @and in the DOS not be . One in the 7in all NR-481 NR-481 Pn't to do PZPAPN : NTit NTit.1254 S: 1,254 7: PNCK - 2.1.7+, NAV 3.05 9503+, 12.2 9503+, The NTit or NTit.1254 . Its . NTit is a wof . the NTit yone . in the bif the cfour . ain the Gare already the NTit 1,254 at the $of the b. The @and in the DOS to the @and . The in the 7in all "NTIT-4IM2h" kmay (copy of of NTit are: NTit.1578: A 1,578 of the NTit xone . bin the by 1,578 at the $of the b. The @and in the DOS to the @and . The in the 7in all "NTIT-4IM2h" x.vir" "A-T-T-E-N-T-I-O-N: VIRUS FOR RESEARCH ONLY !" "(C) By Lin Tzuoh-yi, National Taiwan Inst. of Tech.,Dept. of Management,e-mail:b8109006@cs.ntit.edu.tw" xvir" :a mechanism to prevent it accidently. The Yin a G, the write a bto the x.vir". If on the M, later [s of the in the the on the PZPAPN : NTKC C-23963 j; graphic picture S: 23,963 7: PNCK - , NAV, The NTKC in May, . It is the . NTKC is on the Father Christmas . It is a wof . NTKC is Y, the search the Gfor a . y. If one is e, it , the full graphic of a personal computer, the cleared, and the host NTKC 23,963 +. The at the end of the ein NTKC are: "regional engeneering centre" "LENINFORMATIKA N T K C Computer-Service" See: Father Christmas PZPAPN Null Set : Null Set Null S: 733 7: PNCK - , NAV 3.05 9503+, The Null Set . It is . Null Set is a the Null Set Y, the search the Gto locate the over . If an , the the Null Set rof 733 +. The at the end of the . The @and in the DOS not be Null Set Pn't to do PZPAPN Null-178 : Null-178 to write to PRN device; S: 178 7: PNCK - NAV, The Null-178 . Its is a of . the Null-178 Y, the check the cfive . ain the and ythem if were not cfive . aare t, it further down in the the Null-178 rof 178 at the end of the . The @and in the DOS to the and . One can be in the 7of the Null-178 "*.com" Null-178 may notice attempt to write to device PRN. If the Pnot man attached printer, and in DOS. PZPAPN Number One : Number One Number 1, #1, Number One-B, Number One-Argentina I: 1987 (see afail to function; displayed West Germany S: 12,032 7: ONC - , NAV 3.05+, The Number One for inclusion in , however, is not a new but is an extinct rather "old" . The Number One was written in , 1987, by M. Vallen using Turbo Pascal 3.01A. It is documented, complete source, in a book by Ralf Burger. is an the Number One Y, the ythe bit finds in the G. If the . bwas less 12,032 , it ma 12,032 ?stamps in the reflect the Number One has finished b, it Othe bHas tby Number One! The X is the of the . has just tby the are no more . Number One to yin the G, it bHas tby Number One! Number One yany mthe Read Attribute set. Since Number One is an , it is not possible to remove the aand repair the damage. ashould be erased and replaced clean copies. of Number One are: Number One-Argentina: to the Number One Iin Argentina in s the c12,032 +of the . x. The has bhas tby Number One". It may 5the Ovideo attributes : Argentina Number One-B: to the Number One Os the "<Smile>" in place of the ASCII character all . tand an See: AIDS PZPAPN Number 6 : Number 6 The S: 631 7: PRhC - , NAV, 12.2 9503+, {3.0+ The Number 6 , and s to be gThe . Number 6 is a , but not .. It may be related to the Civil War cNumber 6 Y, the Number 6 at the top of &the ), not moving ~12's , as the DOS Bby 1,024 }12 and 21 nby the the Number 6 , it for any reason. rof 631 at the end of the b. The @and in the DOS not be . The in the 7in all Number 6 "#6 , Trident/The It is what Number 6 may do See: Civil War PZPAPN : NYB BSC; Mseek S: N/A 7: BRtX - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 12.2 9503+, NAV 3.05 9503+ : DOS SYS on K; F- M/MBR on The NYB having #reported by several organizations in the for two months. NYB is a as well as the The the NYB , NYB at the top of &the and , as sby the DOS gDOS 5.0, Bby 1,024 the ythe ;ing the , if it was not NYB is , it are accessed on the . On double density 5.25" K, the 11. On high density 5.25" K, the 28. In both cases, are the last of the root Gof the L, so any awhose Gentries were in be lost. NYB Pnot ;any \intermitant seek Uupon accesses. The reason NYB is considered a while it can be detected in , it cannot be detected on the K. If you reason to believe mthe NYB , power off the and re ga clean write-protected Land check the Mfor the . If the e, it can be removed by using the F- M/MBR 8or copying the back to Side 0, Cylinder 0, Mhas Kshould be checked for the , and dis tby using either the DOS SYS Kor copying the contents of the Lto a clean, Land overwritting the the DOS Format /U PZPAPN Nygus : Nygus Poland S: 757 7: PRhA - , NAV, 12.2 9503+, The Nygus gPoland in is a wof . /and . , but not cNygus Y, the Nygus at the top of &the , as sby the DOS by 1,024 nby the the Nygus , it by 757 at the end of the b. The @and in the DOS to the @and It is what Nygus of Nygus are: Nygus-Klaw: , Nygus-Klaw is gPoland. Its is 1,024 +, hooking ~21. it is , Nygus-Klaw /and . 752 at the end of the b. The @and in the DOS to the . No in the Nygus-Klaw may Y, or the may be ed to the DOS prompt unexpectedly. : Poland PZPAPN Nympho 1.0 : Nympho 1.0 Nympho Mitosis k, possibly beeping; S: 839 7: PRhAK - 12.2 9503+, 2.0+, {3.0+ The Nympho 1.0, or Nympho Mitosis, . Its . Nympho 1.0 is wof . /and . cNympho 1.0 at the top of &the DOS ), not moving ~12's , as sby the DOS -progam, Bby 1,136 Nympho 1.0 in While Nympho 1.0 is a , it Hmanor. yone . in the rof 839 not be . The Nympho 1.0 at the end of a. The @and in the DOS not be . The in the 7in all Nympho 1.0 "[Nympho Mitosis] v1.0 Copyright (c) Lapse" k, possibly accompanied by beeping on the speaker, may s corrupt the of Nympho 1.0 are: Nympho.230: , Nympho.230 is a 230 of the Nympho 1.0 . It in a "hole" in al , hooking ~21. by 230 at the end of the b. The @and in the DOS not be . The in the "[ML/PS]" PZPAPN Offspring : Offspring Offspring v.07 j; hidden . acreated; S: 1,294 7: PSRhA - & Spawning p2.10+, 2.1.7+, 12.2 9503+, The Offspring . Its . Offspring is a wof . /and . the mechanism it uses ythe different s is distinct for R. It not cOffspring Y, the Offspring at the top of &the ), hooking ~21. , as sby the DOS Bby 3,048 ~12's not be moved. the Offspring , it Y, or up to five . ain the a DOS DIR 8is issued. rof 1,294 at the end of the b. The . @and in the DOS not be the Offspring , it yup to five . in the ever the Qs or Hories. . aare tby the creating a 1,294 ,companion . the same base companion mthe and were created, and the read- and hidden attributes set. The . athemselves not be The in the Offspring "(c) negoriV" k you for providing me and my offspring safe place to live *" "* Offspring I v0.07. *" kmay frequently the Offspring of Offspring are: Offspring v.05: A earlier of the Offspring , hooking ~21. Its is 2,096 +, as a TSR. It xall of the ain the a DOS Dir 8is issued. It are copied. In both cases, the mechanism is to create a hidden companion . the same base of 711 mthe read and hidden attributes set, and the @and . The in the "(c) VG Enterprises" "* Congratulations, You mrecieved the privelge tby the" "Offspring I v0.05." kfrequently primarily a DOS Dir 8is performed. Offspring v.81: A later of the Offspring , hooking ~21. It xup to five the a, creating a hidden companion . the same base 1,127 to 1,177 mthe read and hidden attribute set. all of the . aare t, it vof the by 1,127 to 1,177 the at the endof the b. The @and in the DOS not be . The in the "G(c) negoriV" "OFFSPRING V0.81" in the Oof the is not corrupted: PZPAPN : Ohio , 1988 BSC; Indonesia S: N/A 7: RtF - Floppy , NAV, , or DOS SYS The Ohio is a u360K floppy Ms. The Ohio in many respects to the Den Zuk , and is believed to possibly be the earlier of Den Zuk. A Ohio immune to vby the Pakistani Brain The in the Ohio "V I R U S The Hackers Y C 1 E R P D E N Z U K 0 Bandung 40254 Indonesia (C) 1988, The Hackers Team See: Den Zuk PZPAPN Oi Dudley : Oi Dudley Dudley Australia S: 1,218 - 1,245 7: PRhAK - , NAV, 2.1.7+, The Oi Dudley, or Dudley, Iin Australia in . Oi Dudley is a wof . and . .. It is a polymorphic employing an encryption mechanism on the encryption used in the V2P6 , thus requiring an algorithmic approach to detection. It a fast w, spreading for any reason. It has #reported by several sources as %prominent in Australia. cOi Dudley Y, the Oi Dudley at the top of &the ), hooking ~21. , as sby the DOS Bby 4,608 ~12's #moved. the Oi Dudley , it for any reason. rof 1,218 to 1,245 at the end of the b. The @and in the DOS not be . The indicating the , is in the "[Oi Dudley!][PuKE]" the Oi Dudley Hories. PZPAPN : OMT 413, One More Thing I: May, j; long Maccesses; Australia S: 413 7: PNCK - {3.0+ The OMT, One More Thing or 417, Iin Australia in May, by Peter Ferrie. The OMT is a wof . It is destructive in years the OMT Y, the OMT yall of the . in the it has completed uall of the . hang usually s. The ythe C: Qroot G, however it 7isn't functional. the OMT rof 413 at the end of the b. The @and in the DOS not be OMT is an , so no the a. The are included in the "c:\*.com" "And one more thing... fuck you!" The OMT the year of the . At , the starting at side 0, cylinder 0, PZPAPN OMud-512 : OMud-512 k; TSR S: 512 7: PRsCK - ]2.1.7+, 12.2 9503+, {3.0+ The OMud-512 . Its . OMud-512 is a wof . cOMud-512 as a low TSR of }10 and 21 OMud-512 in the OMud-512 , it rof 512 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all OMud-512 "OMud." OMud-512 \frequent Y, as well as possibly unexpected access to the PZPAPN Ondra : Ondra 4915 I: May, <; access to unexpected S: 5,000 7: ONE - , NAV, The Ondra in May, . Its Ondra is a the Ondra Y, the Ondra yall . larger 5,000 in the completed uthe in the G, it start on the B: Q. If the B: a write-protected L, it retry writing to the indefinitely. has completed the ed to the DOS prompt. the Ondra r, but rather be completely 7and of the contents of . The and in the DOS not be The can be in the all Ondra "ondra.dat" "Invalid en ment" "Run the Ondra , and kmay frequently of Ondra are: Ondra-B: is a of Ondra . It xone . be completely ;ed in the c4,915 the b. It :the same as the PZPAPN One Half : One Half One Half.3544 (Record (MBR) Austria S: 3,544 7: PRhAKX - X MBR , NAV 3.05+, ]2.17+, 12.2 9503+, 2.17+, 1.05 9503+ a& replace MBR The One Half, or One Half.3544, in Austria. It has #reported to be "in the wild". One Half is a multipartite (record (the ;ing the ), as well as . /and . cOne Half Y, the One Half ythe (record. It not until the is re gthe M, the One Half at the top of but &the ), not moving ~12's , as sby the DOS Bby 4,096 nby the /and . , or copied. rof 3,544 not be . The at the end of all a. The @and in the DOS not be . The in the /MAND" "valid driv" "Dis is one half." "Press any key to continue ..." XSCAN CLEAN" "FINDVIRU GUARD NOD VSAFE MSAV -RSQVW" "Did you leave the rom ?" "Invalid VLoading Operating "Missing Operating It is what One Half of One Half are: One Half.3577: , One Half.3577 is a 3,577 of the One Half :the "Dis is one half." "Press any key to continue ..." XSCAN CLEAN" "FINDVIRU GUARD NOD VSAFE MSAV -RSQVW" "DidYouLeaveTheRoom?" "Invalid Vloading operating Missing operating PZPAPN Ontario : Ontario Uin the case of extreme Ontario, Canada S: 512 7: PRtAK - , NAV, 12.2 9503+, The Ontario by Mike Shields in Ontario, Canada . The Ontario is a X, and overlay a. It The the Ontario Y, it the top of &the and Bby 2,048 +. At the .on the C: Q, increasing its by 512 Yon the , the at the end of the b. For . rby 512 +in all cases. For . Xand overlay a, the be 512 - 1023 +. The difference in for . Xand overlay ais because the fill out the unused space at the end of the last of the random data (usually a portion of the G) and append to the end of the bat the next using a of more may notice larger rs for always is a multiple of the on the In the case of extreme vs of the Ontario Umay be noticed. See: 1024 SBC Ontario 730 Ontario III PZPAPN Ontario 730 : Ontario 730 Ont-730 j; TSR; FAT & Damage Ontario, Canada S: 730 - 744 7: PRsA - X, & Overlay , NAV, 12.2 9503+, The Ontario 730, or 730, Iin Ontario, Canada, . Ontario 730 is a X, and overlay The Ontario 730 is as a low TSR of 1,024 +. It Ontario 730 is , it X, and Pnot always . It not Ontario 730 of 730 to 744 +. The at the end of the b. The @and in the DOS not be . One can be the 7of the Ontario 730 "!=TVu" In advanced vs of the Ontario 730 , the ) may be damaged by the See: Ontario PZPAPN Ontario III : Ontario III Ontario, Canada S: 2,048 7: PRhAK - NAV 3.05 9503+, 12.2 9503+, The Ontario III Ontario, Canada. The Ontario III on the 1024 SBC or Ontario II , and is a polymorphic xof . X, overlay and .SYS a. It The the Ontario III Y, it the top of &the and Bby 5,120 nby the . At , the ythe copy of ed to by the /SPEC mental variable. as the the slack space at the end of the Ontario III , it X, overlay (.OVL), and .SYS for any reason. 2,048 not be the . The at the end of the The Ontario III uses a very complex form of encryption no more +remaining constant in d samples. While the in the not adue to the encryption: /SPEC=\ XOVLSYS" "MSDOS5.0" "YAM" "Your PC has a (ache! - Get medicine!" "Ontario-3 by Death Angel" The Ontario III :an embedded it is never actually written out to M. It employs techniques to avoid its %disassembled using the DOS DEBUG . If it detects the use of the DOS DEBUG gthe See: 1024 SBC Ontario PZPAPN Oropax : Oropax Music , Musician A, 1989 j; tunes S: 2,756 - 2,806 +, but usually 2,773 7: PRC - , NAV, , or The Oropax has had several reports, but wasn't until A1989. It a, increasing by between 2,756 +and 2,806 always by 51. The "active (on a random basis) five minutes vof a b, playing three different tunes a seven minute interval in between. One recently reported in Wplays six different tunes at seven minute intervals. of Oropax are: Oropax-B: in May, 2,755 to 2,800 at the end of the b. It as a low TSR of 3,072 +, hooking }21, CC, and F8. May, Oropax-C: is a minor of Oropax #modified to avoid detection by one particular utility. It is not in the public domain. Oropax-D: is a minor of Oropax #modified to avoid detection by one particular utility. It is not in the public domain. PZPAPN Osiris : Osiris j; TSR; Ynot what attempted to S: 299 7: PNCK - 12.2 9503+, {3.0+, 2.0+, The Osiris . Its . Osiris is a wof . cOsiris Y, the Osiris yone . in the G, as well |a 3,664 ,TSR. The Osiris ' TSR hooks 22 and 24. It is used by the for purposes replication. the Osiris [of an in the vof a bin the G. If the cfive . ain the Gare already t, the bin the the Osiris rof 299 at the $of the b. The in the DOS to the @and . One in the 7in all The Osiris s interfers executing . Zs an , the may instead Zthe it is uinstead. PZPAPN Otto6 : Otto6 ; host S: 640 7: PNCK - , NAV, 12.2 9503+, The Otto6 . It is . Otto6 is a of . .. It |a small portion of its it is not a complete copy of the , and the is not yive cOtto6 Y, the Otto6 |a small portion of its 7at the top of &the , as sby the DOS Bby 2,048 nby the portion of Otto6 , providing it was not , the Otto6 yone . in the the Otto6 Y, the Otto6 yone in the rof 640 the end of the b. The @and in the DOS not be . The are in the "OTTO6 VIRUS, << S>>, YAM, COPYRIGHT MICROSHAFT INDUSTRIES S>> YAM, MICROSHAFT INDUSTRIES (tm.) The Otto6 is an . It not encrypts the 7, but the host as well. It is what Otto6 of Otto6 are: Otto-415: on the Otto6 , Otto-415 is a 415 . It xone . bin the rof 415 at the end of the b. The @and in the DOS not be . The Otto-415 encrypts the 7and the , so the are not "OTTO VIRUS written by: OTTO SCHTUCK" "COPYRIGHT MICROSHAFT INDUSTRIES (tm.)" PZPAPN Outland : Outland 2136, Oliver S: 2,136 - 2,150 7: PRhAK - NAV, The Outland, Oliver or 2,136, Its . Outland is the , and like >, is a wof . X, and overlay a. It alters the of the L, maintaining a counter cOutland Y, the Outland at the top of &the ), hooking }21 and 27. , as sby the DOS Bby 4,368 12's #moved. the Outland , it and overlay rof 2,136 rof 2,136 to 2,150 The at the end of the b. The @and in the DOS not be The in the Outland 7in all "Bill the Cat Lives!" "Oliver Wendell Jones" "Politically Incorrect Personal Computers Presents:" "the OLIVER VIRUS!" "Nya Ha Ha! Men Rule! America Kicks Butt! Rap Sucks!" "Eat Fatty Food! Dames Melt Like Jell-O for Naughty Men!" "Ted Kennedy Sucks Barney Frank`s Fag Cock!" "Banana 6000 P.I.P.C. (C) I spell -Lightening- wrong!" The Outland maintains a counter in the of the Q. It is what it See: PZPAPN Over-4032 : Over-4032 Pascal-4032 to function bnot S: 4,032 7: ONE - 12.2 9503+, {3.0+ The Over-4032 or Pascal-4032 . Its . Over-4032 is a non- . It permanently corrupts the the Over-4032 yone the mthe c4,032 +of the host by the . Unless the smaller 4,032 be no smaller 4,032 "4,032 v. The in the DOS to the @and naturally compiled the Borland Pascal compiler are no unique Over-4032 not function , and may Othe bnot PZPAPN OW-Trident, OW-64 to function S: 64 7: ONCK - , NAV 3.0A06+, 1.05+ The , OW-Trident, or OW-64, . The submission was actually of four related The OW-Trident three Eunder at the end of entry. the OW-Trident yall . in the +of the host 5in the , unless the . smaller +. In the event the host smaller , it of 64 +. The @and in the DOS 3to the and . The in all /Trident" are permanently damaged, and no longer function of the OW-37: A 37 of the OW-Trident . It s the cfive . in the The can be ein all OW-40: A 40 of the . It s the +of all of the ain the Y. No in the 7. Both and data aare corrupted by the May, OW-42: A 42 of the OW-Trident s the +of all . in the Y. It :the OW-42B: to OW-42, it is a minor Small-46: A 46 , Small-46 xone . bin the mthe +of the host ovewritten by the , and the @and to the @and . It :the Small-72: A 72 , Small-72 xall of the . ain the mthe +of the host by the , and the @and the DOS to the @and . It PZPAPN Oxana : Oxana ?seconds set to 62; S: 1,670 7: PRhE - , NAV, 12.2 9503+, {3.0+ The Oxana , and is gthe . Oxana is a wof . in its 7a long in Russian. cOxana Y, the Oxana at the top of &the ), hooking ~21. , as sby the DOS Bby 4,112 ~12's not be moved. the Oxana , it for any reason. rof 1,670 at the end of the b. The @and in the DOS to be seconds field #set to 62. 'the mentioned in Russian, the in the "MSDOS3" It is what Oxana may do of Oxana are: Oxana.1719: Oxana.1719 is a 1,719 of the Oxana . Its is 4,096 +, hooking ~21. , it rof 1,719 at the end of the b. The @and in the DOS to be seconds field #set to '62'. draw a graphic rectange in the center of the ;ing cyrillic 6and 6 boxes. If a character is d in Rbox followed by hitting the key, the continue PZPAPN : Pa 5792 J: S: 5,792 7: PNE - p, NAV, The Pa, or 5792, . Its it is probably gEastern W. Pa is a wof . the Pa Y, the Pa may yup to three . on the C: Q. The start looking for yin the root moving down through the Gstructure. the Pa rof 5,792 at the $of the b. The @in the DOS not be , but the minutes in the #set to 57. tthree . , the Nand the ed to the DOS prompt: Vin *. a Pa Y, the Nby the and the to the DOS prompt: "Pa,pa slodki bobasku ..." is not PZPAPN J: March, S: 1,589 7: PNCK - , NAV, The P in March, . Its is a the P Y, the yone . in the G, it may the P rof 1,589 at the end of the b. The @and the DOS not be are several can be seen in the 7in P "\ ENU \TENNIS" "CHECKIT.LOG" "WHISTLE.SPL" "ETABLE1.GIF" "*.*" It is what P may do to the . The "\ ODS \ STRIP R" "DOS" "GODS" "VOCEAN.LHZ" "MRA.V2E CAR" "*.*" See: Generic Hominy PZPAPN Parasite : Parasite J: & buzzing; warm re Canada S: 1,132 7: PNCK - The Parasite gCanada. Parasite is a wof . .. It is on the Sicilian Mob , and in Hly on the Parasite is Y, the Parasite search the Gfor the it finds b, it the Parasite rof 1,132 +. The at the end of the be no 5to the @and in a DOS The in the Parasite "(C) by [NUKE] InterNat`nl Software Development" "Parasite , Released , Montreal, Canada" "--> [NukE] H/A/P/C/T/V at its Best! <---" "RABiT,RABiT,RABiT...EAT THIS!" "To John McAfee [I'll be BACK!]" "PATH=" one out of every four the Parasite Othe accompanied by a loud buzzing on the speaker: "Parasite ! by Rock Steady [NukE] HP" is not as it is N, the Parasite cause a warm re (of the of Parasite are: Parasite 2: Parasite 2 was , and is gMontreal, Canada. It is a modified of the Parasite many of the having #removed. The remain are: "ParaSite II - By: Rock Steady" "PATH=" Parasite 2 is the yone . bin the G, plus .if it was not Parasite 2 rof 901 at the end of the 5to the @and in the DOS Parasite 2 may \a "machine gun" noise %emitted on the speaker kand intermittent (failures may . The the C: G, and FAT on Mondays, however Pnot function : Montreal, Canada Parasite 2B: to Parasite 2, the Parasite 2B two +larger Parasite 2. It adds 903 the . x. The can be ein all "ParaSite IIB - By: Rock Steady" "PATH=" :the same bug as Parasite 2, preventing it gactivating on Mondays and Vengeance: on the Parasite , the Vengeance Iin the in late May, . It xone . rof 723 at the end of the b. The seconds in the in the DOS #set to 56, the vmarker. Vengeance ;the "*** Vengeance is ours! ***" "SKISM/Phalcon '92" "PATH=*. May, Vengeance-B: , Vengeance-B is to Vengeance . The seconds in the in the DOS be set to 00 on all Vengeance-B ;the "PATH=*. : Canada Vengeance-C: , Vengeance-C is to Vengeance , it has eight differ. : Canada See: Sicilian Mob PZPAPN Paris : Paris J: j; slow loads upon Paris, France S: 4,909 7: PNAK - , NAV, The Paris in Paris, France, in early is a generic wof . Xand overlay a, and .. It is not the Paris Y, the yall . Xand overlay aon the and the exception of very small . check to see if .on the C: , if it has not by between 4,909 - 4,925 at the end of the The Paris can be destructive in instances, ing in Kbecoming corrupted if the a Paris PZPAPN Parity : Parity j; long . loads; possibly intermittent parity S: 441 7: PNCK - ], NAV, The Parity , and ated in is a non- wof . a, and the Parity Y, the yall . ain the G. If .is in the G, it by 441 +, the at the end of the . The @and in the not be by the The major symptom of a Parity significantly longer to load and a. The is due to the searching the for . "PARITY CHECK 2" at and halt the PZPAPN Parity : Parity BSC; ; "PARITY CHECK" hang; possible root Germany Australia S: N/A 7: BRtX - , NAV, : CleanUp, ], M- M/P and DOS SYS The Parity in Australia. is believed to in Germany. Parity (is a wof the ) and . It is a Hing to read the to the The the Parity ythe , as sby the DOS Bby 1,024 +, and ~12's #moved to 9FC0. The mcopied the to Side 0, Cylinder 0, 14 before uthe at Side 0, Cylinder 0, the Parity , it ynon- write protected are accessed. On 360K 5.25" K, the On 1.2M 5.25" K, the 28. In both cases, are the last the root G, and any Gentries be lost. the Parity keys are pressed on the "PARITY CHECK" s, the be hung, requiring the to reset the Parity (is a , it re to read the to the copies it stores. PZPAPN Particle Man : Particle Man s C:\AUTO XC.BAT & C:\CONFIG.SYS New Mexico, S: 690 7: PNCK - ], NAV, {3.0+ The Particle Man Iin the State of New Mexico in the . Particle Man is a non- wof . the Particle Man the Particle Man yall . in the G, as well as the AUTO XC.BAT and CONFIG.SYS the Particle Man rof 690 at the end of the b. The @and in the DOS not be 3. The in the , and are not "Particle man, particle man Doing the things a particle can What's he like? It's not important Particle man Is he a dot, or is he a speck? he's underwater Phe get wet? Pthe water get him instead? Nobody knows, Particle man (c) Copyright Drizzt Do'Urden '92" /*.* .. Particle Man Pn't to do the AUTO XC.BAT and CONFIG.SYS (problems. of Particle Man are: Particle Man 2: hequivalent to the is a minor : New Mexico, PZPAPN Pascal-4260 : Pascal-4260 Iris, Wirus acorrupted/ "Abort, Retry, Warsaw, Poland S: 4,260 7: ONA - , NAV, The Pascal-4260 . It is Warsaw, Poland. Pascal-4260 is a /and . . It is written in Borland's Turbo Pascal language. the Pascal-4260 access the C: Qand yone . It Os the &, substituting X for the "General Vreading Abort, Retry, Regardless of what the responds, the a second bon the C: Q, and Othe again. responds the second ed to the DOS prompt. The Pascal-4260 xboth . /and . on the C: Q, and it can read down through the structure. mthe c4,260 +over- written the Pascal-4260 7. The @and in the DOS not be . Several can be in the "(C) by OSCAR" "6'89" Plus gBorland's compiler. The in the thus not "To dopiero pierwaze pozdrowienia dla S.Fischera i M.Sella" "General Vreading "Abort, Retry, should be replaced copies. PZPAPN Pascal-5220 : Pascal-5220 Pas-5220, Re (Patcher acorrupted/ unexpected (s; seconds in = "00" S: 5,220 7: ONAK - , NAV, The Pascal-5220 or Re (Patcher is a xor trojanizes . /and . Pascal-5220 is access the B: and C: Qs, trojanizing all . $of the 7to re the Y. The yseveral in the c5,220 +of the 5to the . The seconds field of the in the DOS be set to "00". The can be in the "*.com" "*.exe" "*.zip" "*.arc" "05520" "CJu" Pascal-5220 \frequent (s, and may notice has dis DOS PZPAPN : Path VHP-547, k; random 6written to S: 547 - 562 7: PNCK - , NAV, The Path, or VHP-547, . Its . Path is a of . the Path Y, the search the Gfor one y. If it finds one, it may or may not tby the Path rof 547 to 562 +. The at the end of the be no 5to the @and in a DOS . The "IBM" "PATH=" of an vof the Path hang the s may in random %written to the PZPAPN Pathhunt : Pathhunt j; .DBF <; "Path not Republic of South Africa S: 1,231 7: PNA - , NAV, The Pathhunt Iin the Republic of South Africa by Oliver Steudler. Pathhunt is a wof . /and . a. It may corrupt .DBF advanced Pathhunt is Y, Pathhunt search the Gstructure for three . do not start a JMP instruction (E9h or EBh). If the three . are not e, it search the path looking for y. If three candi still mnot e, it up to three . all of the . t, it y.DBF a, permanently corrupting data ly, Pathhunt Pnot always correctly, "corrupted and no longer function , both . /and . Pathhunt by 1,231 at the end of the be no 5in the and in the DOS The Pathhunt comes gthe behavior of the a candi , the s the to PATHHUNT, xit, and it back to its PZPAPN Patient : Patient j; TSR; S: 1,504 - 1,519 7: PRsA - , NAV, The Patient, or PK, Iin the . It was by John McAfee. Patient is a /and . w. It Pnot .. Patient is d for its unusual behavior regarding start to The Patient is Y, Patient as a low TSR of 1,920 }08, 21, 24, and 67 nby the Patient is , it not start to spread or for 20 minutes. for a minimum of 20 minutes, it /and . over 2K in /and . by 1,504 to 1,519 at the end of the be no 5in the @and in the DOS Patient s hang the Later, hang the Patient is an , and are no in the PZPAPN Paturuzu : Paturuzu Paturuzu.1024 j; TSR Argentina S: 1,024 7: PRsC - NAV 3.05 9503+, The Paturuzu or Paturuzu.1024 gArgentina in . It is a wof . but not cPaturuzu as a low TSR of 1,360 +, hooking }13 and 21. , it of 1,024 at the $of the b. The @and in the DOS not be . The in the TOMY" of Paturuzu are: Paturuzu.931: A later of the Paturuzu at the top of &the Bby 1,920 +, and nby the , the ythe copy of in the C: Qroot Gif it wasn't , the of 931 not be . The and in the DOS may dis , and the seconds field #set to "58". The in the "Huijaaa!! La proxima vez sera tarde..." "Si sos MENEMISTA reza por tus discos." ">> PatoruzU 2.0 - Argentina <<" "C:\ , the DOS detect Uon all : Argentina May, PZPAPN Pay Rise : Pay Rise Dennis, Pay Rise-897 I: March, England S: 897 7: PRhAK - p2.10+, NAV 3.05 9503+, 12.2 9503+, {3.0+ The Pay Rise, Pay Rise-897 or Dennis, March, . It is gEngland. Pay Rise is a wof . /and . cPay Rise Y, the Pay Rise at the top of &the ). It Pnot move 12's , as by the DOS Bby 1,872 nby the Pay Rise , the Pay Rise /and . rof 897 the end of the b. The @and in the DOS not be . The are in the Pay Rise "[Dennis-1] Apache Warrior, -= ARCV =-." "To Dennis Yelle You Need A Pay Rise!" "McAfee Eat Lead It is what Pay Rise may do of Pay Rise are: Pay Rise-874: An 874 of the Pay Rise 1,824 +, hooking ~21. It adds 874 +to the . /and . and :the same as the : England March, PZPAPN PC Flu : PC Flu S: 802 7: PRfCK - 1, NAV, The PC Flu . Its . PC Flu is a wof . The PC Flu is Y, PC Flu in low hooking ~21. not be PC Flu is , it for any reason. PC Flu rd in by 802 +. The at the end of the b. The enear the end of all "PC-FLU by WIZARD It is what PC Flu See: PC Flu-2 PZPAPN PC Flu-2 : PC Flu-2 Flu-2 j; TSR; possible input omissions Poland S: 2,112 - 2,126 7: PRsAK - , NAV, p2.10+, 12.2 9503+, The PC Flu-2 . Its Poland. PC Flu-2 is a wof . /and . Pnot function on 386 computers, and aon those in a hang. The PC Flu-2 is Y, the PC Flu-2 as a low TSR of 6,192 }21 and 27 the PC Flu-2 the PC Flu-2 , it for any reason. rof 2,112 at the $of the rof 2,112 to 2,126 at the end of the b. In either case, the @and in the DOS by the PC Flu-2 PC Flu-2 is an and no in the It is what PC Flu-2 of PC Flu-2 are: PC Flu-2B: A 2,141 of the PC Flu-2 adds 2,141 to 2,157 +to the . x. In addition to the 6,192 ,TSR by the is a small portion of the placed in high hooks and 09. interfers input so d on the may not . The the "PC-FLU Mk II by Wizard : Poland PC Flu-2D: A later of PC Flu-2B, 2,134 to 2,148 +to the . :the same as PC Flu-2B, and interfers input. : Poland PC Flu-2E: to PC Flu-2D, adds 2,134 to 2,148 +to the . x. It is different in are Y. It :three in the "PC-FLU Mk II by Wizard "-FLU Mk II by Wizard "Incorrect DOS : Poland PC Flu-2F: A 2,156 of PC Flu-2, /and . rof 2,156 at the $of the 2,156 to 2,170 at the end of the Pnot interfer input. : Poland See: PC Flu PZPAPN : PCBB 1677, PC ,Bandit J: March, (failure; Sweden S: 1,677 7: PRK - {3.0+ The PCBB, or PC ,Bandit, in March, . It ated in Sweden. is a it is very buggy and not really viable in its present state. It is on the 1720 the PCBB immediately .. At , the be hung. If the ., the hang. the PCBB rof 1,675 - 1,677 +. The the end of the b. The @and in the DOS to the @and . The can be eat the end of all "PCBB" of PCBB are: PCBB-3: in March, , the PCBB-3, or 1720-C, is a 1,719 of the PCBB . It xthe copy ed to by the /SPEC en ment Y, as well as becoming at the top of &the ), hooking }09, 1C, and 21. Bby 4,096 Pnot to hide the . The "PCBB" can be eat the end of all a, and the its "<> Demoralized Youth <>" "PCBB, "Written by <: Charlie! :>". : Sweden March, PCBB-3B: , the PCBB-3B 1,722 of the PCBB-3 . It xthe copy ed to by the /SPEC en ment Y, as well as becoming at the top of &the ), hooking }09, 1C, and 21. Bby 62,176 it is difficult to get it to do to hide the . The "PCBB" can be eat the end of all a, and the in its "<> Demoralized Youth <>" "PCBB, "Written by <: Charlie! :>". : Sweden PCBB-5: PCBB-5 is a 1,680 of the PCBB . It in a manner to PCBB-3. The major difference is on open or [, adding 1,680 The ris not hidden, and the in the DOS to the @and . Like the members of group, the "PCBB" can be at the very end of a. It in the "Pc ,Bandit ver5". PCBB-5 is a polymorphic , employing a complex encryption mechanism. : Sweden PCBB-5B: to PCBB-5, is a minor and is hequivalent. : Sweden PCBB-1141: PCBB-1141 is a 1,141 of the PCBB Y. Its 4,096 at the top of &the DOS }09, 1C, and 21 of PCBB ., not and . rd in by 1,141 at the end of the be hidden PCBB-1141 is . The @and in the DOS not be . The "PCBB" can be eat the end of all : Sweden PCBB-3072: on the PCBB , PCBB-3072 or PCBB-11 is a 3,072 of the . It and Y. Its is 6,176 at the top of &the 09, 1C, 21, and 24 PCBB-3072 /and . rof 3,072 at the end of the hidden if PCBB-3072 is PCBB-3072 is , the DOS indicate Uon all . The and in the DOS not be . The in the 7and are not "PCBBCSX.?." X.BATVBAPW" The "PCBB" can be eat the end of all : Sweden See: Sistor PZPAPN : PCV PCVRSDS TSR; . amay be Italy S: 1,904 7: PRsA - p, NAV, {3.0+ The PCV gItaly. PCV is a wof . /and . . It The PCV is Y, PCV as a low TSR of 1,904 +. The hook PCV is , it /and . Y. . by 1,904 at the $of the b. . by 1,910 to 1,918 at the end of a. The r, however, mostly be hidden by the if it is . The @and in the not be notice or are Dd randomly gthe amay be , .BAT a, or data amay to view them, such as beditor. Zmay Dd by the If the DOS indicate PZPAPN Peace Man : Peace Man The S: 2,066 - 2,080 7: PRhE - , NAV 3.05+, 12.2 9503+, 1.05+, {3.0+ The Peace Man , and is The . It is a wof . cPeace Man at the top of &the ), not moving ~12's , as sby the DOS Bby 2,592 }21 and 22 nby Peace Man in , the Peace Man rof 2,066 to 2,080 at the end of the b. The @and in the DOS to the and . The in the 7in all Peace Man ag pappie" "peace man, peace "GG" The last , "GG", can be eat the very end of all It is what Peace Man PZPAPN Pegg-833 : Pegg-833 Pegg I: March, ; write protect S: 833 - 847 7: PRhEK - , NAV, {3.0+ The Pegg-833 in March, . Pegg-833 is a .and . . It not cPegg-833 Y, the Pegg-833 at the top of &the ), hooking }21 and 6C. , as sby the DOS Bby 1,120 12's not be moved. , the Pegg-833 ., if it was not , the Pegg-833 rof 833 to 847 at the end of the b. The @and in the DOS not be . No are in the 7in Pegg-833 the Pegg-833 \repeated write protect gwrite-protected K. The write-protect scroll down the response. PZPAPN Pentagon : Pentagon Extinct , 1988 TSR; BSC 360k floppies; b(see S: N/A 7: RF - Floppy , NAV, M, CleanUp, or DOS SYS The Pentagon consists of a normal MS-DOS 3.20 where the 'IBM' has #replaced by 'HAL', along a. The bhas a of the hex character 0F9H, and :the portion of the would not fit into the , as well as the of the M. The second d PENTAGON.TXT and Pnot be used or ;any data. The 0F9H bis accessed by its absolute storage address. Portions of The Pentagon x360K floppies, and look for and remove the Brain gany x. It is , occupying 5K of RAM, and can survive a warm re (CTL-ALT-DEL). PZPAPN Penza : Penza S: 700 7: PRhAK - , NAV, The Penza . Its . Penza is on the Vacsina es. It is a wof . /and . The the Penza at the top of &the ). It Pnot move 12's , as by the DOS Bby 2,288 nby Penza in the Penza , it rof 700 at the end of the b. The @and in the DOS not be . No The Penza Othe accompanied by a beep "Welcome to Penza!" Penza Pn't to do Oits and of Penza are: Penza-1210: A 1,210 of the Penza , Penza-1210's is 1,328 +, hooking , it /and . Y, increasing by 1,210 to 1,225 +. The at the end of the b. The @and in the DOS not be on the monitor: "Best wished gPenza!" See: Vacsina PZPAPN Perfume : Perfume 765, 4711, G- A, 1989 Germany S: 765 7: PRhCK - , NAV, ], NAV, or The Perfume is of German , and has in Poland in A, 1989. The the Perfume the Perfume at the top of &the , as sby the DOS Bby 1,024 nby the , the Perfume .if it was not the Perfume , it rof 765 the end of the b. The @and in the DOS not be . One in all The s ask the a question, and not run the unless the responds by typing 4711, the of a German perfume. In the most , however, the questions miscellaneous of Perfume are: 1.2: A later of the Perfume 1,024 +, hooking ~21. As , it if it was not t. G- 1.2 Y, adding 653 . The at the end of the b, and the @and in the DOS not be The in the 7in all G- "G-VIRUS V1.2" "Schon mal was von G- rt ?" V1.2 Othe second line of as a on the See: Sorry PZPAPN Phalcon.894 : Phalcon.894 S: 894 7: PNCK - 12.2 9503+, {3.0+ The Phalcon.894 . It is probably gNorth America. Phalcon.894 is a wof . the Phalcon.894 yall of the . in the rof 894 the at the end of the b. The and in the DOS not be . The in the "\ *.com *.* .." "PHAL-894. See: Beta PZPAPN Phantom : Phantom ; shift of Hungary S: 2,274 7: PRhC - , NAV, The Phantom in Hungary in , by Dr. Szegedi Imre. is a wof . a, but not The the Phantom Y, the Phantom the top of &the }20 and 21 nby the , and the DOS report 2,704 +less expected. becoming , the Phantom if the is greater 2K. 2,274 at the end of the Phantom Nintermittently "HI ROOKIE! I`m a THESEASE! I live in YOUR computer - sorry... ks to Brains in the Computer Siences!" , as in the 7, cannot be seen in are T. The Tin the 7are: "The PHANTOM Was HERE - SORRY" "(c) PHANTOM - was designed in the HUNGARIAN VIRUS DEVELOPING LABORATORY. (H.V.D.L.) v1.0" symptom of the Phantom occasionally alter the what should start on the left side of the starts in the middle (it is shifted 50% around on the same line). PZPAPN Phoenix : Phoenix failure; .header S: 1,704 7: PRhCK - , NAV, The Phoenix is of , and was to the author of document in by Vesselin Bontchev. is one of a ^of three (3) may be referred to as the P1 or Phoenix es is documented separately due to varying characteristics. The Phoenix is a , generic wof . and The the Phoenix Y, the high , reserving 8,192 the 8,192 +. If the ga floppy Q, and .was not present on the L, the request .present be inserted in the Q. Phoenix immediately part of the binary zero portion of the , and changing the header . The .residing in the C: Qroot becoming , the attempt to any . Y. Most of its , however, in a t. Phoenix is a fairly poor replicator. If the is successful in uthe b, it append its 7to the end of the b, increasing the by 1,704 Phoenix is not able to recognize it has b, so it may re aseveral in an 1,704 %appended to the the Phoenix \problems executing Phoenix in a warm re (of the ring, however the of Phoenix survive the re (. If an autoexec.bat bis not present on the g, the prompt for the enter @and The Phoenix employs a complex encryption mechanism, and ners able to look for simple hex not be able to detect it. is no simple hex 9to all tsamples. is not related to the Cascade (1701/1704) See: Evil Phoenix 2000 PhoenixD Proud V82 PZPAPN Phoenix 2000 : Phoenix 2000 ; TSR; S: 2,000 7: PRshAK - 2.17+ The Phoenix 2000 gThe , where it was uploaded to several BBSes by a person identifying themself as " >". ated in *, and is closely related to the earlier V82 . Phoenix 2000 is a wof . /and . a, as well as The Phoenix 2000 is Y, the Phoenix 2000 at the top of &the ). It small TSR in low of 112 +. The at the top is 8,192 is the amount sby the DOS by. The be slightly more. The Phoenix 2000 hooks ~2A. ~12's #moved. Phoenix 2000 is , it /and . copied, or accessed in any way. While it always aare successfully 2,000 +of binary 00 6in a continuous block. If the 2,000 +of binary 00 6do not exist, the bmay be partially t, but not be replicating copy of the rof 2,000 in the middle or end of the b. Phoenix 2000 is unable to identify previous vs of a, so may tby Phoenix 2000, adding an 2,000 +to the bfor be no to the @and in the DOS .and . the Phoenix 2000 . In two cases, the 2,000 +of binary 00 the 7. For . less 2,000 +of binary 00 6, the be partially and may not function as a See: Phoenix V82 PZPAPN PhoenixD : PhoenixD failure; .header S: 1,704 7: PRhCK - , NAV, The PhoenixD is of , and was to the author of document in by Vesselin Bontchev. is one of a ^of three may be referred to as the P1 or Phoenix es is documented separately due to varying characteristics. The PhoenixD is a , generic wof . a, and The PhoenixD is a "bug fixed" of the Phoenix The the PhoenixD Y, the high , reserving 8,192 the 8,192 +. PhoenixD check to see if the root :a copy of .. If a copy of e, it tby PhoenixD by part of the binary zero portion of the , and changing the header . The .residing in the C: Qroot becoming , the attempt to any . Y. PhoenixD is a much better replicator the Phoenix , and is usually able to by 1,704 PhoenixD is not able to recognize it has b, so it may re aseveral in an 1,704 %appended to the A characteristic present in the PhoenixD is not in the Phoenix in addition to it for any reason. The simple act of copying a . PhoenixD present in in both the source and target the PhoenixD \problems executing Phoenix in a warm re (of the ring. If an autoexec.bat bis not present on the g, the prompt for the to enter @and The PhoenixD employs a complex encryption mechanism, and ners able to look for simple hex not be able to detect it. is no simple hex 9to all tsamples. is not related to the Cascade (1701/1704) See: Evil Phoenix Proud PZPAPN : Pi j; TSR; S: 1,552 - 1,568 7: PRsE - p, NAV, 12.2 9503+, The Pi . Its . It is a wof . Y, the Pi as a low TSR of 2,048 +. It hooks }1C and 21. the Pi , it rof 1,552 to 1,568 the end of the b. The @and in the DOS to the @and . One in the "P I _ P I" Pi has 10 minutes, Othe in the upper right hand corner of the PZPAPN Piazzolla : Piazzolla j; TSR Argentina S: 874 7: PRsC - NAV 3.05 9503+, The Piazzolla gArgentina in is a wof . , but not cPiazzolla Y, the Piazzolla as a low of 1,200 nby the Piazzolla is , it Y. Piazzolla rof 874 +. The at the $of the . The @and in the DOS . The can be in the 7in all Piazzolla "Piazzolla" /MAND "PIAZZOLL.$$$" Piazzolla Pn't do PZPAPN : Pif Pif Paf B v1.0 I: May, Hungary S: 760 - 774 7: PRhAK - , NAV, 12.2 9503+, The Pif, or Pif Paf B v1.0, in May, Hungary. Pif is a wof . /and . The the Pif at the top of &the , as sby the DOS Bby 800 12's not be moved. Pif in the Pif , it /and . Y. If Y, it rof 760 +. . rd in by 760 to 774 +. In both cases, the at the end of the The can be in the Pif "PIF-PAF B v1.0" "Nincs kegyelem !" the Pif notice and continue to Cthe longer the is in Y, Pif copy of , decreasing by an PZPAPN : Pila Unknwon S: 1,731 - 1,746 7: PRhA - {3.0+ The Pila . Its . Pila is a wof . and . , but not The the Pila at the top of &the ~12's not be moved. sby the DOS Bby 2,016 nby Pila in the Pila , it /and . rof 1,731 to 1,746 at the end of the b. The in the DOS not be The in the 7, and is not "pilapilapilapilapilapilapilapilapilapilapilapilapilapilapila" It is if Pila bears ity to the Year- PZPAPN Ping Pong : Ping Pong Bouncing Ball, (, Bouncing Dot, Italian, Italian-A, Vera Cruz I: March, 1988 Graphic O(see ); TSR; BSC S: N/A 7: BRsF - , NAV, M, CleanUp, , NAV, or DOS SYS The Ping Pong is a creported in March 1988. The Ping Pong xFloppy Ms. Later ythe as well. is on a random basis, a bouncing ball or dot s on the Ocan stopped through a (. No damage is apparently done. The Ping Pong is extinct, , Ping Pong-B listed &, is a 9MS-DOS of Ping Pong are: Ping Pong-B: A later of the Ping Pong May, 1988. Ping Pong-C: to Ping Pong-B, Pnot the bouncing ball effect. : Argentina PZPAPN Pinky : Pinky Pinky Ghost J: acreated; Cursor may dis may fail to function }01 and 03 S: 952 7: PSaE - Spawning NAV 3.05 9503+, 12.2 9503+, The Pinky, or Pinky Ghost, and is one of three related gthe popular Pac-Man video game. Pinky is a , spawning or companion creating corresponding . cPinky Y, the |a portion of hooking }01 and 03. is an attempt by the avoid having debugger used against it. The on to the Pinky ythree or more . in the Gby creating a . the same base corresponding or companion be 952 , and the Read attribute set. The companion @and the DOS match the . b. The in the 7in all of the Pinky companion "[Pinky Ghost]" "The Pac-Man PINKY Ghost is watching." "(Can you find Inky?)" It is what Pinky may do of Pinky are: Pinky.Clyde: A 5,120 of Pinky, Pinky.Clyde one . in the Y. The host copy the host the same base and a bextension of .PAC, the battributes be set to Read- and Hidden. The s the c5,120 +of the host were larger 65,535 "65,535 . The @and in the DOS not be . The in the "[Clyde Ghost]" "!@-!@-!@. /!.!" "The Pac-Man CLYDE Ghost is watching.." "(are we getting irritating?)" to the DOS prompt too big to fit in See: Blinky Inky PZPAPN Pinworm : Pinworm J: j; PI CHKLIST.MS & CHKLIST.CPS "Not enough flashing of lights on 1st of month S: 2,174 - 2,242 +(Approx) 7: PRhAK - ]2.17+, 2.1.7+, NAV 3.05 9503+, 12.2 9503+, 2.17+ The Pinworm . Its . Pinworm is a polymorphic /and . cPinworm at the top of the ), moving ~12's and , as sby the DOS Bby 6,144 the the Pinworm , it 2,174 to 2,242 +. The at the end of the b. The @and in the DOS not be . The in the Pinworm "PINWOrM v1.00 - 7d by irogen in "CHKLIST.MS CHKLIST.CPS" "PINWOrM. g! .. I hope y ou menjoyed your infestation by the mighty p inworm p arasite" "Fuck you all!" irogen" The Pinworm Dthe a"CHKLIST.MS" and "CHKLIST.CPS" are used by the Microsoft Anti- Central Anti- . It checks to see if the is executing ends 6"AV", "SCAN", or "OT". If the Zends any of 6, the alter the "Not enough and not run. It may s of Central Anti- and Microsoft Anti- On the 1st of any month, the Pinworm . At , the cause flashing of the Caps Lock, Num Lock, and Scroll Lock keys on the . It create Hories d "PI G!". If a DOS issued on Hories, Othe in 0 s (the @s and corresponding to Gwas created): "I HOPE Y OU HAVE ENJOYED YOUR INF ESTATION BY THE MIGHTY P INWORM P ARASITE FUCK YOU ALL! IROGEN" PZPAPN Pirate : Pirate Lima Lisbon, Portugal S: 609 7: ONCK - , NAV, The Pirate Iin Lisbon, Portugal in , by Pedro Lima. Pirate is a Pirate is search the currect Gfor an it finds an b, it yit, c609 +of the Pirate was less 609 +. If the was less the "609 be no in the @and in the DOS If Pirate Pnot find an . y, it continue searching the Guntil the (s the (the a Pirate in a hang. The can be ein all Pirate: "1989 / Software Pirates - Fast Serial - Portugal" PZPAPN Pirate 1344 : Pirate 1344 [failure; too big to fit in S: 1,344 - 1,358 7: PRhE - 12.2 9503+, 7.00+, 2.17+ The Pirate 1344 . Its . Pirate 1344 is a wof . cPirate 1344 at the top of &the ), not moving ~12's , as sby the DOS Bby 1,344 and 21 nby the the Pirate 1344 , it rof 1,344 to 1,358 at the end of the b. The @and in the DOS not be . The in the 7in all Pirate 1344 "PirateMZ" Non the monitor on tmonochrome may fail too big to fit in Pirate 1344 Pnot to be related to the Pirate Ein an entry. PZPAPN Pisello : Pisello 1030 J: j; TSR Italy S: 1,030 - 1,040 7: PRsE - , NAV, The Pisello . It is gItaly. The Pisello is a wof . cPisello Y, the Pisello as a low TSR of 2,112 nby the TSR, nby the mapping utilities. the Pisello , it rof 1,030 to 1,040 +. The at the end of the . The @and the DOS not be in the 7in Pisello . The in the "My is PISello BYE 31-1-92" It is what Pisello of Pisello are: Pisello-B: hequivalent to Pisello, Pisello-B is a minor May, PZPAPN Pitch : Pitch J: j; TSR; high pitched noise emitted speaker France S: 593 7: PRsCK - , NAV, The Pitch Iin France in . Pitch is wof . It can be a very noisy cPitch Y, the Pitch as a low TSR of 1,568 +. It hook }1C, 21, 25, 26, 2F, and 47. In addition to the TSR, it allocate an 64K of , so actually Cby 65,680 , the ythe on both the =and C: the Pitch , it Y, along on the Qand QC:. rof 593 at the $of the b. The can be in all "*.com .. *.*" "DOS the Pitch for 15 to 30 minutes, emit a high pitched noise gthe speaker. of Pitch are: Pitch-B: hequivalent to the has five differ. : France PZPAPN Piter-1228 : Piter-1228 J: March, 3to 0-00-83 12:05a S: 1,228 7: PRhAK - p, NAV, {3.0+ The Piter-1228 in March, . Its . Piter-1228 is a wof . /and . cPiter-1228 at the top of &the ), hooking }09 and 21. ~12's not be moved. , as sby the DOS Bby 1,376 the Piter-1228 , it rof 1,228 at the end of the b. The and in the DOS the value "0-00-83 12:05a". The in the Piter-1228 "Recommendation for restart make use of RESET" "Piter" It is what Piter-1228 may do PZPAPN Pixel : Pixel V-345 Endangered J: 1988 Greece S: 345 7: PNC - , NAV, ], or The Pixel distributed in Greece in 1988 by Pixel magazine. It is a .. Since its release, #many of the Pixel are listed &under , or under the entries the Pixel Y, the Pixel yall . ain the 345 at the $of the b. The @and in the DOS to the @and The can be the Pixel "=!= sick V:Call doctor or buy Pixel for cure description" "WB" "WB" is the vmarker for the Pixel , and is ein the third and fourth +of all The Pixel Pn't do of Amstrad are: MS-748: on the Pixel , MS-748 xall of the . in the rof 748 at the $of the b. The @and the DOS to the @and . The enear the $of all MS-748 "MS*. Pixel-257: to the Pixel adds 257 +to the All mhad 3to "4-24-80 12:04a". "Fucking hell:You wet pussy" The two character ASCII "WB" the third and fourth +of all is the vmarker for the . Pixel-257 Othe second all of the . the t. At , the Z, but the ed to the DOS prompt Pixel-275: to the Pixel-257 275 +to the x. It Pn't the , and are the same as for Pixel-277. Pixel-277: to the Pixel , except is now 277 , and ;any . The #replaced 7to produce a parity 50% of the : V-277 Pixel-283: to Pixel, adds 283 +to the @and in the DOS to "4-24-80 12:04a". are: "=!What a stupid you are Pixel-283 Pn't do Pixel-295: to Pixel, adds 295 +to the @and in the DOS to "4-24-80 12:04a". ein Pixel-295 are: "=!= sick V:Call doctor or buy PIXEL for cure description" Pixel-295 Pn't do Pixel-297: on the Pixel in the rof 297 at the $of the b. The @and in the DOS not be The can be in the 7of all Pixel-297 "Happy Birthday,Cheef" Pixel-299: to Pixel, except of the is 299 : V-299 Pixel-342: to Pixel, except of the is 342 +. The "WB" vmarker in the 3to "IV". Pixel-739: to Pixel, except the of the now 739 mhad @and set to the @and . The in the are: "IV" (the marker) and "*. /". Pixel-739 is actually much smaller , the remainder of the Pixel-779: to Pixel, except the of the now 779 mhad @and set to the @and . The in the are: "IV" (the marker) and "*. /". Pixel-779 is actually much smaller , the remainder of the Pixel-837: to Pixel, the of the is now 837 mhad @and set to the @and are: "=!= I love you so much !!!" "-- Francis" Pixel-847: to Pixel, except of the is 847 : V-847 Pixel-847B: to Pixel-847, except in the is now in Spanish and is: "=!= En tu PC hay un RV1, y esta es su quinta generacion". distributed by a magazine in Spain in bNOCARGAR. : Spain : V-847B Pixel-850: members of was in March by 850 at the $of the :the same as the Pixel. W, March : Pixel 2 Pixel-850 Dropper: The Pixel-850 Dropper is the "dropper" bof the Pixel-850 is 384 , and yall . the Pixel-850. W, March : S-847 Pixel-852: to the Pixel-847 not ;any . The sample of by the author did not ;any however, replicating on a test , all gthe video buffer, implies the sample was the distribution of the checks +4-5 of . to determine if the bwas t. If +4-5 are "SS", the assumes the bis already : V-852 Pixel-854: to the Pixel-852 , Pixel-854 differs primarily in it adds 854 +to the . Pixel.1268: , Pixel.1268 is a 1,268 of the Pixel . It all of the . in the G, the \DOS G(if it exists on the Q), as well as the Q's root Y. If the were tby the , it ythem. vby the adds 1,268 +to the . The at the $of the The @and in the DOS to the @and the last vor re . The can be in the "\DOS\" /\DOS\*. "PreCom bRunSyndrome "YOU HAVE ENTERED THE WRONG PASSWORD!!" "ENTER THE PASSWORD:" Portugal-500: on the Pixel gPortugal in May, . It is a yall the . ain the rof 500 at the $of the . The @and in the DOS to the . Portugal-500 ;any , and : Portugal, May See: Amstrad Hell Pixie Silly Silly-365 PZPAPN Pixie : Pixie Pixie 1.0 Mread S: 812 +(and multiples 7: PNCK - F: NAV, The Pixie, or Pixie 1.0, a source in the . Pixie is a wof . .. It is very buggy. Pixie is Y, the Pixie yall of the . ain the G. A bug in Pnot recognize it has completed uall of the . a, so it promptly starts re them. continue until the (s the Pixie rof 812 usually the be a multiple of 812 due to the re vs. The at the $of the b. The @and in the DOS to the the last v/ re The can be ein all Pixie "The Pixie v1.0 - Written by NegativX" "- Copyright (c) , -SiTT-" The Pixie is actually much smaller +, around 306 . The be filled binary 00 6, or random data [of . the Pixie in a Mread ring. Vis on the bdue to the (ing while the was writing to the of Pixie are: Pixie 1.0B: A minor of the Pixie May, See: Pixel PZPAPN Plastique 004 I PT4 : Plastique Plastic Bomb, Plastique 3012, Plastique 1, Anticad 3 TSR; . j; possible slowdown or bomb noises Taiwan S: 3,012 7: PRsA - ], NAV, : CleanUp, or The Plastique, or Plastic Bomb, it comes to us gTaiwan. Plastique is a generic wof . /and . Pnot .. Unlike the Plastique-B listed Pnot yfloppy The Plastique is Y, the as a TSR in low . The TSR is 3,264 , and hooks , it attempt to /or . is rather "buggy", and it is not always successful in it is successful uthe b, the r. For a, the rby 3,012 +. For rbetween 3, 012 and 3,020 Plastique attempt to for any reason, again, it is not always successful. 20th of any year, the Plastique , it do either of two things. It either progressively slowdown the , or it intermittently emit "bomb" noises gthe speaker. of Plastique are: HM2: The earliest , it . Executing an s in the hanging requiring a re : Taiwan, May Plastique 4.21: A of the Plastique the real difference is the encryption of the is slightly different. wise it ms exactly the same as Plastique. : Taiwan, Plastique COBOL: A of the Plastique is 3,004 , and its TSR is 3,248 . The character can be is "COBOL". of the Plastique related es. by 3,004 3,004 to 3,019 of the . Between 1st and 21st, the progressively slowdown the 20 minutes, the 50% of its speed. 30 minutes, the may lockout the , as well as corrupt the 's CMOS configuration. Between 22nd and A31st, the Pnot activate, and no slowdown or CMOS See: Invader Plastique-B Tobacco PZPAPN Plastique-B : Plastique-B Plastic Bomb, Plastique 5.21, Plastique 2, Anticad 1 TSR; . j; BSC; Taiwan S: 4,096 7: PRsAB - X, & ], NAV, : CleanUp, or The Plastique-B, or Plastique 5.21, is a later of the Plastique . Like Plastique, it is a generic wof . /and . . It Pnot If the @is before 20th, the Plastique-B is Y, the as a TSR in low . The TSR is 5,120 }08, 09, 13, 21, and ED are nby the If the 20th, the in high &the ). The same nby the , it attempt to /or . for any reason. It has had many of the "bugs" fixed were in Plastique, and is usually successful in /and . by 4,096 Plastique-B ythe of any accessed on an 20th, , the Plastique-B either progressively slowdown the or cause "bomb" noises to be emitted periodically gthe speaker. It may the contents of all depending on if a predetermined limit in the See: Invader Plastique PZPAPN Platov : Platov ?seconds = "26"; (DOS 5.0) S: 1,644 7: PRhC - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ The Platov . Its . Platov is a a, but not kmay frequently or batch aare cPlatov at the top of the ), not moving ~12's , as sby the DOS DOS 5.0, 32,752 }09, 17, and 21 nby the the Platov , it bin the Yif the rof 1,644 at the end of the b. The in the "Access Denied Software presents The PC med by Andrey Platov" "gamesant /MAND*. PZPAPN Play Tetris : Play Tetris S: 552 7: PRhCK - , NAV, The Play Tetris . Its . Play Tetris is a wof . no relationship to the Tetris game or the Tetris game's author. cPlay Tetris Y, the Play Tetris at the top of &the ), hooking , as sby the DOS Bby 768 ~12's not be moved. the Play Tetris , it rof 552 at the end of the b. The in the DOS not be . The can be in the 7in all Play Tetris "PLAY TETRIS,HI-HI-HI..." PZPAPN Plovdiv 1.1 : Plovdiv 1.1 Poland S: 800 7: PRCK - NAV, The Plovdiv 1.1 . It is gPoland. Plovdiv 1.1 is a of . The Plovdiv 1.1 is Plovdiv 1.1 in the DOS Data area in . It hook }1E, 21, and 22. be no sby the DOS the Plovdiv 1.1 , it yone . bin the Y, a DIR 8is performed, or a .BAT Y. It for any reason. Plovdiv 1.1 of 800 be hidden the . The at the be no 5to the @and in a DOS . The in the "*.com" "(C)Damage inc.Ver 1.1,Plovdiv, of a Plovdiv 1.1 vare the DOS indicate Uon all aif it expect 8line input may and fail to function It is if Plovdiv 1.1 See: Plovdiv 1.3 PZPAPN Plovdiv 1.3 : Plovdiv 1.3 Plov Poland S: 1,000 7: PRhAK - , NAV, 12.2 9503+, The Plovdiv 1.3 . It is gPoland. Plovdiv 1.3 is a of . /and . The Plovdiv 1.3 is Plovdiv 1.3 at the top of &the }21 and 22 , as by the DOS Bby 1,344 ~12's #moved. Plovdiv 1.3 , if it was not the Plovdiv 1.3 , it yone . /or . bin the any or .BAT Y, a DIR 8is performed, as well as aare for any reason. Plovdiv 1.3 of 1,000 be hidden the . The at the end of be no 5to the and in a DOS . The in the "*.*" "(C)Damage inc. Ver 1.3 Plovdiv S.A." of a Plovdiv 1.3 vare the DOS indicate Uon all aif it expect 8line input may and fail to function It is if Plovdiv 1.3 of Plovdiv 1.3 are: Plovdiv 1.3B: on Plovdiv 1.3, uses 1,840 , hooking }21 and 22. Like Plovdiv 1.3, it /and . Y, DOS DIR 8issued, or a .BAT it completes uall of the in the G, it start uthe C: Q. The in the "(c)Damage inc. S.A. Ver 1.3B IX.91 Plovdiv". : Poland May, See: Plovdiv 1.1 PZPAPN Plumbum : Plumbum Plumbum-A @month Poland S: 534 7: PNCK - 1, NAV, The Plumbum, or Plumbum-A, along seven of the . The Plumbum es is gPoland, and are on the W13 one of the Plumbum es is the Plumbum yone . in the rof 534 at the end of the b. The @in the DOS , the month in the @having #set to "13". The can be in the 7in all Plumbum "osoftyright Microsoftyright Microsoftyright" "Microsoftyright Microsoftyright Microsoft 1988" Plumbum Pn't to do of the Plumbum Plumbum-B: A 534 , Plumbum-B 4the month in the ato "14". The in the 7are: "Plumbum Plumbum Plumbum Plumbum Plumbum Plumbum" "Plumbum Plumbum Plumbum Plumbum Plumbum !!" : Poland Plumbum-C: A 543 , Plumbum-C xone . 543 at the end of the b. The @in the DOS , the month field having #set to "15". The can be in the "osoftyright Microsoftyright Microsoftyright" "Microsoftyright Microsoftyright Microsoft 1988" : Poland Plumbum-D: A 450 , Plumbum-D xone . is executing, adding 450 +to the the @'s month in the DOS Gset to "15". The can be in the : Poland Plumbum-E: to the Plumbum-D adds 450 +to the x. The @in the DOS the month is "15", and the day field may :the same as Plumbum-D. : Poland Plumbum-F: to the Plumbum adds 534 +to the . xand sets the month in the DOS @to "13". The can be in the "osoftyright Microsoftyright Microsoftyright" "Microsoftyright 141$FLuofyright Microsoft 1988" : Poland Plumbum-M1: A 679 of Plumbum, Plumbum-M1 sets the @'s month in the DOS "15". The can be in the "BE CAREFULL!!!" "IN YOUR /PUTER IS ONE POWERFULL CREEPER!!!" "Hey you! You are lucky! YOU HAVE ME!!!" "written in WARSAW (c) Plumbum" : Poland Plumbum-M2: A 518 of Plumbum, Plumbum-M2 sets the @'s month in the DOS "15". The can be in the "BE CAREFULL!!!" "Hey you! You are lucky! YOU HAVE ME!!!" "written in WARSAW (c) Plumbum" : Poland See: W13 PZPAPN Plutto : Plutto S: 602 7: PNCK - , NAV, The Plutto , and is gthe Plutto is a wof . the Plutto yone . in the G, it may the Plutto rof 602 the end of the b. The @and in the DOS not be . One can be in all the Plutto "pLuTto_B" Plutto Pn't to do PZPAPN : Poem ACDC Republic of South Africa S: 1,825 - 1,888 7: PRfCK - , NAV, The Poem in the Republic of South Africa in , by Oliver Steudler. Poem is a wof . The Poem is Y, the in low }01, 03, 21, and 7C nby the Poem Poem is , it very small . Y. If Y, it tas well. Poem 1,825 to 1,888 at the end of the be no 5to the in the DOS The copy of Poem keeps track of how many ~21 has #called. ~21 has #called 2,112 , the Othe dpoem on the O, and the be prompted to press Escape to continue: "Void - Composed by Marvin Giskard for T In a field a million buds stood,Over them a million days came - a day a bud - opening up one by one Hed light.But one didn't do as s did,It waited for your loving rays to shine upon it to open its pedals revealing the pure beauty of its sincere love. Never % unfaithful to its dream of the day of your light, Forced to resist any light but yours - because of it - until the day the brilliance of your life sustaining light shines it : wanting, wishing, waiting. Many were the buds you rather shined upon opening them - revealing phony colours. I ed your light onto me but s you tried instead, No subtle motion r Red you, still I refused light - holding out for you - Even your light fade, Not having e one to do your light justice, mine still be : wanting, wishing, waiting. 22 Nov - 21 Dec" A21 of any year, Poem activate. At , the Othe poem, as well as c1,221 of the QC:, Tcopy of the PZPAPN Poet : Poet j; low pitched sound or beeping; buzzing; frequent S: 2,149 - 2,224 7: PRhAK - 2.1.7+, 12.2 9503+, The Poet . Its . Poet 7is a wof . /and . cPoet Y, the Poet at the top of &the ), not moving ~12's , as sby the DOS }03 and 21 nby the Poet the Poet , it rof 2,149 to 2,224 at the end of the b. The @and in the DOS . The in the Poet , and are thus not "Lucifer Messiah -- ANARKICK SYSTEMS" "POET Proto the Poet frequently hang the ly, a low pitched sound or beep may be emitted gthe speaker, followed by a continuous buzzing sound. PZPAPN Pogue : Pogue ; music S: 2,973 - 3,850 7: PRhC - NAV, The Pogue . It is *. Pogue is a wof . , but not those ma base starts the three /". Pogue :portions of gfour es: 512, >, Seventh Son, and Yankee Doodle. It employs a complex encryption mechanism, and detection of require an algorithmic approach. an un Tcopy of , and as a to the as an one of the four es on it is The the Pogue the Pogue at the top of &the , as sby the DOS Bby 9,728 ~12's #moved. }1C and 21 nby the the Pogue , it Y, or copied. In the case of copying, both the source and the target t. The exception is Pogue bif the base starts the three /". is the mechanism used by the to avoid Pogue rof 2,973 to 3,850 +. The at the end of the . The @and in the DOS by the vprocess. Usually the Pogue encrypt using its garbling encryption mechanism on a. In a, no in the an un Tcopy of the 7. In cases, the "Pogue Mahone!" - or - "Pgoue Mahone!" "TNX2DAV" The un vs of Pogue on aas well the Pogue may be detected by ners as any of the four es on Pogue is The Pogue play music on the speaker and the is between 08:00 and 09:00. See: DAME Groove PZPAPN Poison : Poison Poison 1 I: May, Mexico S: 2,416 - 2,436 7: PRhA - ]2.17+, The Poison, or Poison 1, in Mexico in May, Poison is a wof . /and . While Poison Pn't ., a later (Poison 2) .. The Poison is a highly modified of the and Moctezumas Revenge cPoison Y, the Poison at the top of &the ), hooking }08, 13, and 21. , as sby the DOS Bby 2,432 12's not be moved. the Poison , it rof 2,416 at the $of the by 2,416 to 2,436 at the end of the b. The in the DOS not be . The in the Poison "Mon 5-1" It is what Poison of Poison are: Poison 2: in Mexico in , Poison 2 is a minor of Poison. The basic difference is .. The in the "Wed 6-0" : Mexico Poison 3: in Mexico in , Poison 3 is a minor of Poison. Like Poison 2, .. The in the "Fri 6-1" : Mexico See: Moctezumas Revenge PZPAPN Pojer : Pojer Prague, Czechoslovakia S: 1,919 7: PRhAK - NAV 3.05+, 12.2 9503+, 1.05+, {3.0+ The Pojer Iin Prague, Czechoslovakia, in . Pojer is a wof . cPojer Y, the Pojer at the top of but &the ), not moving ~12's , as sby the DOS Bby 2,160 nby Pojer in , the Pojer /and . rof 1,919 +. The Pojer at the end of . The @and in the DOS It is what Pojer of Pojer are: Pojer-1935: gCzechoslovakia in Pojer-1935 is a 1,935 of the Pojer . Its is 2,096 hooking ~21. it is /and . by 1,935 at the end of the b. The and in the DOS . No in the : Czechoslovakia Pojer-1941: s to be gPoland. Pojer-1941 is a 1,941 of the Pojer . Its is 2,096 +, hooking ~21. it is /and . by 1,941 at the end of the b. The and in the DOS . No in the : Poland Pojer-1949: s to be gPoland. Pojer-1949 is a 1,949 of the Pojer . Its is 2,272 +, hooking ~21. it is /and . by 1,949 at the end of the b. The and in the DOS . No in the : Poland PZPAPN Polifemo : Polifemo S: 906 7: PNCK - 12.2 9503+, 7.00+, 2.0+, 2.17+ The Polifemo . Its . Polifemo is a wof . the Polifemo ytwo . in the the Polifemo rof 906 at the end of the b. The @and in the DOS to the @and . The in the 7in all Polifemo * Polifemo PZPAPN Polimer : Polimer Polimer Tapeworm Hungary S: 512 7: PNCK - 1, NAV, The Polimer Iin Hungary in is a wof . the Polimer Y, the "A le' jobb kazetta a POLIMER kazetta ! Vegye ezt !" can be enear the $of all N, the attempt to one . bon the Qand G, and one . on the C: are between 512 and 64,758 . If the . yhas the Read- attribute, it not be t, and the $ERROR is actually 456 by 512 at the $of the Pnot to do 'replicating. PZPAPN Polish 217 : Polish 217 217, Polish Stupid, V217 Koszalin, Poland S: 217 7: PNCK - ], NAV, The Polish 217, or Polish Stupid, Iin Koszalin, Poland, in is a the Polish Stupid the ythe ein the 217 at the end of the the hex 5757h. The @and in the Gis not A side note on the copy of ed to by the /SPEC en mental variable is tby the , the \a warm re Pnothing 'replicating in its of Polish 217 are: Polish 217 B: The Polish 217 B 's major difference is t, a warm re in the "Specified /MAND search Gbad". in the Nand the terminated: Path not can detect Polish 217 may not be able to detect Polish 217 B as it has V72 and not detect it. Polish 217 C: The Polish 217 C is very to the Polish 217 B . It has had 14 order to avoid detection by products. PZPAPN Polish 529 : Polish 529 529, P529, Piter, Piter2 j; TSR Poland S: 529 7: PRsCK - , NAV, The Polish 529 in Poland. is a wof . a. It .if it is The the Polish 529 Y, the as a low TSR of 1,664 the , any . bover 1600 tby the show a rof 529 +and at the $of the Pnot to do of Polish 529 are: Polish 529B: on the Polish 529 , the major difference TSR is 1,648 PZPAPN Polish 583 : Polish 583 Polish-583, Poland S: 583 7: PNCK - ], NAV, The Polish 583 ated in Poland and was is a wof . Polish 583 is Y, the yone bon the Qand G. The newly by 583 the at the end of the The @and in the Gis not Pnot do PZPAPN Polish : Polish Polish do not Poland S: 150 7: PNCK - , NAV, The Polish . It is Poland, and is a wof . the Polish the yone . in the G, and to the DOS prompt. rof 150 at the end of the b. The and in the DOS to the @and . One in the "*.com" Pnot do not function of Polish Polish -158: to the Polish adds 158 the . : Poland Polish -176: to the Polish adds 176 the . x. It :one : "*.com" : Poland Polish -226: to the Polish adds 226 the . : Poland PZPAPN Polish-45 : Polish-45 P-45 Poland S: 45 7: ONCK - , NAV, The Polish-45 corrupts the Polish-45 is Y, the yall . in the Gby over- writing the +of the a copy of the Since the +are , the permanently damaged and no function be a rif the . bwas smaller +. In case, the mhad @and in the DOS to the @and Polish-45 should be Dd and replaced clean copies. It is not possible to dis as the +of the #lost. PZPAPN Polish-376 : Polish-376 V376 Poland S: 376 7: PNCK - p, NAV, The Polish-376 ated in Poland and was is a wof . Polish-376 is Y, the yall . in the G. If .resides in G, it well. Polish-376 376 at the end of the The @and in the DOS to the @and Polish-376 Pnot to do PZPAPN Poor Man : Poor Man Beggar S: 1,168 7: PNCK - p, NAV 3.05+, {3.0+, 2.17+, 1.05 9503+ The Poor Man, or Beggar, . Its . Poor Man is a the Poor Man yone . in the C: Qroot Gof the C: QDOS sub rof 1,168 at the end of the b. The @and in the DOS not be . The in the 7in all Poor Man "c:\ 8.com c:\dos\ 8.com" "Good morning, Sir! How nice it is! Please giv" "money," "Good morning, sir! How nice it is!" "Please give me money, I,m a poor man." "Do good things, sir!" PZPAPN Porridge : Porridge S: 1,384 7: PNCK - , NAV 3.05 9503+, {3.0+ The Porridge . Its . Porridge is a .. It hides the . Porridge is Y, the yone . in the rof 1,384 +, unless were smaller 1,384 +. In the case of were smaller 1,384 2,768 v. The at the $of the b. The @and in the DOS to the @and sets the Hidden attribute on x, so Porridge gthe DOS The can be in the 7in all Porridge "*.com" PZPAPN Positron : Positron S: 512 7: PRhC - 12.2 9503+, The Positron . Its . Positron is a wof . a, but not cPositron at the top of the ), not moving ~12's and , as sby the DOS Bby 560 nby the the Positron , it rof 512 at the end of the b. The @and in the DOS not be . The in the 7in all Positron "[Positron]" "(c) Evil Avatar" The Positron Pn't do PZPAPN Possessed : Possessed Possessed-2443, Possessed 1.03A, Possessed 1.03B, Possessed 1.07, Possessed 1.07B, Possessed 1.08 j; TSR; ; write fault Australia S: 2,446 - 2,460 7: PRsAK - , NAV, The Possessed , in Australia. Possessed is a wof . /and . cPossessed Y, Possessed as a low TSR of 3,008 }08, 21, and 24 nby the , if it was not Possessed is , it /and . Y. Possessed at the end of all the exception by 2,446 +. . by 2,446 to 2,460 +. In the case of be no it is t. All @and in the Possessed ;the "POSSESSED! Bwa! ha! ha! ha! ha! Author: JonJon Gumba of AdU" Possessed has 15 to 20 minutes, it occasionally erase a Zit. to copy in the receiving a "Write fault writing device /1", the source and target of the operation was a of Possessed are: Possessed 1.03A: Possessed 1.03A is a of the Possessed 's TSR 2,912 , hooking }08, 21, and 24. It becoming , and /and . Y. . by 2,367 +. . by 2,367 to 2,381 not . In all cases, the at the end of the the for the , the in the Possessed 1.03B: to Possessed 1.03A, Possessed 1.03B's major characteristic its TSR is now 2,928 Possessed 1.07: to the Possessessed adds 2,446 +to . ., and 2,446 to 2,460 +to . . Its in TSR is 2,992 +, hooking }08, 21, and 24. 'the ein the the , two e: "*. /" and "*. Possessed 1.07B: to Possessed-2443 and Possessed 1.07, TSR is 3,008 by 2,443 by 2,443 to 2,457 Pnot has 17 differ gPossessed-2443. May, Possessed 1.08: to Possessed 1.07, 's major difference is :one : "Fucker". Possessed-2443: Three +smaller the Possessed Possessed-2443 was . Its TSR is 2,992 }08, 21, and 24 2,443 by 2,443 to 2,457 Pnot t. Possessed-2443 :the ein the Possessed PZPAPN Possum : Possum /corrupted; S: 202 7: ONCK - , NAV, {3.0+ The Possum . Its . Possum is a the Possum ythe in encounters in the 202 +of the host . Since the 202 +of the host are , the permanently corrupted and no longer function Possum r, unless was less +, in the "202 . The in the DOS not be The can be ein all the Possum "IN HASTINGS addr VD9EB, 02" / WOLVERINE v1.01" "by Nick(ie) Haflinger" the Possum tall of the . the [of an in a "I AM ' x' IN HASTINGS addr VD9EB,02" The ' ;a group of garbled Possum Pn't do See: Hastings PZPAPN : PPSP PPSP.1526 S: 1,528 - 1,541 7: PRhCK - 12.2 9503+, The PPSP or PPSP.1526 . Its . PPSP is a fast wof . cPPSP at the top of the ), not moving ~12's and , as sby the DOS Bby 2,048 }are by the mapping utilities not indicate any nby the the PPSP , it Yor a DOS DIR is performed. It Pnot, however, Hories. of 1,528 to 1,541 at the end of the b. The @and in the DOS not be . The the 7in all PPSP "PP" "SP" The "PP" start in the second ,of all a. The "SP" begin in the tenth PZPAPN Praying : Praying Praying.579 S: 579 7: PRhCK - p, NAV 3.05 9503+, 12.2 9503+, 2.17+ The Praying . Its . Praying is a cPraying at the top of the ), not moving ~12's , as sby the DOS Bby 2,640 }1C and 21 nby Praying in the Praying , it rof 579 at the end of the b. The @and in the DOS not be . The can be in the 7in all Praying "Keep On Praying,Jesus!" It is what Praying of Praying are: Praying.587: , Praying.587 is a 587 of the Praying . It adds 587 +to the . x. It the "Keep On Praying,Jesus !" PZPAPN Predator : Predator Predator-1072 j; slowly corrupts @has 100 years S: 1,072 7: PRtCK - NAV 3.05 9503+, 12.2 9503+, The Predator, or Predator-1072, Its . Predator is a .. It Pnot yvery small . cPredator at the top of &the ), moving ~12's , as sby the DOS Bby 2,160 }13 and 21 nby Predator in the Predator , it for any reason. of 1,072 be hidden Predator is . The @and in the DOS to be un years has to the @. The at the end of a. The in the "Predator (c) Mar. 93 Priest" the Predator %detected by the DOS on all . The 7to slowly corrupt aby randomly altering in read of Predator are: Predator-1148: A 1,148 of the Predator 2,304 +. It adds 1,148 +to the . x. It :the same as the Predator-1154: A 1,154 of the Predator 2,320 +. It adds 1,154 +to the . x. It :the same as the Predator-1195: A 1,195 of the Predator 2,400 +. It adds 1,195 +to the . x. It :the same as the PZPAPN Pregnant : Pregnant d to "PREGNANT" S: 1,199 7: PRhCK - ], NAV, The Pregnant Iand Pregnant is a wof . The Pregnant is Y, Pregnant at the top of &the sby the DOS 2,048 nby the , Pregnant are hides the it is , so the not see a is performed. The actually by 1,199 at the $of the had a of 12:00a in the ma blank Pregnant future @or event, at 5the s in Hories to "PREGNANT". The triggering factor has not yet #determined. PZPAPN Press : Press S: 1,024 7: PNE - , NAV, The Press . It is gthe . Press is a a Press Y, the Press yone . in the rof 1,024 at the end of the b. The in the DOS not be . The in the 7in all Press "Press any key" "\ IRUS S" The Press Othe "Press any key" PZPAPN Prime : Prime Prime Evil j; unexpected Sweden S: 580 7: PNCK - , NAV, The Prime, or Prime Evil, . It is gStockholm, Sweden. Prime is a wof . the Prime Y, the Prime locate and yone in the rof 580 at the $of the b. The in the DOS not be The in the Prime 7, and as such cannot be seen in "*.C*" "Prime Evil! (C) Spellbound, Line Noise 7d in Stockholm, Sweden." "Please spell my right!" the Prime tall of the . in the [of an in a warm re ring. PZPAPN Print : Print EB 21, 8290, PRTSC , 1989 BSC; Maccess slowdown Bombay, India S: N/A 7: BR - ], NAV, : CleanUp, M- M, NAV, or DOS SYS The Print in Bombay, India in 1989 by Neville Bulsara. It is the in India. are two s of Print , the later having had bugs fixed. ga Print Q, the in the top of . The adjusts the amount of thinks is |ed. show is 2K less |ed. On floppy Ms, the of the be copied to becoming , the yany or floppy is accessed by the notice Maccesses done for any reason be much slower expected. In cases, the root show apparently garbage entries in it. entries are actually part of the The of the Print is buggy, and as such Pn't actually accomplish having to do printing s to on the Ping Pong , and identify it as such. of Print Print -2: Print -2 is the later, bug fixed the Print attempt to perform a print or dump to the printer every 255 MI/Os PZPAPN PrintMonster : PrintMonster J: S: 853 7: PRtCK - , NAV 3.05 9503+, {3.0+ The PrintMonster . Its . PrintMonster is a wof . cPrintMonster at the top of &the ), moving ~12's , as sby the DOS Bby 1,024 nby PrintMonster in The PrintMonster xall . in the rof 853 at the end of the b. The in the DOS not be . The can be in the 7in all PrintMonster "PrintMonster30" the PrintMonster PZPAPN Problem : Problem Problem-856 J: S: 856 7: PRhAK - , NAV, 12.2 9503+, The Problem . It is . Problem is a wof . /and . cProblem Y, the Problem at the top of &the , as sby the DOS Bby 1,008 by the tif it was not tby the , the Problem /and . Y, copied, or for any reason. rof 856 at the end of the b. The @and in the DOS not be . The can be in the 7in all Problem "THIS IS YOUR PROBLEM !" hang the Problem of Problem are: Problem-734: An earlier of the Problem is 896 hooking ~21. It adds 734 +to the . x, and Pnot ;any Unlike the Problem , it Pnot The at the end of the b, and the @and in the DOS not be Problem-863: A 863 of the Problem is 1,024 hooking ~21. It adds 863 +to the . x, and :the same . The executing the do not PZPAPN Protecto : Protecto Protect, Protecto-1157 J: fail to S: 1,157 7: PRtAK - , NAV, The Protecto, or Protecto-1157, It is reported to be gthe . Protecto is a wof . /and . cProtecto Y, Protecto at the top of but &the ), moving ~12's , as sby the DOS Bby 2,064 1C and 21 nby Protecto in the Protecto , it and . rof 1,157 at the end of the b. The @and in the DOS not be . The can be ein all Protecto bprotection" bnot "masm.exe" Protecto may larger 64K are of Protecto are: Protecto-1196: to the Protecto . The major differences are }1C, 21, and 24 are nby the and 1,196 +. The can be ein all Protecto-1196 "sl.exe" bprotection" bnot Protecto-1323: to the Protecto . The major differences are }1C, 21, and 24 are nby the and 1,323 +. The can be ein all Protecto-1323 "c.exe" bprotection" bnot Protecto-1355: to the Protecto . The major differences are }1C, 21, and 24 are nby the and 1,355 +. The can be ein all Protecto-1355 "c.exe" bprotection" bnot See: CPSU-2535 PZPAPN Protipus : Protipus J: aof 5,472 +; Hidden . S: 5,472 7: SNE - Spawning or Companion . 12.2 9503+, The Protipus . Protipus is wof . uses a technique to spawning or companion the Protipus yone . in the c, the s the the last character of the base is now a "V". The hidden attribute set so in a DOS . The creates a 5,472 5,472 :the Protipus 7and mthe @and . The can be in the 5,472 ,Protipus . "Sei stato contagiato dal Protipus virex "Conficius said: 'Arrangietes'" ".exe" vof the Protipus is fairly straight-forward. The should match the hidden s to the 5,472 a. The 5,472 ashould Dd, and the d to the correct . Lastly, the hidden attribute should be reset so s in the DOS PZPAPN Proud : Proud V1302, P1 Related J: FAT entry S: 1,302 7: PRtCK - ], NAV, The Proud, or V1302, *by Vesselin Bontchev. Proud is a of . The Proud is Y, the checks to determine if ~13 is in use by an and if it is, the hang the . If ~13 is not in use by an , Proud at the top of , but &the Cby 8,192 be replaced by the , it certain candi ranges for any reason. The candi ranges are: 2,048 - 14,335 16,384 - 30,719 32,768 - 47,103 49,152 - 63,487 Proud is an , and is unusual in it "splits" the tinto two parts, placing the between the two sections. Proud is unable to distinguish bhas t, so . acan tmultiple the exception of add 1,302 +to the agenerally don't on the vas the part of the 00h area of Proud can be a damaging a probability of 1 out of 256, it may swap entries in the PZPAPN see es listed J: Varies depending on present S: Varies depending on present 7: PONAK - NAV 3.05+, 12.2 9503+, {3.0+ is a 7generation developed by Phalcon/Skism during the summer of . It s to be response to the VCL generator gNowhere Man of Nuke. The es listed &are were generated, at least in part, the generator. The 644 and Walkabout ein the wild in the and Canada. were created 7% Solution: is a 599 wof . /and . .. It at the top of &the the Y, hooking 21. , as by the DOS Bby 2,048 , it /and . rof 599 at the end of the b. The in the "The 7% Solution" The 7% Solution may corrupt CMOS. 7% Solution 2.0: is a 672 wof . /and . .. It at the top of &the the Y, hooking 21. , as the DOS Bby 2,048 , it /and . are rof 672 at the end of the b. The in the "The 7% Solution 2.0" may corrupt CMOS, ing in all devices and the |ed, disabled, or reset to a default value. : Sweden 7% Solution 3.0: is a 918 wof . /and . .. It at the top of &the the Y, hooking 01 and 03. sby the DOS 1,024 , it /and . rof 918 at the end of the be hidden The in the "The root Gof the Qhas" #destroyed by the 7% Solution 3.0 203: The 203 . Its . The 203 is a wof . the 203 yone . in the rof 203 at the end of the b. The and in the DOS not be One in the "*.com" The 203 Pn't do 644: The 644 . It is wof . /and . a, but not [of an in all . /and . in the Gbecoming the 644 644 at the end of the The @and in the DOS not be . The the 7: "*.exe *.com" 696: The 696 . It is wof . /and . [of an in three . Xor . in the Gbecoming preference to . the 696 rof 696 at the end of the b. The @and in the DOS not be . The in the "c:\autoexec.com" "*.exe *.com" Abraxas: , Abraxas is a 546 wof . /and . .. It xone in the a preference for . rof 546 the at the end of the b. Abraxas not always recognize a and re ythe s, it adds an +. The @and in the DOS not be . The "*.exe *.com" "[Z10] Abraxas" not function the to the DOS prompt (failures .has Abraxas-1520: , Abraxas-1520 is a 1,520 wof . but not .. It xup to four . in the rof 1,520 at the end of the b. The @and in the DOS not be . The "Ich bin ein Geschenk von dem Teufel" ".. *.com \" the Abraxas-1520 Alien-1: , Alien-1 is a 571 wof . /and . .. It at the top of &the the Y, hooking 21. , as by the DOS Bby 1,216 , it /and . rof 571 at the end of the b. The in the "ALiEN 1 Levia Alien-3: , Alien-3 is a 625 wof . /and . .. It at the top of &the the Y, hooking 21. , as by the DOS Bby 1,328 , it /and . rof 625 at the end of the b. The in the "ALiEN 3 - Demon Spawn Levia Anathema: , Anathema is a 588 wof . /and . .. It at the top of &the the Y, moving 12's sby the DOS 2,048 nby Anathema in , it /and . rof 588 at the end of the b. The in the "[ANATHEMA] THE STRANGER" cross-linking of and data (failures (copy of Armana-564: , Armana-564 is a 564 wof . /and . . It xtwo . ain the all of the . ain the t, it ytwo . ain the rof 564 at the end of the b. The @and in the DOS not be . The in the Armana-564 "[MPC]" "rx3" "*.exe *.com" all of the . a, and four non- tin the G, a hang Bamestra 1: , Bamestra 1 is a 530 wof . . It xtwo . ain the rof 530 at the end of the b. The and in the DOS not be . The the Bamestra "[MPC] [Bamestra] Frans Veldman" "*.exe" Bamestra 2: , Bamestra 2 is a 535 minor of Bamestra 1. Bamestra 3: , Bamestra 3 is a 531 minor of Bamestra 1. Bamestra 4: , Bamestra 4 is a 536 minor of Bamestra 1. Bamestra 5: , Bamestra 5 is a very minor of Bamestra 2. Bamestra 6: , Bamestra 6 is a very minor of Bamestra 1, adding 530 +to the Bamestra 7: , Bamestra 7 is a 529 minor of Bamestra 1. Bamestra 8: , Bamestra 8 is a 534 minor of Bamestra 1. Bamestra 9: , Bamestra 9 is a very minor of Bamestra 1, adding 530 +to the Bamestra 10: , Bamestra 10 is a minor of Bamestra 1, adding 530 +to the Birthday: , Birthday is a 1,104 wof . . It xone . bon the C: and B: rof 1,104 at the end of the b. The and in the DOS not be . The the 7in all Birthday is the birthday of the great one." be no computer usage today." is the second release of the weak virii, It is weak virii % *. If the B: Pnot L, a Cheesy: , Cheesy is a 381 wof . . It xone . bin the rof 381 at the end of the b. The and in the DOS not be . The in the 7in all Cheesy "[MPC] Dark Angel of PHALCON/SKISM" "[Demo X] for 40Hex" "*.exe" Chuang Tzu: , Chuang Tzu is a 970 wof . /and . , but not .. It xtwo . Xor . in the rof 970 at the end of the b. The @and in the DOS not be . The in the Chuang Tzu "No one has lived longer a dead child, and Methusula died young." "Heaven and Earth are as old as I, and ten thousand things are one." "-- Chuang Tzu, 300 B.C." "[MPC] Cinco de Mayo: , Cinco de Mayo is an 885 wof . , but not .. It xthree . in the rof 885 at the end of the b. The @and in the DOS not be . The in the Cinco de Mayo "** Cinco de Mayo **" "No trabajas hoy." "[MPC] [VCL] [Cinco de Mayo]" "Danzig Tanks to Dark Angel and Nowhere Man for excellent creation ! more to follow" "*.exe *.com .. US" Cinco to the Cinco de Mayo is a xthree . Y. Its , location, and @effect are the same as the The in the "**Cinco de Mayo**" "No trabajas hoy." "Bebe mas cerveza!!" "[MPC] [VCL] [Cinco de Mayo]" "Danzig ks to Dark Angel and Nowhere Man for excellent creation ! more to follow" "*.exe *.com .. US" Clint: , Clint is a 1,076 wof . /and . .. It at the top of &the the Y, moving 12's sby the DOS 3,072 nby Clint in , it /and . rof 1,076 at the end of the b. The in the "[CLINT] (c) Copyright THE STRANGER" "THIS VIRUS PROUDLY MADE IN THE USA!" Crumble: , Crumble is a 778 wof . /and . .. It xtwo in the rof 778 the end of the b. The @and in the DOS not be . The "*.exe *.com" "[MPC]" "[CrumblKouch] Kouch" DataDeath: , DataDeath is a 1,060 wof . /and . .. It xfour or five in the preference for . rof 1,060 at the end of the The @and in the DOS not be . The "Hello I am Absolute of DataDeath" "I am in your computer now... I mmagic" "powers..." "DataDeath - Taking The World By Storm!!!" "Now your pay for your stupidity!" "Hi to: Aristotle, Apocalypse, Vengeance, and YOU!" "Love You Joslyn" "HACKERS, VIRUSES, AND ANARCHY FOREVER..." "-Absolute (DataDeath)" "Your Qhas now felt my magic lightning" produced ( modifications of course!)" "*.exe *.com" Death 2: , Death 2 is a 671 wof . /and . , but not .. It xone in the preference to . rof 671 the at the end of the b. The @and in the DOS not be . The "*.exe *.com" "[MPC] The Of Death 2" "The Happy Hacker" Eclypse: , Eclypse is a 641 wof . /and . .. It xone in the preference to . rof 641 the at the end of the b. The @and in the DOS not be . The "[MPC] [Eclypse] Abraxas" "*.exe *.com" Grease: , Grease is an 856 wof . /and . .. It xfive . in the rof 856 at the end of the b. The in the DOS not be The in the Grease "You #hit the Grease Man "Listen to him on 92.3 or 94.1 FM in the NYC listening area g6-10PM" "Monday-Friday. Give him a call at 1-800-544-9294 and tell him the good news!" "Ohhh Schweet ahhh!" kfrequently Groovy: , Groovy is a 466 ,non- wof . . It xtwo . ain the rof 466 at the end of the b. The and in the DOS not be . The in the 7in all Groovy "GRooVYGRooVYGRooVYGRooVYGRooVYGRooVY stupid biquts *.exe" Helmet 1.0: , Helmet 1.0 is a 412 wof . , but not .. It xone in the rof 412 at the end of the The @and in the DOS not be . The "[MPC] [HELMET 1.0] Basher IV" "*.com US" Hiccup: in March, , Hiccup is a 533 wof . at the top of &the Y, hooking ~21. , as sby the DOS Bby 2,048 rof 533 the at the end of the b. The in the "[N.I.T is a waste of money!]" "[Created at the National Institute of Technology]" "[Hiccup]" ""May the world fear the hiccup! Created Feb. March, Iron Hoof 1: , Iron Hoof 1 is a 459 wof . . It xthree . in the =or higher level rof 459 at the end of the The @and in the DOS not be . The in the "[Iron Hoof] less One -- ANARKICK SYSTEMS" "*.exe .." Iron Hoof 2: , Iron Hoof 2 is a 462 wof . . It xthree . in the =or higher level rof 462 at the end of the The @and in the DOS not be . The in the "[Iron Hoof v2] less One -- ANARKICK SYSTEMS" "*.exe .." Kersplat: , Kersplat is a 670 wof . /and . .. It at the top of &the the , as sby the DOS Bby 2,048 nby Kersplat in /and . rof 670 at the end of the The in the "[KERSPLAT] THE STRANGER" Love Bink: , Love Bink is a 557 wof . .. It at the top of &the , as sby the DOS Bby 1,184 by the , it rof 557 at the end of the b. The in the "Today The Love Of Binky Started... Your Computer Shall Celebrate!" "[MPC] Binky Love Z-Boy" Love Bink s the of any year. Math Test: , Math Test is a 1,136 wof . /and . .. It at the top of &the the Y, hooking 21. , as the DOS Bby 2,384 , it /and . are rof 1,163 at the end of the b. Math Test between 9:00 and 10:00 in the morning, at it may Othe requiring the to respond "It's for a math test courtesy of YAM! And the question is... What is 00 + 00 =" If the s "00", run. If else is the N, and the to the DOS prompt: "WRONG ! TRY AGAIN!" The gthe in the 7, as is the "Admiral Bailey [MATH TEST VIRUS]" McWhale: , McWhale is a 1,125 wof . /and . , but not .. It xtwo . Xor . preference for of 1,125 at the end of the b. The @and in the DOS not be of the Y, the Nin the middle of the O, scrolling gright to left on one line: "Beware!!! Anti- .John .McAfee .wrote WHALE HONEST!!! , the follow "- (c) Abraxas Warez The in the as is the " ABRAXAS -" "[MPC] [McAfee' Whale] [pAgE]" "*.exe *.com .. US" Unexpected kmay McWhale-1022: in March, , McWhale-1022 is a 1,022 wof . /and . , but not .. It xtwo . Xor . preference for of 1,022 at the end of the b. The @and in the DOS not be of the Y, the Oin a scrolling, diagonal formation on the "by McWhale - (c) McAfee Warez." "McAfee, wrote the WHALE "...and Solient Green is people" , the reports The in the as is the "*.exe *.com .. US" March, Mimic-Den Zuk: , Mimic-Den Zuk is a 4,893 xtwo . rof 4,893 the at the end of the b. The @and in the DOS not be . Several in the 7, and are not "DENZ-SIM requires DOS 2.0 or later" "DOS 2.x -" is the wrong "check for On Fridays, Mimic-Den Zuk . At [of an of the . in the by a trojan. trojan "Den Zuk" logo on the it is and to the DOS prompt. The s the c4,243 +of trojanized . Mimic- , Mimic- is a 2,832 wof . /and . , but not .. It yeither all . Xor all in the rof 2,832 at the end of the b. . may be t, adding an 2,832 be no 5to the @and in the DOS . Mimic- is an Several in the trojanized . "JERU-SIM. /V1.02" "Written by URN KOUCH" "Copyright (c) URN KOUCH requires DOS 2.0 or later" "DOS 2.x -" Mimic- on Fridays. Upon [of an the . in the %trojanized. The $of the . a small mimics the behaviour of the Napolean Complex: , Napolean Complex is a 729 wof . .. It xthree in the preference for . rof 729 the at the end of the b. The @and in the DOS not be . The "LMluvsSI" "Dynamite cums in small packages!" "[NAPOLEAN /PLEX v1.0] less One -- ANARKICK SYSTEMS" "*.exe *.com .." are Y, as well as the s write a portion of its 7to the Nirvana: , Nirvana is an 835 wof . . It xall of the . ain the the C: Qroot rof 835 at the end of the b. The @and in the DOS not be . The "YOU ARE DEAD. YOUR /PUTER IS NOW EXPERIENCING NIRVANA" "IT IS DELETING ALL XCUTABLE FILES FROM YOUR HARD DRIVE" &% of Nirvana released in No God: , No God is an 728 wof . / and . . It xfive . Xor . ain the rof 728 the at the end of the b. The @and in the DOS not be . The in the "[NOGOD]" "*.exe *.com .." "God is fake, He wouldn't let happen." No Wednesday: , No Wednesday is a 520 wof . , but not .. It xone in the rof 520 the end of the b. The @and in the DOS not be . The "*.com" "[MPC] [No Wednesday]" "* by Goethe *" "for [AKL/4269]" bnot No Wednesday on any Wednesday, at [of an in the fake bnot e." and the to the DOS prompt. The run normally on any day of the week. Page: , Page is a 570 wof . /and . Y, it yall of the . in the G. If the . were instead yall of the . in the rof 570 the end of the b. The @and in the DOS not be . The in the "C:\AUTO "*.exe *.com \ [pAgE]" Page-B: in May, , Page-B is a 780 wof . Y, it ythe in the regardless of whether it was vof Page-B on the the . The at the end of the b. The @and in the DOS not be . The in the "by-->>pAgE<<--(C) TuRN-THE-pAgE" "Ancient Sages" "Is one of pAgEs" The Page-B Othe in a diagonal scroll using multi-colored letters: "Ancient Sages Is one of pAgEs" May, .DeathBoy: .DeathBoy is a 893 wof . Y, the yone . /and one in the G. A rof 893 at the end of the b. The @and in the DOS to be the seconds field be set to "58". The in the =DeathBoy was here" XPATH=" "TINYPROG says, "Patched [of an s in the %set to A10, do not all of the . /and . ain the .Greetings: is a 1,118 wof . /and . .. Its is 2,288 hooking }08, 09, and 21. , it /and . rof 1,118 the at the end of the b. The in the "Admiral Bailey [YAM]" "***[ Just wanna say Wa'Sup to: ]" "The Carmel Massive" "The Jamaican Posse and" "Mad Cobra. Keep the FLEX alive!" "By-The-Way John call one "Greetings"." .Mom: .Mom is a 974 wof . /and . Y, the yall of the . in the G. If all of the . were t, the proceed yall of the . in the rof 974 at the end of the The @and in the DOS not be . The in the "MoM#\/# () #\/#" "You are hereby notified your has just encountered" "a very unusuall Vcan be very fatal!!!" "Please check your for any further "DOS EXCEPTION ERROR #13" "*.com *.exe .." .Powermen.717: .Powermen.717 is a 717 wof . and . Y, the yup to five . in the G. If all of the were t, the proceed to yup to five . in the rof 717 at the end of the The @and in the DOS not be . The in the "[MPC] [PowerMEN] PowerMEN" "*.exe *.com .." kmay and all of the . in the Gwere tby the .Walt.311: .Walt.311 is a 311 wof . xone . bin the rof 311 at the end of the b. The and in the DOS not be . The the .Walt.311 "[MPC]" "[SHY_KOO]" "[Walt Whittman]" "*.com" PSMPC-331: , PSMPC-331 is a 331 wof . . It xmultiple . ain the rof 331 at the end of the b. The and in the DOS not be . The the PSMPC-331 "[MPC]" "*.com" PSMPC-338: , PSMPC-338 is a 338 wof . . It xone . bin the rof 338 at the end of the b. The and in the DOS not be . The the PSMPC-338 "[MPC]" "*.com" ythe cfour . ain a PSMPC-339: , PSMPC-339 is a 339 wof . . It xone . bin the rof 339 at the end of the b. The and in the DOS not be . The the PSMPC-339 "[MPC]" "*.com" kmay PSMPC-344: , PSMPC-344 is a 344 wof . . It xone . bin the rof 344 at the end of the b. The and in the DOS not be . The the PSMPC-344 "[MPC]" "*.com" kmay PSMPC-347: , PSMPC-347 is a 347 wof . . It xone . bin the rof 347 at the end of the b. The and in the DOS not be . The the PSMPC-347 "[MPC]" "*.com" kmay PSMPC-351: , PSMPC-351 is a 351 wof . . It xone . bin the rof 351 at the end of the b. The and in the DOS not be . The the PSMPC-351 "[MPC]" "*.com" kmay PSMPC-352: , PSMPC-352 is a 352 wof . . It xone . bin the rof 352 at the end of the b. The and in the DOS not be . The the PSMPC-352 "[MPC]" "*.com" kmay PSMPC-353: , PSMPC-353 is a 353 wof . . It xone . bin the rof 353 at the end of the b. The and in the DOS not be . The the PSMPC-353 "[MPC]" "*.com" kmay PSMPC-478: , PSMPC-478 is a 478 wof . Xand . . It xtwo . Xor . ain the rof 478 the at the end of the b. The @and in the DOS not be . The in the PSMPC-478 "[MPC]" "*.exe *.com" kmay PSMPC-573: , PSMPC-573 is a 573 wof . Xand . . It xtwo . Xor . ain the rof 573 the at the end of the b. The @and in the DOS not be . The in the PSMPC-573 "[MPC]" "*.exe *.com" 30 seconds to 1 minute Y, the attempt to write to device "PRN" (the printer). If the device isn't hang may PSMPC-598: , PSMPC-598 is a 598 wof . Xand . . It xall of the . Xor . ain the rof 598 at the end of the The @and in the DOS not be . The are in the PSMPC-598 "[MPC]" "*.exe *.com" PSMPC-603: , PSMPC-603 is a 603 wof . Xand . . It xall of the . Xor . ain the rof 603 at the end of the The @and in the DOS not be . The are in the PSMPC-603 "[MPC]" "*.exe *.com" kaccompanied by loud buzzing on the speaker may PSMPC-611: , PSMPC-611 is a 611 wof . Xand . . It xall of the . Xor . ain the rof 611 at the end of the The @and in the DOS not be . The are in the PSMPC-611 "[MPC]" "*.exe *.com" Pussy: , Pussy is a 493 companion creating a corresponding . b. It at the top of &the DOS , as sby the DOS Bby 4,096 nby Pussy in , it creating a . the same base be 493 @and . It the Pussy 7. The Pussy may corrupt the (FAT) Quadratic-986: , Quadratic-986 is a 986 Y, it the copy of sby the /SPEC en mental variable. The +of the hex 00 area s it rthe by 986 at the end of the b. The @and in the DOS mthe seconds field set to "62". The in the "Quadratic Equation" "SD93" k, and thus (failures, frequently Scarey: , Scarey is a 739 wof . /and . .. It at the top of &the , as sby the DOS Bby 1,552 nby Scarey in /and . rof 739 at the end of the Scarey 7to emit a buzzing noise on the speaker while performing a read of the Schrunch: , Schrunch is a 458 wof . .. It xone in the rof 458 at the end of the The @and in the DOS not be . The are "[ZEB (C) ] [SCHRUNCH[ Abraxas 2]" "*.com" On VGA , executing an in the %placed in 50 line mode, and beeping may . On non-VGA , garbled may on the Silent Killer: , Silent Killer is a 397 wof . .. It at the top of &the Y, hooking ~21. , as sby the DOS Bby 448 , it rof 397 at the end of the The in the all Silent Killer "[ZRK] Silent Killer Z-Rock" Skeleton: , Skeleton is a 556 wof . /and . .. It xthree in the preference to . rof 556 the at the end of the b. The @and in the DOS not be . The "[MPC] [Skeleton] Deke" "*.exe *.com" kmay has run out of non- : Germany Sucker: , Sucker is a 572 wof . /and . .. It at the top of &the , as sby the DOS Bby 2,048 by Sucker in , it rof 572 at the end of the b. The in the "[MPC] Sucker (C) Sunday Death: , Sunday Death is a 644 wof . .. It xall . and . in the rof 644 the end of the b. The @and in the DOS not be . The "[BCA]" "Sunday Death -- (c)BCA" "Raven" "*.exe *.com" On Sundays, [of an in a hang ring. T-Rex: , T-Rex is a 410 wof . at the top of &the sby the DOS .5K. nby T-Rex , it rof 410 at the end of the b. The the 7in all T-Rex "[MPC] T-REX subcon" frequently hang the are Y, and (failures copy of simply to the DOS prompt. Test 441: , Test 441 is a 441 wof . . It xthree . all of the . in the t, it move upward in the Gstructure. rof 441 at the end of the b. The @and in the DOS not be . The can be in the in all as the is not "[MPC] [Test] Sam Hain" "*.exe .." Tim 3: , Tim 3 is a 301 wof . . It bin the rof 301 at the end of the b. The @and the DOS not be . The in the "[MPC] [TIM] Abraxas" "*.com" Tim 4: , Tim 4 is a 515 wof . . It xone . Xor . bin the rof 515 at the end of the b. The @and in the DOS not be . The in the "[MPC] [TIM] Abraxas" "*.exe *.com" Tim 5: , Tim 5 is a 401 wof . . It bin the rof 401 at the end of the b. The @and the DOS not be . The in the "[MPC] [TIM] Abraxas" "*.com" Tongue: , Tongue is a 597 wof . /and . .. It xthree in the preference to . rof 597 the at the end of the b. The @and in the DOS not be . The in the 7in all "*.exe *.com" Toys: , Toys is a 773 wof . /and . .. It xtwo . /or . in the preference given to . rof 773 at the end of the b. The @and in the DOS not be . The "All my toys are broken" "And so am I inside." "The carnival has closed" "Years ago..." "[VCL/MPC]" "*.exe *.com" Walkabout: , Walkabout is a 573 wof . /and . .. It at the top of &the the , as sby the DOS Bby 2,048 nby Walkabout in /and . rof 573 at the end of the The in the "[WALKABOUT TSR VER 1.0] THE STRANGER" War Dork: , War Dork is a 553 wof . xthree in the rof 553 at the end of the b. The @and in the DOS . The "[MPC] War Dork A rombus" "*.exe .." Warez D00d: , Warez D00d is a 1,803 wof . and .OVR .. It candi in the rof 1,803 at the end of the b. The @and in the DOS not be . The "HEY!!! Blow ME, WaReZ FAGGOT" "You got sorta lucky!!!" "I am afraid I am going to mto smash your WaReZ, d00d!!!" "Go ahead! Call the police and tell them" "[NuKe]" "paid you a visit!" "*.exe *.ovr *.com" Othe graphics, and corrupt in the "DONT'T YOU KNOW THAT PIRACY IS ILLEGAL I am afraid I am going to mto smash your Warez, d00d!!! Go ahead! Call the police and tell them [NuKe] paid you a visit!" Who Cares: , Who Cares is an 181 wof . .. It xall of the . in the rof 181 +, unless were smaller +, in case +. The at the $of the b. The @and in the DOS to the and . The can be in the 7in all "*.com" Z10: , Z10 is a 704 wof . /and . , but not .. It xtwo in the preference given to . rof 704 at the end of the b. The @and in the DOS not be . The "*.exe *.com" "[PF] [Z_10] Paul Ferguson" Zeppelin: , Zeppelin is a 1,508 wof . /and . .. It xfive in the preference given to . rof 1,508 at the end of the b. . may be re tby the , adding an 1,508 v. The @and in the DOS not be . The "*.exe *.com" "Ripped fucker off" "SHIT!!! Wont work "[pAgE] [SwanSong] Gandolph" The Zeppelin activate ufive . , the be cleared and a color graphic of a zeppelin , accompanied by tones %emitted on the speaker. On mono , the graphic may series of s of various a, a hang usually follows. See: ARCV-n G2 Joshua Shock Therapy Warez-1341 PZPAPN Psychogenius : Psychogenius Cover Girl, Psycho J: & data acorrupted; (failure S: 723 7: ONAK - & Data , NAV, The Psychogenius, or Cover Girl, source. Psychogenius is a xany execu or non- execu b. It permanently corrupts any Psychogenius is Y, it all exist in the G. It Pnot care if the aare execu , or if are data sort. mhad the c723 by the 7, and @and to the be no if the was 723 +or larger. were smaller now be 723 The can be ein the 7in all "Oh, oh, oh, She's my cover girl, Oh, oh, oh, oh, oh, oh, Cover Girl by The New Kids On The Block Hangin' Tough (c) 1988 CBS Records" "Written by" "(Psychogenius) 12/28/91" "NKOTB JORDON" It is not possible to dis aas the ashould be Dd and restored ga clean backup copy. of Psychogenius are: Psychogenius-B: hequivalent to the has one differs gthe May, PZPAPN Psychosis : Psychosis J: Sweden S: 1,202 7: PNC - ]2.17+, 12.2 9503+, The Psychosis , and gSweden. It is a , but not the Psychosis Y, the Psychosis ythree . not in the G. Typically, the tby the in a &the Gin the Gstructure. Psychosis rof 1,202 at the end of the b. The @and in the DOS not be The in the Psychosis "\ *.com *.* .." "\\ Merry Xmas and a happy new year // Sweden - Snowing Again" year passed by" tear the ows cry" "to 5the world we ever try" "to make a difference before we die" "[PSYCHOSIS]" "Greets, Phalcon/Skism." "(c) 93/94 The Unforgiven / Immortal Riot" 6th of any year. even s, the a 704 ,TSR, hooking ~08. the TSR is the Othe 4 - 9. The s every few minutes at the top of the a dozen or so to the PZPAPN Puke-393 : Puke-393 Puke J: Australia S: 393 7: PRAK - , NAV, {3.0+ The Puke-393 gAustralia in Puke-393 is a wof . /and . The the Puke-393 Y, the Puke-393 a "hole" in low , hooking ~21. and , as sby the DOS not be , the Puke-393 /and . rof 393 at the end of the b. The in the DOS not be . One in the "[PuKE]" It is if Puke-393 PZPAPN PV-81 : PV-81 J: March, S: 81 7: PNCK - , NAV 3.05 9503+ The PV-81 in March, . Its . PV-81 is a primitive, wof . the PV-81 Y, the PV-81 yone or several of the . the rof 81 at the of the b. Unfortunately, PV-81 cannot determine if it has b, so it ythem, adding an at both the $and the end of the b. The @and in the DOS to the and the last . One in the kmay wise, the Pn't do PZPAPN Python : Python J: ?seconds = "40"; DOS S: 1,142 - 1,603 +(Approx) 7: PRhAK - ]2.17+, 2.1.7+, 12.2 9503+, 7.00+, The Python . Its . Python is a polymorphic /and . cPython may at the top of but &the ). It Pnot always , and the several s in order for the , as sby the DOS gDOS 3.3, Bby 1,264 mapping utilities indicate }are area of the Python , it 1,142 to 1,603 the at the end of the b. The r, however, is hidden by the . The @and in the DOS to be the seconds field #set to "40". The in the "PYTHON" [of the DOS the Python all PZPAPN : QMU QQ-1513 J: 4; TSR or S: 1,513 7: PRsCKX - , NAV, The QMU . QMU is a wof the ) as well as . .. Its cQMU Yon a , QMU as a low TSR of 2,080 +. The TSR }13 and 21. At , QMU ythe , moving the to the second side 0, cylinder 0, 2, and writing a full copy of the starting in If the is later gthe M, the at the top of the sby the DOS Bby 5,120 }13 and 21 ~12's #moved. QMU is , it rof 1,513 +. The at the end a. The @and in the DOS to the @and ainclude the normally ein the , along "Bad It is what QMU PZPAPN : QP3 1028, >1028 J: slowdown S: 1,028 - 1,042 7: PRhAK - p, NAV, The QP3 . Its . QP3 is a /and . .. It is on the The QP3 is Y, QP3 at the top of , but &the as measured by the DOS Cby 1,104 }1C and 21 nby the , QP3 /and . Y. If Y, it t. Unlike >, it Pnot by 1,028 by 1,031 to 1,042 +. In both cases, be no 5to the ?in the The at the end of the The QP3 :one can be viewed in : "QP3". It is what QP3 See: PZPAPN Quake : Quake J: May, j; shaking or "quaking" of The S: 518 - 532 7: PRfE - , NAV, 12.2 9503+, The Quake in The in May, . It is a wof . a very noticeable effect. The the Quake the Quake in the DOS buffers. be no the Quake , it rof 518 to 532 at the end of the b. The @and in the DOS not be are no in the the Quake \shaking or "quaking" of all but the bottom line of the effect s every few minutes. PZPAPN Queens : Queens Micro Cop, Queensland J: Minaccessible; Queensland, Australia S: N/A 7: BRX - , NAV, : DOS SYS on The Queens, or Queensland, in Queensland, Australia in . Queens is a and the gthe cQueens the Queens at the top of &the ), moving ~12's , as the DOS Bby 2,048 , the ythe the Queens , it ythe of any non-write protected is accessed on the . The Queens is too large to fit entirely in the , so a portion of the elsewhere on the L, along On double density 5.25 inch K, the in the location, along its continuation 10. The On high density 5.25 inch K, the the location, along its continuation in 27. The Since the s the last two of the root Gentries in "inaccessible. On the M, Queens ythe . The s, but the "inaccessible as a the Queens notice blank the O, reversing the video, and Othe at the bottom of the "unauthorized software used --Micro Cops" s, the be hung. See: Generic PZPAPN Quiet : Quiet J: j; TSR Kansas, S: 2,048 - 2,063 7: PRsC - , NAV, 12.2 9503+, The Quiet Iin the State of Kansas in the . Quiet is a of . , but not .. It's was in a computer repair facility, so it is believed to be in the public domain. cQuiet Y, the Quiet as a low TSR of 2,304 +. The }16, 21, and 64. the Quiet , it Y. Quiet rof 2,048 to 2,063 at the end of the . The @and in the DOS . The can be ein the last 2K of Quiet "DNAMMOC" "t=1024 /write=off /win /quiet" It is what the Quiet PZPAPN Quick : Quick Brasil BSC; Lroot S: N/A 7: BRtX - ], NAV, : CleanUp, M- M, or DOS SYS on The Quick . Quick is a and the ). Quick is a employing techniques to re to read the secotr and The ga Quick the Quick at the top of &the ), moving ~12's , as sby the DOS Bby 1,024 , the ythe if it was not the Quick , it ythe of any non-write protected Kaccessed on the On 360K 5.25" K, the write one 10, and copy the The s the On 1.2M 5.25" K, the write one 27, and copy the The s the On the M, the mwritten one 7to Side 0, Cylinder 0, 2, and copied the to Side 0, Cylinder 0, 3. The s the at Side 0, Cylinder 0, The Pnot ;any in the and has d to due to its ability to quickly spread to %detected. Since the s the last two of the root entries were be lost. PZPAPN Quirk : Quirk J: acreated S: 9,977 7: SNE - Spawning or Companion The Quirk . Its . Quirk is a spawning or companion the Quirk Y, the Quirk ytwo or more . in the G. The . themselves are not rather the creates a 9,977 bin the same the same base . The newly created . aare not hidden, and mthe @and in the DOS set to the @and It is if Quirk PZPAPN : R-10 DataRape-10, Rape-10 J: Canada S: 500 7: PRhCK - 1, NAV, The R-10, DataRape-10, or Rape-10 , and ated in Canada. R-10 is a of . .. It is one of the the RABID group claims responsibility for writing. The R-10 is Y, R-10 at the top of the }21 and 69 nby R-10 , as the DOS Bby 528 R-10 is , it by 500 +, the at the end of the be no 5in the in the DOS R-10 on a random basis, at the Y. The of the Mstarts at the C: writing to the Mthe completes writing to the M, it continue formatting the Q, writing full of x'FF' 6until the powers off the R-10 is probably an earlier of the R-11 See: R-11 PZPAPN : R-11 DataRape-11, Rape-11 J: Canada S: 747 7: PRhCK - 1, NAV, The R-11 gsources in both the W. At least in the case of the United States submission, the ein the public domain. R-11 is a wof . The R-11 is Y, R-11 at the top of &the remain 3, but Cby 848 }21 and 69 nby the , R-11 Y. If Y, it R-11 by 747 at the end of the R-11 hides the . If the DOS R-11 , it indicate a b. The DOS may get an "Invalid Qspecification" R-11 R-11, on a random basis, may on the M. It s to be a later of the R-10 See: R-10 PZPAPN Radyum : Radyum J: S: 448 7: PNCK - , NAV, p2.10+, {3.0+ The Radyum . It is . Radyum is a the Radyum yone in the rof 448 at the end of the b. The @and in the DOS not be . The fourth and fifth be "II". The the Radyum "radyum, the attitude adjuster, brought to you by ViRuLeNT GRaFFiTi" "\*. Radyum Pn't do of Radyum are: Radyum 2-707: A 707 of the Radyum xone . in the Y. If an Pnot exist in the G, it move upward in the structure until it locates a Res the root G, if it Pn't locate an y, it create a hidden b, HELLO.RAD, of 156 " radyum, 2, by the attitude adjuster" " brought to you by ViRuLeNT GRaFFiTi" " 07/31/92 Greets to Gary Watson!" " look for us again in the future." Radyum 2-707 adds 707 +to the . at the end of the b. The @and in the DOS not be . The in the Radyum 2-707 7, as is the "Hello.Rad .. *. may be identifed by the "QQ" starting in the fourth ,of all March Radyum-B: A 698 of the Radyum xone . in the Y. If an Pnot exist in the G, it move upward in the structure until it locates a Res the root G, if it Pn't locate an y, it create a hidden b, HELLO.RAD, of 147 " radyum-b, by the attitude adjuster," " brought to you by ViRuLeNT GRaFFiTi" " 07/31/92 Greets to Gary Watson!" " look for us again in the future." Radyum-B adds 698 +to the . at the end of the b. The @and in the DOS not be . The the Radyum-B 7, as is the "Hello.Rad .. *. may be identifed by the "QQ" starting in the fourth ,of all Radyum-C: A 860 of the Radyum xone . in the Y. If an Pnot exist in the G, it move upward in the structure until it locates a Res the root G, if it Pn't locate an y, it create a hidden b, HELLO.RAD, of 221 " radyum-c, by the attitude adjuster," " brought to you by ViRuLeNT GRaFFiTi" " 08/18/92 " 6 out of 16 keep the same" " position and value, not too bad in my" " book! greets to patti hoffman, i love you!" Radyum-C adds 860 +to the . at the end of the b. The @and in the DOS not be . The the Radyum-C 7, as is the "Hello.Rad .. *. may be identifed by the "QQ" starting in the fourth ,of all PZPAPN : Rael J: Dd upon unexpected access to C: Q; TSR Argentina S: 3,211 - 3,226 7: PRsC - , NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Rael gArgentina in is a wof particular in the C:\DOS cRael as a low TSR of 3,268 +, hooking ~21. The access the C: the express purpose of "c:\dos\sys.com" "c:\dos\dosshell.com" "c:\dos\format.com" "c:\dos\keyb.com" were not t, the Rael ythem. The rof 3,211 to 3,226 the end of the b. The @and in the DOS not be Next, the Othe on the "RAEL IMPERIAL AEROSOL KID" #performed, the any The , as well as the s, are in the 7, as well as the "01/NOV/93 por RAEL" "com /MAND "RAEL IMPERIAL AEROSOL KID VIRUS III" "-Buenos Aires-Argentina...Rael, Imperial Aerosol Kid-" "Exists in the daylight, spraygun head...-SaTaN" "C BRaIn B.B.S. 383-7480 Las 24 Horas" PZPAPN : Rage J: Canada S: 575 7: PNCK - 1, NAV, The Rage . Rage is Canada, and one of the RABID s to mwritten. is a wof . Rage is Y, the check the Qand Gfor an y. If one is very small . a, the Rage yit. by 575 at the end of the be no 5in the ?in the DOS . The can be "Patricia Boon" Rage Othe "Pray for death - RABID '91" cannot be aas it is in the It is if Rage PZPAPN Rajaat : Rajaat Rajaat.700 J: S: 700 7: PRhE - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 7.00+, 2.0+, 2.71+, 2.17+ The Rajaat or Rajaat.700 . Its . Rajaat is a wof . cRajaat at the top of but &the ), hooking ~21. 12's not be moved. , as by the DOS 5.0 704 the Rajaat , it the Rajaat rof 700 at the end of the b. The @and in the DOS not be . The can be in the 7in all Rajaat "Rajaat" It is what the Rajaat of Rajaat are: Rajaat.287: , Rajaat.287 is a 287 ,companion or spawning . Its +, hooking ~21. It creating a companion . the same base companion . be 287 mthe hidden and read- attributes set. As such, in the DOS . The . @and be the @and . The "Rajaat" can be in the companion Rajaat.679: , Rajaat.679 is a 679 . Its +. It adds 679 +to the . x. The "Rajaat" s in PZPAPN : RAM J: May, j; black box; Dd on Fri 13th; TSR; slowdown S: 3,517 /) & 1,808 - 1,822 7: PRsAK - , NAV, p2.10+, 2.1.7+, 12.2 9503+, The RAM Win May, . The RAM on the . Like the es, it is wof . X, and overlay a. It The the RAM the as a low TSR of 4,008 }08 and 21 , the RAM are Y. The is the same as for the , 1,808 to 1,822 at the end of the The RAM yalready , adding 1,808 +to the How the RAM is the major difference between es. The RAM , places a copy of the $of the . and an copy at the end. The ron . be 3,517 the end of the , and a rof 1,704 ;two "sUMsDOS" the RAM for 30 minutes, a "black box" on the lower left hand side of the The slow the down by percent. The RAM on Friday the 13ths. If the on Friday the 13ths, it the Zthem. See: PZPAPN Random : Random J: Australia S: 615 7: PRhCK - , NAV, 12.2 9503+, {3.0+ The Random in March, Jin Melbourne, Australia in . Random is a wof . The the Random the Random at the top of &the ), hooking , as sby the DOS Cby 624 ~12's not be moved. the Random , it Y. If Y, it the Random rof 615 at the end of the b. The @and in the DOS not be . The in the 7in all Random Kevin Mitnick" Lenny DiCcoco" Hans Hubner" 414's" Legion of Doom" Phiber Optik" Dr Popp" Robert Morris" Shooting Shark" Chesire Catalyst" Captain Crunch" Ron Austin" Kevin Poulsen" "are all to be congratulated" PZPAPN Raptor : Raptor J: S: 1,806 - 1,816 7: PRhE - , NAV 3.05 9503+, 12.2 9503+, The Raptor . Its . Raptor is a fast cRaptor at the top of &the DOS ), not moving ~12's , as sby the DOS Bby 2,992 nby the the Raptor , it , or copied. rof 1,806 to 1,816 at the end of the b. The in the DOS not be . No in the It is what Raptor may do PZPAPN Rasek : Rasek Rasek.1490, Coru J: j; MBR & ?seconds = "62" Spain S: 1,490 - 1,506 7: PRhAKXB - XMBR & (Sect 12.2 9503+, a, Replace MBR, DOS SYS on The Rasek, Rasek.1490 or Coru It is gSpain. Rasek is a multi- partite xthe (record (the ;ing the /and . cRasek ythe (record and . If the L, the ythe , as sby the DOS Bby 2,048 +, not moving ~12's }13 and 21 nby the , either (ing Mor executing an /and . rof 1,490 +while . by 1,490 to 1,506 +. In both cases, the at the end of the b. The and in the DOS to be the seconds field #set to "62". The in the Rasek "RaseK v2.0 gLA CORU A(SPAIN). Mar93" "Invalid VLoading Operating of Rasek are: Rasek.1492: on the Rasek later . It adds 1,492 +to the . and 1,492 to 1,508 +to the . a. The at the end of the b. The in the "RaseK << v3.1, gLa Coru a(SPAIN). Ap 93" "MSDOS3.3" "Non- "Replace and strike any key ready" (failure" : Spain PZPAPN Rattle : Rattle Death Rattle J: seconds = 62 S: 615 7: PRaCK - NAV, 12.2 9503+, {3.0+ The Rattle, or Death Rattle, . Its the submission was Wan source. Rattle is on the wof . The the Rattle the Rattle , as by the DOS nby Rattle in the Rattle , it Y. If Y, it the Rattle rof 615 at the end of the b. The @and in the DOS to be the seconds field #set to 62. the Rattle \frequent kdue to a See: PZPAPN RaubKopie : RaubKopie Raubkopi J: March, Germany S: 2,219 7: PNAK - , NAV, The RaubKopie in March, by Jan Terpstra of the . It is gGermany. Raubkopie is a wof . /and . a. It RaubKopie is Y, the yup to five . in the G. If less five existed in the G, it auntil the number of it has s five. Raubkopie 2,219 at the $of the b. The @and in the not be Raubkopie 2,475 to 2,491 at the end of the b. The larger ais due to a different mechanism %used to ythe a, the cadd up to 16 +to the candi is now di by 16. adding the +, it adds 256 +of hex 00's and appends the Raubkopie 7to the end of the . The @and in the not be The RaubKopie occasionally and require a response is invoked. The Ncannot be seen T. The A C H T U N G Die Benutzung einer RAUBKOPIE ist strafbar! Nur wer Ln, Handbucher, oder PD-Lizenzen besitzt, darf Kopien verwenden. mierung is muhevolle Detailarbeit: Wer Raubkopien verwendet, betrugt mierer un den Lohn ihrer Arbeit. A pause , and the dquestion "Bist Du sauber ? (J/N) " Entering "J" for yes in the Nand the proceed to "Ich glauben, was Du sagst Entering "N" for no in the , the second of is garbled, and the be terminated: "CPU-ID wird gespeichert... * LO<garbled> The last garbled samples of * Losche dieses in the RaubKopie to format the of the Mif the @is greater the 12th of the month, or the hour is 17:00 (5:00 PM). 7, however, Pnot function due to a bug in the RaubKopie 'the of the Hories ;ing RaubKopie sorted so at the $of the of RaubKopie are: Raubkopie-FRD: , Raubkopie-FRD is of the 1,888 at the $of the rof 2,150 to 2,160 at the end of the The in the "\ OSSI EN ST" "C:\ * NETWARE LMS MAUS MDB DOS BASE L" "*.exe *.com" "C:\ C:\CONFIG.SYS DEVICE = COUNTRY.SYS" "hgt42" "V1 FRD" of RaubKopie alter the C:\CONFIG.SYS ;the "DEVICE = COUNTRY.SYS" statement PZPAPN Raver : Raver J: S: 449 7: PNE - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 12.2 9503+, 7.00+, 2.0+, 2.71+ The Raver . Its . Raver is a wof . cRaver yall of the . in the rof 449 the at the end of the b. The and in the DOS not be . The in the 7in all ".. *.exe DOOM! (c) '93 Raver/Immortal Riot" It is what the Raver PZPAPN Reaper : Reaper Reaper Man J: England S: 1,072 7: PRhA - , NAV, {3.0+ The Reaper, or Reaper Man, It is gEngland. Reaper is a wof . /and . , but not ., and not on the A: cReaper Y, the Reaper at the top of &the ), hooking , as sby the DOS Bby 3,008 ~12's not be moved. the Reaper , it are copied or reason location is on the A: the Reaper 1,072 at the end of the Reaper is not able to determine t, so it , adding an 1,072 +. The @and in the DOS be corrupted to an unusual value is not a normal, valid @and . The @and s in the DOS are not tby the The can be in the all Reaper "Reaper Man" "(c) 92, Apache Warrior, ARCV Pres." "[ReaperMan] Apache Warrior" PZPAPN : Re J: j; unexpected Eastern S: 715 7: PNCK - , NAV, 12.2 9503+, The Re . It is gEastern W. Re (is a wof . the Re yone . in the G, it may the Re rof 715 at the end of the b. One "891221" the Re \unexpected ring PZPAPN Red Diavolyata : Red Diavolyata 830, MLTI J: S: 830 7: PRhCK - ], NAV, The Red Diavolyata is an 830 .. It was , and ated in the The Red Diavolyata is the at the top of &the ). The not moved. The DOS indicate Bby 960 nby the Red Diavolyata is , any . tby the . If Y, it rd by 830 +, and @and in the to the @and . The at the end of the The can be eat the end of "Eddie die where in m was written in the city of Prostokwashino" "(C) RED DIAVOLYATA" "Hello! MLTI!" ly, the "MLTI! /MAND" can be It is if Red Diavolyata of Red Diavolyata are: Red Diavolyata B: Very to Red Diavolyata B, the major difference gthe are two the differ gthe PZPAPN RefRef : RefRef J: S: 1,204 7: PRhE - , NAV, 12.2 9503+, {3.0+ The RefRef . Its . RefRef is a of . cRefRef Y, the RefRef at the top of &the , as sby the DOS by 2,496 }21 and 22 nby RefRef in the RefRef , it very small ones, rof 1,204 at the end of the b. The @and in the DOS not be The in the RefRef "ReFReF" "TFReF" "4tsonpm" It is what RefRef PZPAPN Reklama : Reklama J: j; TSR Poland S: 2,723 7: PRsCK - , NAV, The Reklama . It is gPoland. Reklama is a wof . cReklama Y, the Reklama as a low TSR of 2,736 +. It hooks the Reklama , it rof 2,723 +. The at the end of the b. The and in the DOS not be The can be in the all Reklama "Przekaze tylko pewna informacje i juz mnie nie ma." "Wszystko jest OK." "A oto ta oczekiwana informacja:" "Ognisko Muzyczne F R A Z A we Wroclawiu uczy gry na :" "- pianinie," "- akordeonie," "- syntezatorach," "- gitarze," "- skrzypcach," "- uczy rowniez spiewu solowego." "Ognisko Muzyczne F R A Z A organizuje rowniez kursy" "CHWYTOW GITAROWYCH." "Juz po czterech miesiacach poznasz tajniki" "gry na gitarze badz syntezatorze." "I TY mozesz umiec grac na roznych instrumentach muzycznych." "Kontakt : Wroclaw, tel. 25-90-97" "Nacisnij dowolny klawisz abys mogl pracowac" "Jesli chcesz umiescic relame w ie samokopiujacym," "pisz do:" "Agencji Wydawniczej: skr. poczt. 1009, WROCLAW 3" "Wirusek reklamowy 1" It is what Reklama PZPAPN Relzfu : Relzfu 233, Fake VIRx J: j; "Specified /MAND search Gbad" Finland S: 233 7: PNCK - 1, NAV, The Relzfu, or 233, Iin Finland in . Relzfu is a wof . Relzfu is Y, the search the Gfor an , the yit, was attempted to Relzfu 233 at the end of the be no 5in the @and in the DOS G. Two can be "ufzleR" "*.com" The #used for the reversed. It is if Relzfu PZPAPN Repent : Repent J: fail to function (failures S: 350 7: ONCK - , NAV, 12.2 9503+, The Repent . Its . Repent is a the Repent Y, the Repent ythe cfour . the G. If it may t. The Repent 7to move up one Gin the Gstructure, not function in higher level Hories are not tby the the Repent mthe +of the host by the Repent be no 5to the unless it was smaller , in case it "350 . The @and in the DOS not be . One in the Repent the Repent not function and are permanently corrupted. (failures (copy of tby the PZPAPN Reset : Reset Omega, Friday-13th-440 J: j; Very long Maccesses S: 440 7: PNCK - , NAV, The Reset . Its is a non- wof . the Reset Y, the search the Gstructure looking for . bencountered tby the has completed uthe Q, it search the C: Qin the same manner. Since the searches the entire Q, a long period of Maccess any the Reset rd in by 440 +. The at the end of the b. One can be in the : "*. Reset Pnot to do PZPAPN J: S: 512 7: PRfE - , NAV, {3.0+ The Iin the s is a wof . and in on the video card if it is ~21 is nby the in the ~area. s is , it rof 512 at the end of the b. The @and in the DOS not be . No in the It is what PZPAPN Revelation : Revelation J: S: 4,096 7: PRhCK - 12.2 9503+, The Revelation . Its . Revelation is a It employs an encryption mechanism used by the "Fish" cRevelation at the top of but &the ), not moving ~12's , as sby the DOS Bby 32,768 21 and 22 nby Revelation in , Revelation over 4,096 a DOS DIR Y. The not always ythe . ait encounters, s it just add 10 +to the end of the the 4096 rof 4,096 4,086 be hidden by the it is . The at the end of the b, and the @and in the DOS not be . The in the Revelation "Genesis" "Revelation Alpha" "Exodus" "Copyright (c) by Transvisionary" the Revelation DOS indicating Uon all See: Fish PZPAPN Revenge Attacker : Revenge Attacker 777, Revenge J: j; DIR 8problems; hang; Mformat Philipines S: 1,127 7: PRsCK - , NAV, The Revenge Attacker, or 777, ated in the Philipines. Revenge Attacker is a generic wof . It is a very destructive The Revenge Attacker is the as a low TSR of 1,392 nby the tby the Revenge Attacker is , it yone . by 1,127 at the end of the @and in the the @and be marked by the "777" ein the fourth through sixth are two "*** 777 - Revenge Attacker V1.01 ***" Revenge Attacker's low TSR is not used for v, but interfer operation internal 8s are issued. For example, issuing a DIR Revenge Attacker is in a Gentry repeated in place of actual Gentry. a DIR 8, the hang. all . in the Gare Revenge Attacker activate. At , followed by repeated 7's across the . While it is Oing the and writing the 7's to the , it Mstarting Side 0, Cylinder 1, 0. Fat <, and bloss may even if the turns off the computer immediately PZPAPN Reverse.A : Reverse.A Spider J: S: 950 - 962 7: PRhAK - 12.2 9503+, The Reverse.A . Its . Reverse.A is a /and . It is a fast w, spreading quickly on cReverse.A at the top of but &the ), not moving ~12's , as sby the DOS Bby 992 nby the /and . . It not yvery small Reverse.A rof 950 to 962 at the end of the b. In the case of ., the a portion of the hex 00 area of the b, so be no v. The @and in the DOS not be . The in the "Red Spider created by Garfield gZielowa Gora in Feb "moc.dnammocexe.niamcn" It is what Reverse.A PZPAPN Rider : Rider Rider.577 J: j; C: amay be Norway S: 577 7: PNCK - , NAV 3.05+, 2.1.7+, ]2.17+, 12.2 9503+, 2.0+, NAVN 1.05 9503+ The Rider , and s to be Norway. It is a wof . the Rider yone . in the rof 577 at the end of the b. The @and the DOS not be . The in the Rider "The iNFiLtRAtOR by The Dark Rider gNorway-93" "C:\ .C:\DOS\ .C:\IO.SYS C:\MSDOS.SYS" The Rider Dthe sin the third s in the failing to M. To problem, the must , write protected M, and replace the ausing the DOS SYS 8, and copying .to the C: Qroot and DOS Hories. PZPAPN Riihi : Riihi J: S: 132 7: PRaCK - , NAV 3.05+, 12.2 9503+, 1.05 9503+ The Riihi . Its . Riihi is a wof . cRiihi in al , hooking ~21. and/or , as by the DOS not be , the Riihi rof 132 at the end of the b. The @and in the DOS to the @and . No in the PZPAPN RIP-699 : RIP-699 RIP, Patsy J: j; TSR; Australia S: 699 7: PRsCK - NAV, The RIP-699, RIP, or Patsy, Iin Australia in . It is a wof . .. It on March 6th and it may cRIP-699 Y, the RIP-699 as a low TSR of 1,792 +. It hooks interupts 10 and 21. It may as part of 8Data in under mapping utilities. , RIP-699 rof 699 at the end of the b. The @and in the DOS not be . The in the RIP-699 "RIP Patsy Cline 8th 1932 - 6th March 1963" RIP-699 on March 6th and 8th of any year. On those @s, if the Zs a to set the video mode to mode 80 by 25 the PZPAPN : RNA J: March, j; zero acreated; S: 7,296 7: PNA - , NAV, The RNA in March, . Its . RNA is a wof . and . . It Pnot RNA is Y, the RNA yup to four . /and . in the of 7,296 at the the b. The @and in the DOS not be The can be ein RNA "Run "uc253.rqz" the RNA \intermittent Y. The notice zero- amay be created in the Qand Maccesses to Qmay , but the Pn't actually on the of RNA are: RNA-7408: RNA-7408, or RNA2, was It is in behavior to the are given preference for vover rof 7,408 at the $of the b. The can be in the "Run "Portions Copyright (c) 1983,90 Borland" PZPAPN Rocko : Rocko J: Canada S: 666 7: PRhAK - , NAV, The Rocko gCanada. Rocko is a /and . .. It employs techniques to avoid detection. cRocko Y, Rocko at the top of &the , as sby the DOS Bby 704 nby Rocko the Rocko , it /and . to not many ras the hides the it is . The DOS the Rocko rof 666 at the end of the b. The in the DOS may dis . The seconds in the stamp #set to 60. One can be in the "RocK STeaDY!" The Rocko on the 13th of any month, at the on the M. It :two mechanisms to perform damage. of Rocko are: Mutating Rocko: on the Rocko , at the of its submission, is not detected by aware of the Rocko to an complex encryption mechanism. Its is 1,280 +, hooking }09 and 21. It adds 609 +to the . [, the at the end of the Mutating Rocko is , the be hidden. One can be seen in all "(c) Rock Steady/NuKE]" Mutating Rocko on the 24th of any month, hits CTRL-ALT-DEL, the M. On the 24th of the month, a cold : Montreal, Canada Rocko-B: to the Rocko . It has 11 differ. The at the end of the : Montreal, Canada PZPAPN Roguey : Roguey Badcmdx J: j; TSR; host Lost clusters on fail to function; (failure S: 967 7: PRsCK - ]2.17+, NAV 3.05+, {3.0+, 2.17+, 1.05 9503+ The Roguey, or Badcmdx, . Its . Roguey is a wof . cRoguey as a low TSR of 1,584 nby the Roguey is , it may are 967 be hidden . Roguey encrypts the entire host in addition to its 7, so the position of the in the host bisn't particularly applicable. The may be Nby the "Bad , and thus is not In addition to Oing the s of may note an rin the rance of lost clusters on Ms, as well as the failing to copy of PZPAPN Rosen : Rosen J: S: 131 7: PNCK - 1, NAV, The Rosen . Its . Rosen is a wof . the Rosen yall . in the G. If G, it the Rosen rof 131 at the of the b. The @and in the DOS to the . The can be in the 7in all Rosen "R*. The Rosen is unable to recognize tby the , so it later re ythem, adding an Pnot do PZPAPN : RP3 J: S: 785 - 1,041 7: PNE - 2.1.7+, 12.2 9503+, {3.0+, The RP3 . Its . RP3 is a of . the RP3 yup to five . in the rof 785 to 1,041 at the end of the b. The actual rcan be calculated by taking the and dividing by 256. Subtract the remainder calculation and subtract it g256. give you the number +over 785 add to the b. The "filler" by the to the 7has . The @and in the DOS to the @and . The can be the 7in all in the "filler" by the to the end of the b, but 6are at the vand not part of the PZPAPN : RPVS 453, TUQ Endangered J: West Germany S: 453 7: PNCK - 1, NAV, The RPVS, or 453, Iin West Germany in early is a wof . The RPVS is d for an unusual s in a bdump of the - "TUQ.RPVS" - in not really a , but a series of PUSH instructions. The RPVS is a rather unsophisticated ever a . the RPVS or 453 Y, the look for an bin the The determines if the . bhas by checking to see if the last two +of the bare 9090h. If the last two +are not 9090h, the appending 453 7to the end of the b. One . not normally be Pnot ;any logic to activate and cause damage in its =state. It ;many NOP instructions and odd jumps leave plenty of space for later additions. of RPVS are: RPVS-B: The RPVS the end of an s, the act differently. It not be able to determine it has already b, so it ythe bit finds in the Gover and over again. PZPAPN RSP-1876 : RSP-1876 1876 J: j; beeping; random 6written to S: 1,876 7: PRsAK - , NAV, The RSP-1876 . Its . RSP-1876 is a wof . /and . cRSP-1876 in low to a TSR. The area as a TSR, however, most mapping utilities. }21 and 22 nby the RSP-1876 is , it /and . Y. If Y, it 1,876 at the end of the The @and in a DOS . The can be the "RSP" [of RSP-1876 in beeping emitted gthe speaker, as well as randome %written to the may PZPAPN : RTL4 J: The S: 503 7: PNCK - NAV, 12.2 9503+, {3.0+ The RTL4 , and is . RTL4 is a the RTL4 Y, the RTL4 yone . in the along Oing the "RTL4" "Joop van den Ende Produkties BV Marco Daas (Casting Assistent) Postbus 397 1430 AJ AALSMEER van Cleeffkade 15 1413 BA AALSMEER The Wedden dat... je een hebt?" hang . The a, so it is not the RTL4 rof 503 at the end of the b. The @and in the DOS not be . In addition to the , the The individual and the addresses by the , but should not be construed to indicate individual wrote the PZPAPN Rubbit : Rubbit Rubbit.681 J: possibly S: 681 7: PRfCK - , NAV 3.05+, 12.2 9503+, 2.0+, 2.17+, 1.05 9503+ The Rubbit, or Rubbit.681, , along four of the . Rubbit is a wof . .. The description included here is for Rubbit.681, three of the four remaining are included &. One , Rubbit.3811, did not is thus not included. cRubbit , at 9000, hooking ~21. Since it is in could if any Yby the area. be no sby the DOS , the Rubbit rof 681 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all "RUBBIT.$$$" It is what Rubbit may do of Rubbit are: Rubbit.1018: Rubbit.1018 is a 1,018 of the Rubbit . It rof 1,018 at the end of the b. The not be in the DOS . The @and in the DOS not be . The can be in the 7in all "RUBBIT.$$$" The DOS indicate all Rubbit.2060: Rubbit.2060 is a 2,060 of the Rubbit the top of &the ), not moving ~12's , as sby the DOS Bby 11,288 n. It /and . are rof 2,060 +while . rby 2,060 to 2,075 +. The be hidden by the it is . In both cases, the at the end of the b. The @and the DOS not be . The can be in the "RuBBit" The in the << How do you do >> ##" "## !! Today is My Birthday !! ##" "$$ OH! YES! Happy Birthday To You ! $$" The DOS indicate all Rubbit.3839: Rubbit.3839 is a 3,839 of the Rubbit a low TSR of 8,272 +, hooking /and . rof 2,060 at the end of the b. The be hidden by the it is . The @and the DOS not be . The can be in the "RuBBit" The in the "## !! RuBBit !! ##" << How do you do >> ##" "## !! Today is My Birthday !! ##" "$$ OH! YES! Happy Birthday To You ! $$" The DOS indicate all . The are read into thus hiding the vfurther gthe PZPAPN Ryazan : Ryazan J: S: 512 7: PRaE - The Ryazan and is gthe . Ryazan is a wof . cRyazan Y, the Ryazan in a "hole" in al at 0010. It ~21. , as sby the DOS not be the Ryazan , it very small ones, rof 512 the at the end of the b. The and in the DOS not be . The in the Ryazan "!!Ryazan" It is if Ryazan PZPAPN Rybka : Rybka J: j; TSR; [failures; (failures S: 123 Plus 7: PRAK - , NAV, The Rybka . Its . Rybka is a wof . /and . The Rybka is Y, the Rybka as a low TSR of 1.3K +, hooking ~21. Since the Rybka cannot later recognize it has already its TSR, it |it again Y. As a continue to Cin 1.3K increments as the vprogresses. Rybka is , it /and . over 132 Y. If Y, it tas well. Rybka by at least 132 many cases the rmay be over 13,000 +. In any event, the at the end of the b. The @and in a DOS . The can be "VACSINA" 'the increasing loss of while the , Rybka failing to ing the to the DOS prompt. If t, the PZPAPN Sabbath : Sabbath J: S: 1,684 7: PNC - 12.2 9503+, The Sabbath . Its . Sabbath is a wof . , but not the Sabbath yone . in the rof 1,684 at the end of the b. The @and in the DOS not be The in the Sabbath "[Sabbath By Havoc The Chaos of Trinity" "Sucks To Be You Pal!" "Your Computer The Sabbath - Trinity!" "Dedicated To Heaven In Black (He's Excited By kfrequently PZPAPN : Sad J: (failures; S: 301 7: PNCK - , NAV, 12.2 9503+, The Sad . Its . Sad is a wof . cSad Y, the Sad ythe cfour . ain the were not rof 301 at the $of the b. The and in the DOS not be The can be in the all Sad "Sad - 24/8/91" "*?.com" the Sad \frequent k, as well as (failures (copy of in the month of in the "Sad - 24/8/91" of Sad are: Sad-307: A 307 of the Sad adds 307 +to the . x. Like the , Sad-307's at the end of the b, and the @and in the DOS not be The ein the . The major distinction regards is the ' behavior in Upon [of an during the month of , the Oits the Q, effectively trashing the See: Bljec PZPAPN Saddam : Saddam Sadam, Profesor J: (failures; I/O "Insufficient to run .BAT a; DIR France (reported Israel S: 919 7: PRsCK - ], NAV, The Saddam creported in France in , the csample of was actually , its was Israel. Saddam is a wof . .. It is on the Do-Nothing The the Saddam Y, the in low not as a TSR. }21 and 22 nby the it has not Saddam is , it rof 919 +, the at the end @and upon are several may be \d on the Saddam . The most obvious symptom is the occasionally be "HEY SADAM LEAVE QUEIT BEFORE I cannot be seen in a, it is Z.BAT in an insufficient a Saddam fail, the hang. in an I/O Vand the aborting [. The DOS 8may not function . Lastly, may \frequent krequiring the to re the of Saddam are: Profesor: on the Saddam , Profesor adds 919 +to the . x. Its usage and to Saddam, differs in s allocate very large amounts of fail to Z. Professor xup to two . the [of an in a line of meaningless N. Professor :the "??? "The Profesor is in town again !!!" See: Do-Nothing PZPAPN Sadist : Sadist J: j; unexpected warm re (s of S: 1,436 - 1,450 7: PNE - , NAV, The Sadist . Its . Sadist is a wof . the Sadist Y, the Sadist search the Gand yup to three t, a warm re (may , or the host the Sadist rof 1,436 to 1,450 the end of the . The @and in the DOS . The can be in the 7in all Sadist "CopyRight by Vadim V.N.1989" PZPAPN Sandwich : Sandwich J: Manchester, England S: 1,172 7: PRhC - 1, NAV, {3.0+ The Sandwich gManchester, England. Sandwich is a wof . requiring a response in a manner to the Ear . It Pnot The the Sandwich Y, the Sandwich at the top of &the , as sby the DOS Bby 3,008 nby the Sandwich , the Sandwich for any reason. by 1,172 the initial not be if the . The at the end of the The @and in the DOS not be one out of every six in the Sandwich Oing a requiring a response. The ARCV Member Likes a <sandwich> Sandwich? Is it A. Apache Warrior B. ICE-9 C. Slartibartfast Select a Letter: " The "<sandwich>" be one of the "Cheese, Beef Spread, Cucumber and Crisp" "Corned Beef and Salad Cream" "Jaffa Cake and Hamster on Rye" If the answers the question correctly, the the , and the "Well you know you`re ARCV Members." If the answers the question incorrectly, the the , and a hang may "Bad Luck.. Better Luck Next All of the in the 7, and thus not . The answers for the questions, on the sandwich s in the order , are A, B, and the Sandwich notice %detected on all Sandwich PZPAPN Saturday The 14TH : Saturday The 14TH Durban, Saturday 14th I: March, TSR;. X, .OV? j; corrupts , FAT & on Saturday 14th Republic of South Africa S: 669 7: PRA - , NAV, The creports of the Saturday The 14TH came gSouth Africa in March . The Saturday The 14TH, or Durban , is a generic X, and overlay a, but not by between 669 and 684 The Saturday The 14TH on any Saturday falls on the 14TH of any month, at 100 logical of the C: Q, B: Q, and A: Q. In effect, on QC:, the destroys the , and (FAT). PZPAPN Satyricon : Satyricon Demon.348, Satyricon.348 j; beeping; fail to function S: 350 - 364 7: PNCK - 2.1.7+, NAV 3.05 9503+, 12.2 9503+, The Satyricon, Demon.348 or Satyricon.348, . Its . Satyricon is a wof . the Satyricon yall of the . ain the G, as well as the copy of in the C: Qroot 350 to 364 at the end of the The @and in the DOS not be . The in the 7in all =-DEMON-= Beeping may be emitted gthe speaker are Y, as well as the ed to the DOS prompt. PZPAPN Sayha Watpu : Sayha Watpu j; TSR S: 4,000 7: PRsAK - ], NAV 3.05+, 12.2 9503+, 1.05+, 7.00+, 2.17+ The Sayha Watpu, or SW VV2f, . Its . Sayha Watpu is wof . /and . .. It is a fast w, quickly spreading on cSayha Watpu as a low TSR of 9,824 }16 and 21 nby the the Sayha Watpu , it and . for any reason. rof 4,000 at the end of the b. The @and in the DOS not be . The in all Sayha Watpu "SW V V2f Sayha Watpu" It is what Sayha Watpu may do PZPAPN Schrunch-420 : Schrunch-420 Oof garbled may "schrunch" the S: 420 7: PNCK - p, NAV, {3.0+ The Schrunch-420 . Its . Schrunch-420 is a wof . the Schrunch-420 yup to six . in the 420 at the end of the b. The @and in the DOS . The can be in the 7in all Schrunch-420 "*.com" "- S C H R U N C H U P T I M E -" The Schrunch Ogarbled the Oand hang the . It "schrunch" or compress the work on the it was tested on. It write protect gwrite protected PZPAPN Scorpio : Scorpio @= "4-16-92"; DOS S: 1,000 7: PRhAK - , NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Scorpio . Its . Scorpio is a /and . cScorpio at the top of the ), not moving ~12's and , as sby the DOS Bby 1,056 }03 and 21 nby the , the .if it wasn't the Scorpio , it rof 1,000 be hidden by the it is . The at the end of all a. The in the DOS #set to "4-16-92". The in the Scorpio "Plovdiv" "Scorpio" [of the DOS in the indication of Uon all PZPAPN Scott's Valley : Scott's Valley 2131, Scott's, Slow-2131 TSR; . /and . Scott's Valley, California, S: 2,131 7: PRsA - ], NAV, The Scott's Valley Scott's Valley, California. is a generic wof . /and . a, and Pnot The the Scott's Valley Y, the as a low TSR of 2,384 ~21 is nby the , any . /or . by 2,131 +. . between 2,131 and 2,140 ;the dhex in the 7: 5E8BDE909081C63200B912082E. It is is malicious. PZPAPN Scramble : Scramble Scramble.1253 j; slow output to DOS DIR S: 1,253 7: PRhCK - ]2.17+, NAV 3.05 9503+, 12.2 9503+, The Scramble or Scramble.1253 Its . Scramble is a wof . .. It may on either the Flip or Tequila cScramble at the top of &the ), not moving interupt 12's . The at address 9F00 in . It prevents mapping utilities gfunctioning s of the DOS the Scramble , it a DOS DIR issued. 1,253 be hidden the . The at the end of all a. The @and in the DOS not be . The in the "BEER and TEQUILA forever !" "[Scramble] By Nikademus" "Read CRYPT Today!." The DOS DIR be sluggish on all PZPAPN Scream : Scream Fist, Screaming Fist , Except Scream 2-696, 9in USA & Canada Canada S: 711 - 1,191 7: PRtAK - NAV, 1.05 9503+ The Scream, or Screaming Fist, in Canada in . Scream is a wof . The the Scream at the top of &the ), moving ~12's , as the DOS Bby 2,048 }21 and 24 nby Scream in , the check to see if C:\ .has tby the . If it is not t, the promptly yit. The copy of on the Qmay the Scream , it for any reason. rof 711 rof 711 to 1,191 +. In both cases, the at the end of the . The @and in the DOS Two can be ein the Scream 7in all "Screaming Fist" "C:\ It is if Scream of Scream are: Scream 1B: The Scream 1B hequivalent to the Scream . It has four differ gthe : Canada Scream 2: The Scream 2 on the Scream . It adds 838 +to the . x, and 838 to 1,318 +to . . Like Scream, the at the end of the T, and no its : Canada Scream 2B: The Scream 2B is a 692 of the Scream it is and , as measured by the DOS Bby 2,048 }21 and 24 nby Scream 2B. Scream 2B is , it /and . , or copied. . by 692 +. . rof 898 to 1,172 +. In both cases, the at the end of the : Canada Scream 2C: The Scream 2C hidentical to Scream 2B. It is a minor : Canada Scream 2-696: The Scream 2-696 Iin the in May, it is , as measured by the DOS Bby 2,048 +, and it is , it /and . , or copied. . rof 696 +. . rd in by 902 to 1,176 +. In both cases, the at the end of the b. Scream 2-696 is polymorphic, employing a complex encryption mechanism. As of May, , it was confirmed by several large vs to be in the public domain, and is considered a in the as a : Canada May, Scream 2-732: The Scream 2-732 in the in May, . It is in many respects to the Scream 2-696 however, by 732 +. . rof 1,128 to 1,212 In both cases the at the end of the b. Like Scream 2-696, is polymorphic. May, Scream-650: The Scream-650 is a 650 of the Scream xthe C: Qroot Gcopy of Y. It Pnot until the gthe Mand the tcopy of as measured by the DOS by 2,048 nby Scream-650. it is , it are , or copied. rof 650 at the end of the b. The and in the DOS not be . The the "Screaming Fist (c)12/91" "C:\ : Canada See: Emf Enemy PZPAPN Scroll : Scroll seconds set to "62"; V; .BAT England S: 795 - 1,306 7: PRhCK - NAV, The Scroll gManchester, England in . Scroll is a wof . .. It employs techniques to avoid the noticing the The tby the Scroll the Scroll at the top of &the , as sby the DOS Bby 3,008 Scroll in , the Scroll for any reason. 795 to 1,306 hide it is . The Scroll at the end of . The seconds field in the @and in the DOS #set to "62", the vmarker for the . The in the "[SCROLL] ICE-9 ARcV" the Scroll may notice the DOS detect the Scroll . It .BAT a, permanently corrupting them. PZPAPN Scythe : Scythe England S: 1,208 7: PRCK - , NAV, 12.2 9503+, {3.0+ The Scythe gManchester, England in . Scythe is a wof . .. It employs techniques to avoid the noticing the vs, and is a fast The tby the Scythe the Scythe at the top of &the , as sby the DOS Bby 3,008 Scythe in , the Scythe for any reason. 1,208 usually hide it is (note: it Pn't always do ). The Scythe at the end of . The in the DOS . The be different, and the be set to 10:56.18. The in the is the Scythe for Reaper Man." "Beware I`m Sharp!" "Made in England by Apache Warrior, ARCV Pres." "Scythe Ver. 1.01 (c) Apache Warrior 92." "Reaper Man Swung The SCYTHE and the PC Died!" "[SCYTHE] Apache Warrior, ARCV Pres." the Scythe may notice the DOS detect the Scythe PZPAPN SeaCat : SeaCat Read- Attribute set on S: 160 7: PNCK - , NAV, The SeaCat . Its . SeaCat is a wof . the SeaCat Y, the SeaCat yone . in the 160 at the $of the b. The @and in the DOS to the @and . The Read- attribute be set on in the DOS for the b. The can be in the 7in all SeaCat "SeaCat*.com" SeaCat corrupt . smaller are tby the PZPAPN Search-1000 : Search-1000 I: March, S: 1,000 7: PNCK - , NAV 3.05+, The Search-1000 in March, . Its . Search-1000 is a wof . the Search-1000 yone . in the rof 1,000 at the end of the b. The @and in the DOS to the @and The can be in the 7in all Search-1000 ly, the "CPX" eat the very $of all of Search-1000 are: Search-377: A 377 of the Search-1000 xall of the . in the rof 377 at the end of the b. The @and in the DOS to the @and . The in the 7in all Search-377 "*.com" : Israel PZPAPN : Seat Seat.2389, 2389 j; DOS fail to function S: 2,389 - 2,403 7: PRhAK - p2.10+, 12.2 9503+, The Seat, Seat.2389 or 2389, . Its . Seat is a semi- /and . .. It Pnot yall . cSeat Y, the Seat at the top of the ), not moving ~12's , as sby the DOS Bby 5,120 }1C and 21 nby the the Seat , it /and , or a DOS DIR issued. are not are the source or target of a COPY 8. . the Seat rof 2,389 at the $of the by 2,389 to 2,403 at the end of the b. The be hidden by the it is . No in the give not function the Seat PZPAPN : Self Polish-457, Polish-550, Self-457, Self-550 Poland S: 457 or 550 7: PNCK - , NAV, The Self is actually two were ated in Poland. Both are ws of . one of the Self es is the search the Gto find all . All the Self . The either 457 or 550 +, depending on of the two es is present, at the $of the b. In either case, the @and the DOS to the and of Self are: Self-457: The 457 of the Self rd in by 457 +. The can be "MS *. /" and "RZRZ". Polish-457. Self-550: The 550 of the Self rd in by 550 +. The can be "CMS*. /", "*. X", and "QYQY". as Polish-550. PZPAPN Semtex : Semtex Czechoslovakia S: 1,000 7: PRhCK - p, NAV, 12.2 9503+, The Semtex . It is gCzechoslovakia. Semtex is a wof . cSemtex Yon a Semtex at the top of &the , as sby the DOS by 4,080 ~12's not be moved. Semtex hook }8 and 21. , Semtex Semtex is , it for any reason. In the case of copying gone Gto an , both the source and target copy of the . Semtex by 1,000 The at the end of be no 5to the @and in the DOS . The can be the "S E M T E X by Dusan Toman, CZECHOSLOVAKIA (7)213-040 or (804)213-23" is not Nby the Semtex has for 60 minutes, it produce a Rcursor position on the ;a colored background and an ASCII character. The effect is a multi-color flashing of very small rectangles. The to normal by pressing a key on the of Semtex are: Semtex-B: A 1,000 of the Semtex is 4,080 +, hooking ~21. It for any reason. rof 1,000 at the end of the b. The ris not hidden . The @and in the DOS not be . The in the 7in all Semtex-B "S E M T E X by Dusan Toman, CZECHOSLOVAKIA *** ma nice day ***" kmay : Czechoslovakia Semtex-C: A 619 of the Semtex is 4,080 +, hooking }08 and 21. It for any reason. rof 619 at the end of the b. The is not hidden . The @and in the DOS not be . The in the 7in all Semtex-C "S E M T E X by Dusan Toman, CZECHOSLOVAKIA (7)213-040 or (804)213-23" kmay : Czechoslovakia Semtex-D: A 1,000 of the Semtex is 4,080 +, hooking }08 and 21. It are for any reason. rof 1,000 at the end of the b. The ris not hidden . The @and in the DOS not be . The in the 7in all Semtex-D "S E M T E X by Dusan Toman, CZECHOSLOVAKIA (7)213-040 or (804)213-23" kmay : Czechoslovakia PZPAPN Seneca-B : Seneca-B & data (failure; S: 493 7: ONAK - , NAV, 12.2 9503+, The Seneca-B . Seneca-B is and data a. It corrupts the the Seneca-B Y, the Seneca-B yall of the in the c493 +of the host b. The Pnot differentiate between and data a, so <, data and data the Seneca-B as the smaller . The @and in the DOS to the @and . The in the Seneca-B "*.* .." PZPAPN Sentinel : Sentinel Sentinel-3, Sentinel-5, BC stuck key failure" S: 4,625 7: PRHAK - , NAV, 12.2 9503+, The Sentinel , and is is a wof . a, and .. Unlike most Turbo Pascal source 7. It may be purely a research Sentinel is Y, the at the top of , but &the ~12's not moved by the nby the ., if not tby Sentinel at as well. Sentinel is , it /and . larger 1K as rof 4,625 +, the at the end of the makes no attempt to hide the @and the Gis not by the The can be eat the very end of Sentinel: "You won't hear me, but you'll feel me (c) by Sentinel. ks to Borland." Sentinel Pnot to do of Sentinel are: Sentinel-3: Sentinel-3 is a 5,173 of the Sentinel . Unlike Sentinel, , it hide the if it is . Sentinel-3's is 5,328 are no recognizable visable in Sentinel-3 notice executing the DOS Udo not Sentinel since it didn't attempt to hide the * May Sentinel-5: Sentinel-5 is a 5,402 of Sentinel-3. Sentinel-5 is , it hide the . Like Sentinel-3, executing the DOS uncover . Sentinel-5 smaller 2K in in the stuck key failure", always if the to view beditor Sentinel-5 is . Sentinel-5's is 5,568 are no readable in the 7in Sentinel-5 * May PZPAPN Serena : Serena j; TSR Italy S: 792 7: PRsCK - , NAV, {3.0+ The Serena . It is gItaly. Serena is a wof . cSerena Y, the Serena as a low TSR of 1,104 +. It hooks the Serena , it rof 792 at the end of the b. The in the DOS not be . No in the It is what Serena PZPAPN Seventh Son : Seventh Son 7th Son, Seventh Son-284, Seventh Son-350 The Eastern S: 284 or 350 +, depending on 7: PNCK - , NAV, The Seventh Son is actually two behavior were in the are believed to mactually ated in Eastern The Seventh Son es are ws of . a Seventh Son Y, the Seventh Son search the Qand encountered by either 284 or 350 +, depending of the Seventh Son es has tthe be no 5in the @and in the DOS G. The can be "Seventh son of a seventh son" Seventh Son Pnot to do of Seventh Son are: Seventh Son-284: Seventh Son-284 is a 284 Seventh Son-332: Seventh Son-332 is a 332 the Seventh Son . It xall . in the rof 332 at the end of the b. The @and in the DOS not be . The ein the Seventh Son es are : The Seventh Son-350: Seventh Son-350 is a 350 Seventh Son.426: Seventh Son.426 is a 426 the Seventh Son . It xall . in the rof 426 at the end of the b. The @and in the DOS not be . The in the 7in all "ARBEIT MACHT FREI!" "The Unforgiven / Immortal Riot Sweden 01/10/93" : Sweden Seventh Son-473: Seventh Son-473 is a 473 the Seventh Son . It xall . in the rof 473 at the end of the b. The @and in the DOS not be . The in the 7in all "Fight Fire Fire..." "Soon to fill our lungs the hot winds of death" "The gods are laughing, so take your last breath" "Immortal Riot..Death Greets me warm.." Seventh Son.473.B: hequivalent to the Seventh Son-473 has three differ. Seventh Son-Kernel: Seventh Son-Kernel, or Kernel, is a 610 on the Seventh Son at the top of &the Y, decreasing by 8,448 +. It hooks ~21. rof 610 to 624 at the end of the be no 5to the @and in the DOS . One in the 7in all "KERNEL" PZPAPN Shadow : Shadow Shadow, Shadow-2 I: May, S: 713 7: PNCK - p, NAV, The Shadow ,, or Shadow, in May, . Its . Shadow ,is a generic , it Shadow Y, it one in the G. If .is in the G, it may 713 tby Shadow by 723 +if it t. In both cases, the at the end of the be no 5to the @and in the Shadow ;two "!seviL etybwodahS" The comes gthe reversed says "Shadow ,Lives!". It is if Shadow of Shadow ,are: Shadow-2: A smaller of the Shadow , Shadow-2 adds 635 a. The can be "!sevil etybwodahS*. "AWK" PZPAPN Shake : Shake Shake Dropper I: May, S: 476 7: PRCK - ], NAV, The Shake *in May, Daniel Kalchev. It is a generic . w, and The Y, the Shake , altering the image of The Shake uthem as accessed. by 476 rcannot be seen using a DIR (list if the While the is not destructive, it occasionally the : "Shake well before use !" attempted to be run. N, the terminates rather Zs. A second attempt to run the same in it running successfully. of Shake are: Shake Dropper: A small . drops the Shake *, May, PZPAPN Shaker : Shaker Prague Joker j; "shaky" effect may be produced; Prague, Czechoslovakia S: 512 7: PRhCK - , NAV, The Shaker reported to ated in Prague, Czechoslovakia. Shaker is a wof . It is on the Back , and identify it as such. The the Shaker Shaker at the top of &the , as sby the DOS Bby 528 }08 and 21 by Shaker in ~12's moved. Shaker is , the yany . it is Y. If Y, it t. Shaker rof 512 +. The at the end of the be no 5to the @and in the DOS . One can be viewed in the "Shaker" Shaker may \a "shaky" effect effect, however, on all See: Back Blinker PZPAPN Shaman : Shaman I: March, S: 251 7: PNCK - , NAV 3.05+, {3.0+, 1.05 9503+ The Shaman in March, . Its . Shaman is a wof . the Shaman yall of the . in the 251 at the $of the The @and in the DOS to the @and . The can be in the 7in all Shaman "*.com" "Demo v1.0 Copyright (c) 20.8. by Shaman" Shaman Pn't to do PZPAPN Shanghai : Shanghai I: May, ?seconds = "62" China S: 848 7: PRhCK - , NAV, {3.0+ The Shanghai in May, , and is gChina. Shanghai is a wof . cShanghai Y, the Shanghai at the top of &the ), not moving ~12's , as sby the DOS Bby 2,048 nby Shanghai in , the Shanghai ythree . in the a DOS DIR issued. Shanghai Pnot the Shanghai rof 848 at the end of the b. The @and in the DOS to be un , but the seconds field #set to "62". The can be in the 7in all Shanghai "ShangHai Railway Institute" It is what Shanghai may do PZPAPN : Shhs S: 585 7: ONAK - p, NAV, The Shhs . Shhs is a wof . and . .. It corrupts the Shhs is Y, the Shhs search the Gfor three y. If were e, it ythem. If were e, the search the Gfor three and ythem if were e. If all the . /and . in the Gwere t, the activate (see &). If the Pn't activate, the N, and the ed to the DOS prompt: too big to fit in in the , and is a fake the Shhs mthe c585 of the host the Shhs 7. Unless the was smaller be no 5to the in the DOS were smaller 585 tby Shhs. be no to the @and in the DOS all of the . /and . in the the Shhs , the activate the next Y. At , the of the starting at 0. The "I'm sorry, Dave... but I'm afraid I can't do Dedicated to the dudes at SHHS The BOOT SECTOR w..." to access on the gDOS. Examination of the on the Norton Utilities in maintenance mode reveal the in the "Killed by: The " ;the of the activated g. For example, if the the activated, the thirteen periods be replaced by /...". The Shhs T, so the cannot be seen a. Since Shhs s the $of the cannot be dis t, but must Dd and replaced gnon- tcopies. has activated, the Mshould be reformatted. of Shhs are: Secret Service: on the Shhs , the Secret Service s the c600 the . x. It xthree . in the all of the . in the t, the next [of the in the trashing the Q. The in the too big to fit in "I'm sorry John McAfee (NOT!)..." "Secret Service has arrived..." "Dedicated to all makers!" "By: Agent #13/Nuke Member" "Killed by:" : Canada PZPAPN Shield : Shield I: March, j; hidden . acreated; 5; TSR; S: 5,152 +(companion a), 127 7: PSRsA - Spawning , NAV, {3.0+ The Shield in March, . Its is a spawning or companion by creating corresponding . a. It adds 127 +to . ado not carry an active The Shield is Y, the Shield as a low TSR of 5,456 the Shield , it create a hidden companion . bof 5,152 +for . It add 127 . The 127 to the end of . , and the @and in the DOS The Shield is creates an active in the companion, hidden . kmay PZPAPN Shifter : Shifter S: 6,672 7: PRtEX - 1, NAV, a& Replace The Shifter . Its . Shifter is a of the ) and cShifter Y, the Shifter ythe , the ;ing the z. The Pnot , and not start The next gthe M, the Shifter at the top of &the ), moving ~12's , as sby the DOS Bby 7,168 the Shifter , it rof 6,672 at the end of the b. The @and in the DOS not be . No in the Shifter It is what Shifter PZPAPN Shiny Happy : Shiny Happy ?seconds = "48"; :-) 3to :-( North America S: 921 7: PRtAK - NAV 3.05+, {3.0+, 1.05 9503+ The Shiny Happy , and gNorth America. Shiny Happy is a of . /and . .. It employs techniques to avoid detection. cShiny Happy Y, the Shiny Happy at the top of &the ), moving ~12's , as sby the DOS Bby 1,024 03, and 09 nby Shiny Happy in the Shiny Happy , it and . rof 921 be hidden Shiny Happy is . The at the end of all a. The @and in the DOS , but the seconds field 3to "48". The can be in the 7in all Shiny Happy "Shiny Happy by Hellraiser and Dark Angel of Phalcon/Skism" the Shiny Happy , it character sequence ":-)" to ":-(" it is d on the PZPAPN Shirley : Shirley j; TSR Germany S: 4,099 - 4,112 7: PRsE - can, NAV, {3.0+ The Shirley . It was in Germany in . Shirley is a of . cShirley Y, the Shirley as a low TSR of 4,160 nby Shirley in the Shirley , it rof 4,099 to 4,112 at the end of the b. The @and the DOS not be . The in the 7in all Shirley "IWANTSHIRLEY" "Marty McFly lives where in (Doc Brown)" "Fuck for Eddie!!" one place to spend nice holidays... "CASAL BORSETTI" "in Italy... "Fuck for John McAfee and all the Vrs-Killers..." "We ma right to live "Greetings to the 1704... you were the "Greetings to -B...You were the Second!" "But now its my turn." "Hope You mfun the Shirley- The the "IWANTSHIRLEY" included in the 7in German. PZPAPN Shizol : Shizol S: 500 7: PRaCK - ]2.17+, 7.00+, p2.10+, 2.71+, 7.00+, 2.71+ The Shizol . Its . Shizol is a .. It is what it may do cShizol in al at 0020. nby the and , as sby the DOS not be the Shizol , it rof 500 at the end of the b. The @and in the DOS not be . The can be the 7in all "Shizol0.0" PZPAPN Shock Therapy : Shock Therapy S: 620 7: PRtAK - , NAV, {3.0+ The Shock Therapy . Its . Shock Therapy is a wof . /and . cShock Therapy Y, the Shock Therapy at the top &the ), moving 12's , as by the DOS Bby 2,048 nby Shock Therapy in the Shock Therapy , it and . rof 620 the at the end of the b. The and in the DOS not be . The in the Shock Therapy thus not "Your HD is TOAST! x to Shock Therapy!" "SHOCK THERAPY" "TIaMaT" It is what Shock Therapy See: PZPAPN Sicilian Mob : Sicilian Mob warm re Canada S: 1,024 7: PNCK - 1, NAV, The Sicilian Mob . It is gCanada. is a wof . .. It is on the the Sicilian Mob the look for an The Gis searched c, and path. If no path has #set, the search the Gstructure. bhas , the the Sicilian Mob rof 1,024 +. The at the end of the b. The @and in the DOS Starting in , the Othe "Sicilian Mob Ia - [NUKE]'91 - Rock MP" in all a, as are the "Copyright (C) by [NUKE] InterNat'nl Software Development" "Completed , Montreal, Canada" "--> [NUKE] H/A/P/V/T at its Best <--" the Sicilian Mob is a one in seven chance of the performing a warm See: Parasite VHP PZPAPN Signs : Signs Signs of Life j; TSR S: 720 7: PRsCK - , NAV, The Signs, or Signs of Life, Its . Signs is a wof . cSigns Y, the Signs as a low TSR of 720 +. It hook ~21. mapping utilities may show the TSR as rin the of the "config" area in the Signs , it rof 720 the end of the b. The @and in the DOS not be . The can be in the 7in all Signs "Signs Of Life." It is what Signs may do PZPAPN Silence : Silence S: 555 7: PRhCK - , NAV, The Silence . Silence is a wof . .. Its The the Silence the Silence at the top &the ). It Pnot move ~12's sby the DOS Bby 1,568 nby Silence in the Silence , it Y. If Y, it tby the the Silence rof 555 at the $of the b. The @and in the DOS not be . The in the "The Silence Of The Lambs!" Silence Pn't to do See: Youth PZPAPN Silly : Silly 200, V200 I: May, S: 200 7: PNCK - , NAV, The Silly Win May, . It is a wof . Silly is Y, the search the QC:, and yall . rof 200 the at the $of the b. The @and in the not be The Silly Pnot do See: Amstrad Hell Pixel Silly-365 PZPAPN Silly : Silly formatted S: 2,268 - 2,313 7: PNAK - The Silly . Its . Silly y is a wof . .. It trojanizes . the Silly Y, it yor trojanize up to two on the C: Q. The clook for the in the C: Qroot G, and move downward as necessarily in the structure. of 2,268 to 2,313 at the $of the b. Trojanized . r. The @and in the DOS not be Zs an . #trojanized by the Silly , the be cleared, and an animated face in the upper left hand corner of the , accompanied by the "Hello, I'm Silly Now I'm formating Your HARDDISK! 's fine! - Isn't it (har,har)..." The C: be accessed, Mis not formatted by the a short period of , the cleared and the "ERROR: No SYSTEM Insert SYSTEM QA: and push any key!" The attempt to format the A: PZPAPN Silly-365 : Silly-365 Pixel, Pixel 877 I: May, j; slow to very slow loads; S: 877+ 7: PNCK - , NAV, The Silly-365 Win May, . It is a very buggy of the Silly . Like Silly, it is a non- wof . .. It is %listed separately as its behavior and vare considerably different. Silly-365 is Y, the search the G, and yall . e. If the . in the Gwere tby Silly-365, be re Silly-365 @and in the to the @and vand re The bugs in Silly-365 mto do the re vs of vof a by Silly-365, the by 877 +. On the v, the by an 877 +. The second re in a rof 1,754 +. The third re vadds 3,508 The pattern is starting the second re v, the ris equal to two s the previous Needless to say, even starting a very small 42 , by the eighth v, the is too large to be The problem Silly-365 is it is very noticeable. As the vproceeds, the takes longer and longer to Zany . . By the seventh re von the one of my test , the was literally working on re two . for 20 minutes. The Silly-365 was intended to Othe an 8th generation V fucking defoult Please by me a new , in actual 8th generation vs, is not as the 8th generation bis too large to be as a . Silly-365 gits base is 365 . The Silly Pnot do of Silly-365 are: Silly-740: to Silly-365, is actually 370 . Like Silly-365, it re multiple s, so multiple of 370 or 740 See: Amstrad Hell Pixel Silly PZPAPN SillyOR : SillyOR SillyOR.76 S: 76 7: ORsAK - NAV 3.05 9503+, 12.2 9503+, The SillyOR or SillyOR.76 , along four . SillyOR is a /and . cSillyOR as a low TSR of 400 }21 and 32 nby the the SillyOR , it are copied. the SillyOR 7. The @and in the DOS to the @and in the the SillyOR fail to function as the $of the mnot tby the garbage of SillyOR are: SillyOR.88: , SillyOR.88 is an 88 of the SillyOR . It in a "hole" in al , hooking ~21. As a be no sby the DOS , SillyOR.88 /and . are copied. mthe 6of the by the , thus permanently corrupting the . The @and in the DOS to the @and . No are in the SillyOR.94: , SillyOR.94 is very to SillyOR.88. It s the +of the SillyOR.97: , SillyOR.97 is very to SillyOR.88. It s the +of the SillyOR.101: , SillyOR.101 in "hole" in al to SillyOR.88, hooking ~21. It /and . Y. It Pnot are copied. the SillyOR.101 mthe c101 by the 7. The @and in the DOS to the @and . No the PZPAPN Silver Dollar : Silver Dollar ; long Maccesses; do not S: 2,071 7: ONAK - p, NAV, 12.2 9503+, {3.0+ The Silver Dollar . Its a mention is made in the of Boulder, Colorado in the . Silver Dollar is a xboth . /and . the Silver Dollar search the Gfor up to four y. If the (s) are e, the ythem, c2,071 +of the host . The @and in the DOS not be . The can be in all Silver Dollar "Copyright(C) by CU, Boulder Colorado." too big to fit in "Person/People/Things we >>hate<<:" "Person/People we admire:" "Person/People/Things we think are cool: Irving Berlin's Music." tby the Silver Dollar may notice too big to fit in . Long Maccesses of Silver Dollar are: Silver Dollar-2A: , Silver Dollar-2A is a 1,644 of the Silver Dollar . It xfour . Xor . in the c1,644 +of the host . The @and in the DOS not be . The in the 7in all "Allocating . Please wait accessing , please turn off all RAM" and press >>Enter<< to continue too big to fit in "Copyright(C) by Fairview High School, Boulder Colorado, 80303. Macintrashes Suck!" "Victoria McMath. XX" "Linda" "Darnell." ".. *. The cfour Nas a Yand all of the . in the malready tby the Silver Dollar-2B: , Silver Dollar-2B is a 1,874 of the Silver Dollar . It xfour . Xor . in the c1,874 +of the host . The @and in the DOS not be . The in the 7in all "Allocating . Please wait accessing , please turn off all RAM" and press >>Enter<< to continue too big to fit in "Copyright(C) by Fairview High School, Boulder Colorado, 80303. Macintrashes Suck!" "Person/People/Things we >>hate<<: Paul Harvey's sucks MacinTrashes Suck ! BASIC Suck "Windows sort of suck. Person/People we admire:" "Victoria McMath(Ginger Rogers)," "Linda Darnell. Person/People/Things we think are cool:" "The author of Star Trek, Poker Faces, C++, LISP. XX" ".. *. The cfour Nas a Yand all of the . in the malready tby the Silver Dollar-2D: , Silver Dollar-2D is a 2,218 of the Silver Dollar . It xfour . Xor . in the c2,218 +of the host . The @and in the DOS not be . The in the 7in all "Allocating . Please wait accessing , please turn off all RAM" and press >>Enter<< to continue too big to fit in "Copyright(C) by Fairview High School, Boulder Colorado, 80303. Macintrashes Suck!" "Person/People/Things we >>hate<<: Paul Harvey's sucks MacinTrashes Suck ! Graham (Not Alexander but ass kids whjo calls himself graham) sucks!" "Person/People we admire:Lynn Bari, Jean Arthur, Jane Russell" "Person/People/Things we think are cool: Cybernetics, C++, 39 Steps, The Mafia, maybe "Monty Python"" ".. *. The cfour Nas a Yand all of the . in the malready tby the Silver Dollar-2F: , Silver Dollar-2F is a 736 of the Silver Dollar . It xfour . Xor . in the c736 +of the host . The @and in the DOS not be . The in the 7in all ".. *. The too big to fit in s be Silver Dollar-8101: ga United States source, Silver Dollar-8101 is a 8,101 of the Silver Dollar . It one . /or . in the the c8,101 +of the host . The @and in the DOS . The the 7in all "Copyright(C) by CU, Boulder Colorado." "Person/People/Things we >>hate<<:" "Person/People we admire:A Midgit, or maybe two :-)." "The Luna - moon. Ivy, Irene, Iris" "Person/People/Things we think are cool or find phus:" "Strip Poker," "Gambling." "PLO" "The Silver Dollar Strikes Again" is dedicated to a nice person AMY" "Everyone say Hi Amy!" Silver Dollar-SHJH: , Silver Dollar-SHJH is a 1,547 of the Silver Dollar . It xfour . Xor . in the c1,547 +of the host . The @and in the DOS not be . The in the 7in all "Allocating . Please wait accessing , please turn off all RAM" and press >>Enter<< to continue too big to fit in "Copyright(C) by Souther Hills Jr. High, 1500 Knox Dr., Boulder Colorado, 80303. Macintrashes Suck!" "Victoria McMath. XX" "Linda" "Darnell." The cfour Nas a Yand all of the . in the malready tby the the fourth Nas a See: Leprosy PZPAPN Simple : Simple S: 424 7: PNCK - , NAV, {3.0+ The Simple , and is gthe . Simple is a wof . the Simple Y, the Simple yall of the . in the G, as well as the copy of in the Qroot rof 424 at the of the b. The @and in the DOS to the @and . The can be in the Simple 7in all "SIMPLE "C:\V.0 *. "C:\ Simple Pn't to do PZPAPN Simple Minds : Simple Minds do not S: 207 7: ONCK - NAV, {3.0+ The Simple Minds . Simple Minds is a the Simple Minds the Simple Minds yall of the . in the it has completed uall of the . a, it Othe the to the DOS prompt: "A vir 4 da simple minded people of the earth Since ya didn't notice dis vir.. YAR LAME the Simple Minds mthe 207 +of the host by the Simple Minds 7. Since the c207 +of the host are not saved by the , host are permanently corrupted. The runless the smaller +, in case 207 . The @and in the DOS to the and 'the , the in the 7in Simple Minds Simple Minds fail to copy of PZPAPN Simulati : Simulati hang; S: 1,257 - 1,313 7: PNC - , NAV, The Simulati . Its . Simulati is a . It Pnot Simulati is Y, the search the Gfor an . If one is e, the yit. by 1,257 to 1,313 at the end of the b. The in the to the @and On a random basis, the Simulati hang the . The be one of the three: "ALIVE... Your tby the SIMULATION ma nice day!" "FRODO LIVES!" "HA HA HA YOU HAVE A VIRUS" N, are centered vertically and horizontally on the PZPAPN Sinep : Sinep I: March, S: 644 7: PRhCK - , NAV 3.05+, {3.0+, 1.05 9503+ The Sinep in March, . Its . Sinep is a wof . cSinep Y, the Sinep at the top of &the ), hooking ~22. ~12's not be moved. sby the DOS Bby 672 the Sinep , it rof 644 the end of the b. The @and in the DOS to the and . No the 7in Sinep kmay PZPAPN Siskin : Siskin Sistkin-948 S: 948 - 956 7: PRhAK - , NAV, The Siskin, or Siskin-948, along of the es are gthe Siskin is a wof . /and . .. On XT class machines, the es in destroy or corrupt the The the Siskin the Siskin at the top of &the ). It Pnot move ~12's sby the DOS Bby 960 }1C and 21 nby Siskin in the Siskin , it usually rof 948 by up to 956 +. The at the end of the b. The @and in the DOS not be Frequent kmay be \d on especially (copy of of Siskin are: Siskin-1017: An earlier of the Siskin is 1,024 It adds 1,017 to 1,025 +to the . /and . @and to the @and Siskin-Goodbye: An member of group of es, Siskin- Goodbye's is 848 +. It adds 839 to 847 +to the . /and . @s the @and are PZPAPN Sistor : Sistor Sistor-2225, Plaice k; bouncing small diamond Sweden S: 2,225 7: PRtAK - , NAV, The Sistor, or Sistor-2225, location. It is believed to ated in Sweden. is a wof . /and . The the Sistor at the top of &the ~12's be moved. , as by the DOS Bby 4,096 }1C and 21 nby the Sistor At the of becoming , the Sistor check to see if the copy of .the t. If it is not t, the Sistor the Sistor , it rof 2,225 at the end of the be no 5to the @and in the DOS . The can be enear the end of all "Sistor" the Sistor or .BAT , the be left spinning. The notice a "bouncing ball" on the s to actually be a very small diamond character. of Sistor are: Sistor-1129: A 1,129 of the Sistor is an earlier of the Sistor-J4J listed &. It rof 1,129 the end of the b. The in the DOS not be , and the ris not hidden. The :one is the vmarker at the very end of "J4J" : Sweden May, Sistor-2380: A 2,380 of the Sistor the exception r, and kdo not typically Sistor-2630: A 2,630 of the Sistor the exception r, and kdo not typically by 2,630 v. Sistor-2630 cannot distinguish t, so it , adding an 2,630 are no in the Sistor-J4J: A 1,273 of the Sistor by 1,273 be hidden if Sistor-J4J is . The at the end of . The in the DOS not be Sistor-J4J notice the DOS , and to be smaller actually are sas having U). The can be in the 7in Sistor-J4J "Elo , Elo , lam sabakt "Charlie says: Support ()DEMORALIZED YOUTH()" "J4J" : Sweden Sistor-J4J Alpha: , Sistor-J4J Alpha s to be an earlier of the Sistor-J4J . Its is 4,096 +, hooking ~21. It were ton open usually not function Sistor-J4J Alpha rof 833 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all Sistor-J4J Alpha "Jump 4 Joy, alpha-release. Not to be distributed!" "J4J" : Sweden See: PCBB PZPAPN Skater : Skater Skater-1021, Tonya j; TSR; Australia S: 1,021 7: PRsCK - , NAV, The Skater, Skater-1021, or Tonya, Australia in . Skater is a of . cSkater Y, the Skater as a low TSR of 2,416 +. It hook }10 and 21. mapping utilities may indicate the as an rin the of the in copy of the 8inter- pretor, showing a rof up to 2,500 , the Skater rof 1,021 at the end of the b. The in the DOS not be . The in the Skater "I love Tonya ling. The best womens Figure Skater in history." "Now Tonya, Do triple axle and kick Kristi Yamaguchi's arse" "- Australian Parasite -" The ctwo may be Nby the ever a to set the video mode mode, 80 by 25. of Skater are: Skater.664: A smaller of the at the top of &the ), hooking ~21. , as by the DOS gDOS 6.0, Bby 1,456 , Skater.664 rof 664 at the end of the Skater-977: A smaller of the at the top of &the ), hooking }10 and 21. , as sby the DOS Bby 2,016 , Skater-977 rof 977 at the end of the b. Skater-977 in the same manner as the , and the same : Australia PZPAPN Skew-469 : Skew-469 Skew S: 469 - 485 7: PRxE - , NAV, {3.0+ The Skew-469, or Skew, , and gthe . Skew-469 is a of . . It is a fast w, quickly spreading on cSkew-469 in a "hole" in al low , hooking }1C and 21. , as sby the DOS not be the Skew-469 , it for any reason. rof 469 to 485 the at the end of the b. The and in the DOS the @and . No in the It is if Skew-469 PZPAPN Skid Row : Skid Row Skid Row.418 S: 418 7: PRE - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 7.00+, 2.0+, 2.71+, 2.17+ The Skid Row . Its . Skid Row is a wof . . It is a fast quickly spreading on cSkid Row , tunnelling the it uses. mapping utilities not show any be assigned to the , as sby the DOS not be the Skid Row , it for any reason. m418 of the c512 +in the 7. The @and in the DOS not be . No in the . The Skid Row is a full , and the are read into It is if Skid Row of Skid Row are: Skid Row.432: , Skid Row.432 is Row is a 432 of the Skid Row . Frequent PZPAPN Skism : Skism S: 1,992 7: ONE - ], NAV, 2.17+, The Skism in the is a Skism look for an yin the second gthe Q's root G. If an is not e, the continue reading down through the Gstructure looking for , Skism yit, c1,992 +of the host be no 5to the unless it was smaller 1,992 +, in case it "1,992 . The @and not be Skism has completed b, it the to the DOS prompt. The not function. Skism :the in the "The man who brought you" "622, Skism One, Captain" "Trips, and Sub-Zero now" "shanks you again, "his latest..." "Skism "Get a late pass!" "* *. It is if Skism corrupting the of Skism Angel Dust 1.0: on the Skism one . bin the if more two sub Hories are present on the mthe c700 . The :the not "* *. X*.* \" "ANGEL DUST V1.0" kmay Skism hequivalent to the 's encryption has #slightly modified. Skism-808: on the Skism one . bin the if more two sub Hories are present on the mthe c808 . The :the not "Skism Rythem Stack -808." "Smart Kids Into Sick Methods" "Dont alter 7into your own strain, faggit." "HR/SSS NYCity, is the fifth of many, many more "You sissys "* *. X*.*" On the last Friday of any month, the attempt to destroy all ain the May, PZPAPN Skull : Skull Necro <; graphic S: 666 7: PNCK - , NAV 3.05 9503+, The Skull, or Necro, , and is gthe State of Pennsylvania in the . Skull is a wof . .. It "drop" a second , the Skull &under . Since the Skull s, it is listed as a rather as part of the base Skull the Skull Y, the Skull yone . in the If it cannot find a . y, it instead "drop" the Skull an . the Skull rof 666 at the end of the b. The @and in the DOS not be . The in the Skull "PATH=" The Skull Pn't do and drop the Skull &. The Skull it is of Skull are: Skull X: Skull Xis the is dropped by the Skull tby the Skull Y, the Skull yone . in the c466 the host . The Skull Oa graphic "skull" on the "You cant Its already dead!" in the 7. The is un in the Skull : Pennsylvania, USA PZPAPN Skynet : Skynet output slowed; China S: 1,448 - 1,462 7: PRhE - 12.2 9503+, 7.00+, 2.17+ The Skynet gChina in . It is a wof . disrupts operation. cSkynet Y, the Skynet at the top of &the ), not moving ~12's , as sby the DOS Bby 1,664 nby the the Skynet , it rof 1,448 to 1,462 at the end of the b. The @and in the DOS not be . The &can be in the 7in all the Skynet , the d" out to the "Terminator Don't be afraid. I am a very kind You mdo many works today. let your computer slow down. ma nice day, Goodbye. Press a key to continue. . ." a key is pressed, it Othe at the top of the , followed by the output Nin single lines: "*** Terminator I *** Created by Sky Net in Chung-Li." Nat the end of the output, as well as at the end of all output Y. In cases, it in the loss of of the output data gthe 'the Skynet noticeably slow output, and unexpected kmay of Skynet are: Skynet.1809: gFrance in , Skynet.1809 is a 1,809 . It xeither the sby the en ment /SPEC variable, or a . or . by 1,809 usually 1,809 to 1,849 in the case of very small a, the rmay be as much as 6,000 +. In either case, the at the end of the b. The @and the DOS the @and The in the 7in all "ENCULATOR III" /SPEC=" "SMARTCHK.*" "CHKLIST.*" "IRUS\ENCULATO" "DESTI13" : France PZPAPN Slayer : Slayer Brain Slayer, Slayer, Yankee Doodle Dropper, VBasic 2 I: March, j; long Maccesses; Maccesses to unexpected S: 5,120 7: PNA - ], NAV, The Slayer es was Iin March, group of =ly consists of five were gdifferent locations at the same . All of the of . /and . do not &is a generic description of the es in Specifics for are listed under " " at the end of entry. In cases, the difference between the is a few a Slayer Y, it yall . /and . in the the ly, depending on the , it may Qs as well. a Slayer between 5,120 and 5,135 at the end of the b. The @and in the not be of Slayer es include long Maccesses , and possibly accesses to unexpected Qs. The order of the cin the At least one member of ^, Slayer-E or Yankee Doodle Dropper, carries the Yankee Doodle later release on Yankee Doodle is the TP45VIR Members of the Slayer ^are: Slayer-A: Slayer-A yup to nine in a the root G, on the addition to on the Slayer-B: to Slayer-A, in the C: Qroot Gin addition to those on the Qand Slayer-C: to Slayer-A and Slayer-B, Slayer-C all on the Qand all on the C: Q. The can be ein samples of Slayer-C: "KEYB*. /KEYB*. XBASRUN BRUN COBRUN NET$OS *. "IBMBIO. "IBMDOS. .*.* .. \ .. *. "Access denied." Slayer-D: Slayer-D is to Slayer-C, the major difference while it accesses the C: Y, it on the C: Qunless the gC:. The Slayer-C Slayer-E: Slayer-E is as the Yankee Doodle Dropper. Y, it the on the Qand G, and ya few on the C: period has elapsed since the release the Yankee Doodle onto the ing in an active Yankee Doodle If the successfully removes Yankee Doodle, but Pn't remove the Slayer-E v, Yankee Doodle promptly re ythe gthe Slayer-E remain. be in the public domain. PZPAPN Sleepwalker : Sleepwalker 3to 10:47a Australia S: 1,268 - 1,282 7: PRhCK - , NAV 3.05+, 12.2 9503+, {3.0+, 1.05 9503+ The Sleepwalker , and is Australia. Sleepwalker is a cSleepwalker at the top of &the ), hooking }1C and 21. , as sby the DOS Bby 1,552 ~12's #moved. the Sleepwalker , it rof 1,268 to 1,282 at the end of the b. The @in the DOS not be but the to "10:47a". The in the Slime "STAC" "Sleepwalker. (c) OPTUS It is what Sleepwalker PZPAPN Slime : Slime ARCV-773 I: March, ; DOS England S: 773 7: PRhCK - , NAV 3.05+, p2.10+, {3.0+, 1.05 9503+ The Slime, or ARCV-773, in March, , and is gEngland. Slime is a semi- cSlime Y, the Slime at the top of &the ), hooking ~21. and , as sby the DOS Bby 2,048 ~12's #moved. the Slime , it for any reason. of 773 be hidden the is in . The Slime at the end . The @and in the DOS not be . The are in the Slime "[Slime] By Apache Warrior, ARCV Pres." "Sliming around your PC, I go make a sticky MESS over your ly, the can be at the end of all "4Qu2u" the Slime , the DOS detect Uon all PZPAPN Slovak : Slovak Slovak 2.00, Slovakia I: May, Czechoslovakia S: 1,673 - 1,771 7: PNE - , NAV, {3.0+ The Slovak, Slovak 2.00 or Slovakia, Czechoslovakia in May, . During May, of four different es were in the Slovak ^. Slovak 2.00 entry, initial listed &under . All of the es in group are polymorphic the Slovak 2.00 Y, the may yone . in the Pnot always a. The always yan . Gwhere the Yis not the G, and is on the path. At , the yone . in the the Slovak 2.00 rof 1,673 to 1,771 at the end of the b. As all of the Slovak es, the Slovak 2.00 T, and no in the . The @and in the DOS not be a Slovak 2.00 Y, the requiring the in the word "SLOVAK": "SLOVAKIA 2.00 (c) by ??. All Rights Reserved. Greetings gBratislava, SLOVAKIA. the word SLOVAKIA:" If the starts to a word SLOVAKIA, the Othe cleared the presses escape as requested: the word SLOVAKIA, not CZECH, YUGOSLAVIA, or SLOVENIA!! Press Esc." s the word SLOVAKIA, the One in the "PATH=*. Slovak 2.00 Pn't to do Oits requiring a response. of Slovak are: Slovak 1.00: An earlier of Slovak, ainstead of . , adding 1,352 to 1,603 +to the end of the x. The Nis much simplier, still requiring the word SLOVAKIA: "Greeting gBratislava, SLOVAKIA. the word SLOVAKIA:" : Czechoslovakia May, Slovak 2.02: A later of Slovak 2.00, , adding 1,969 to 2,091 +to the x. The Nby the to Slovak 2.00, the exception the number be 2.02. : Czechoslovakia May, Slovak 3.00: A later of Slovak 2.02, rof 2,051 to 2,177 at the end of the b. The to Slovak 2.02, the exception number is now 3.00. : Czechoslovakia May, Slovak-4: An earlier of Slovak, is very to the Slovak 1.00 Pnot Oany rof 1,363 to 1,587 at the end of the b. It is slighly polymorphic. : Czechoslovakia Slovak-4B: A later of the Slovak-4 , Slovak-4B xone . of 2,586 to 2,810 at the end of the b. The @and in the DOS not be . The s be N, requiring the the word "Slovakia": "SLOVAKIA 4.00 (c) by ??" "ALL Rights Reserved." "Greetings gBratislava, SLOVAKIA." the word SLOVAKIA: Typing the word Slovakia in the ed to the DOS prompt. : Czechoslovakia May, PZPAPN : Slow Slowdown, Zero I: May, Australia S: 1,701 7: PRsA - , NAV, {3.0+ : CleanUp, NAV, or The Slow Iin Australia in May . It is a generic X, and overlay .is not The Yon a , the as a low TSR, taking up 1,984 nby the Later, as tby the Slow . While the Slow 7is actually 1,701 rby more amount. by 1,721 at the $of the by 1,716 to 1,728 at the end of the In the process of a, the may hang the , causing the mto re The Slow on the It is what else the Slow of Slow are: Slow II: A minor of the Slow adds 1,721 +to the . x, and 1,716 to 1,730 +to . . The at the $of . the end of . usually not function ing in frequent Slow III: on the Slow II , Slow III is very no longer hang the March, Slow IV: on the Slow III , Slow IV is very : Australia March, See: PZPAPN : Slub S: 1,024 7: PRhCK - 12.2 9503+, The Slub . Its . Slub is a wof . cSlub at the top of &the DOS ), not moving ~12's , as sby the DOS Bby 1,024 nby the , the ytwo . in the the Slub , it yup to four . in the rof 1,024 the at the end of the b. The and in the DOS the @and . The in the 7in all Slub "c:\autoexec.bat c:\slubdestr.n23" "*.com" PZPAPN Sluknov : Sluknov S: 867 - 875 7: PRhCK - 12.2 9503+, The Sluknov . Its . Sluknov is a of . cSluknov Y, the Sluknov at the top of &the ), not moving ~12's , as sby the DOS Bby 1,728 nby the , the Sluknov rof 867 to 875 at the end of the b. The @and in the DOS not be . No in the It is what Sluknov PZPAPN Small ARCV : Small ARCV England S: 236 7: PNCK - ], NAV, {3.0+ The Small ARCV gEngland in Small ARCV is a wof . .. It Pn't to do the Small ARCV yone . in the rof 236 the at the end of the b. The and not be . The can be in the 7in all Small ARCV "[SmallARCV] Apache Warrior. *.com" PZPAPN Small : Small England S: 349 7: PNE - NAV, 12.2 9503+, The Small gEngland in Small Xis a wof . Pn't to do the Small yone . in the rof 349 the at the end of the b. The and not be . The can be in the 7in all Small "*.exe [Small X] Apache Warrior." PZPAPN Small-38 : Small-38 and data fail to Canada S: 38 7: ONAK - & Data , NAV 3.05 9503+, The Small-38 gWallace Hale of Canada. Source gMr. Hale was , and indicates he wrote it in response to the Mini-45 in May, is not believed to be in the public domain, and is considered a research . It is a and data Small-38 is Y, the yall in the G. The not care if the bis an execu or a data b. It yany bit encounters. the runless the less +, in case the +. The @and in the DOS to the @and Small-38 has finished uall the ain the G, the be hung in a search loop on the G. The need to be re (ed to get out of the loop. and data Small-38 are permanently damaged, having had the should be replaced a clean backup copy. PZPAPN Small-115 : Small-115 [failure S: 115 7: PNCK - , NAV, 12.2 9503+, The Small-115 , its . Small-115 is a wof . the Small-115 yall of the . in the G. The ed to the DOS prompt. the Small-115 rof 115 at the end of the b. The @and in the DOS to the @and . One in the in all Small-115 "*.com" Small-115 Pn't do PZPAPN Small-145 : Small-145 S: 145 7: PRxCK - , NAV, The Small-145 , its . Small-145 is a wof . cSmall-145 in a "hole" in low al , hooking ~21. , as sby the DOS not be the Small-145 , it rof 145 at the $of the b. The @and in the DOS to the @and in the 7in Small-145 Small-145 Pn't do PZPAPN Small-178 : Small-178 S: 178 7: PRxCK - , NAV, The Small-178 , and is . Small-178 is a wof . cSmall-178 in a "hole" in low al , hooking ~21. , as sby the DOS not be the Small-178 , it rof 178 at the end of the b. The in the DOS to the @and . No in the 7in Small-178 Small-178 Pn't do PZPAPN Smaug : Smaug S: 349 7: PNC - NAV 3.05+, 1.05+ The Smaug . Its . Smaug is a wof . , but not the Smaug yone . in the rof 349 the at the end of the b. The and in the DOS not be . The in the 7in all Smaug /MAND.*. "I$ W PZPAPN Smiley : Smiley Smiley face ASCII character bouncing around S: 1,987 - 1,994 7: PRfCK - , NAV, The Smiley . Its . Smiley is a , but its vmechanism is w. The portion is used for the effect. the Smiley Y, the Smiley yone . bin the Pnot Y. For example, if it encounters a very small . bin the Gas it searchs for an b, it typically not the Smiley rof 1,987 to 1,994 +. The the end of the b. The @and the DOS The can be in the Smiley "\*. X*.* \*. "yANKEE Doodle#and VACsin." "The red planet("InvasiOn" .in the Qroot the Smiley |a portion of the next (s the , the Smiley ~1C. a short period of has elasped, the Smiley produce effect of an ASCII smiley face character bounces around the It is if Smiley carries any damage potential. PZPAPN Socha : Socha S: 753 7: PRhCK - , NAV, The Socha . Its , or , are . Socha is a .. It should be noted Socha @has the year is 1981. The Socha is Y, the Socha at the top of &the , as sby the DOS Bby 3,008 nby the if the year of the @is 1981. Socha is , it are if the @'s year is 1981. In years, the in its =form Socha 753 @and in the DOS to the @and . The Socha at the end of . The can be enear the end of Socha "Socha" "C:\m_edit\me$.ovl com Socha Pnot to do PZPAPN : SNA Kid, SNA.393 Read- attribute set on . S: 393 7: PNCK - ]2.17+, 7.00+, p2.10+, 2.71+, 12.2 9503+, 7.00+, 2.71+, 2.17+ The SNA . Its . SNA is a wof . .. It is it may do cSNA yone . in the G. If G, it may tby the the SNA of 393 at the end of the The @and in the DOS to the @and . The Read- attribute be set on all a. The can be in the 7in all SNA "(c) littleKid!" "SNA*.* \ *.com" ly, the "SNA" can be estarting in the fourth ,of all PZPAPN Sofia Term : Sofia Term Sofia Term.839 S: 839 7: PRhCK - , NAV 3.05 9503+, 12.2 9503+, The Sofia Term, or Sofia Term.839, Its , or , are . Sofia Term is a wof . cSofia Term at the top of &the ), not moving ~12's , as sby the DOS Bby 3,072 nby the if it was not , it Sofia Term rof 839 at the end of the @and in the DOS list not be . The in the 7in all "Sofia by TERMINATOR" It is what Sofia Term may do of Sofia Term are: Sofia Term.887: , Sofia Term.887 is a later of the Sofia Term Its is 8,192 +, hooking copied. rof 887 +. In the case of be no ras the +of the slack (hex '00') area at the end of the . The in the DOS not be The same s in the can be PZPAPN Solano 2000 : Solano 2000 Dyslexia 2.01, Solano I: March, j; TSR; unusual California, S: 2,000 7: PRsC - , NAV, The Solano 2000 in Solano County, California in mid-March by Edward Winters. The by the Dyslexia V2.01, can be produced by negating null terminated in the 7. Using the same technique, what s to be the creation @of the , 08FEB90, can be produced. The zregarding the zproduced by negation of +was determined by Jay Parangalan of Solano County. The Solano 2000 is a generic w. The Yon the , the proceeds to yevery . can be manually identified by using a editor to view the +1168 through 1952 consist of '(' or 28h , such as DISKCOPY. is included on all DOS not run instead an "invalid Qspecification" is not in the 7, but is due to an Vcondition %induced due to the 's presence. The -induced ring MCopy was how the cspotted and eventually Solano is , it take up 3K of RAM The Solano 2000 Pno apparent damage, however it Pcheck the video buffer occasionally, and may transpose numbers ein certain locations. effect, however, was not \d on the author's in researching #reports instead of transposing numeric 6, the Solano 5color attributes on the it is active in of Solano 2000 are: Dyslexia 2.00: same as Solano 2000, except the 28h are now binary zeros. The attempted transposing of numeric 6in video slowed down. The creation s to be 22JAN90 instead of 08FEB90. Solano 2000-B: same as Solano 2000, except the 28h 3to DAh 6, and are +1168 through 1912 in Solano D: to the Solano, has had its encryption slightly in order to avoid detection. The 28h to 00h Subliminal 1.10: A very early of the Solano 2000 xany . 1,496 , the monitor to flicker. What is ring is to flash the "LOVE, REMEMBER?" in the lower left portion of the Ofor a subliminal duration. The actual amount of Os on the varies due to CPU speed differences. PZPAPN thing thing thing-658 j; SOME. bcreated; S: 658 7: PRhCK - , NAV, The thing Its , and , are thing is a wof . The thing Y, the thing at the top of &the , as sby the DOS Bby 672 ~12's #moved. nby the thing . At be created in the d SOME. (the extension be blank). of zero thing , it rof 658 at the $of the b. The in the thing v1.1" It is if the thing PZPAPN Sonik Youth : Sonik Youth S: 854 - 866 7: PNE - 12.2 9503+, The Sonik Youth . Its . Sonik Youth is a wof . the Sonik Youth yone . in the rof 854 to 866 +. 160 to the $of the the remainder of the %at the end of the b. The @and in the DOS , but not to the @and . The in the 7in all Sonik Youth "My m used to say" "You're the boy can enjoy invisibility" "The pleasure is everlasting" "Sonik Youth released 29 The in the X\* \" mhad the Sonik Youth present for may \the deleting . gthe PZPAPN Sorlec : Sorlec Sorlec 3 S: 597 7: PRhAK - , NAV, 12.2 9503+, The Sorlec, or Sorlec 3, . Its . Sorlec is a wof . /and . the Sorlec Y, the Sorlec at the top of &the nby the the Sorlec , it rof 597 the at the end of the b. The and in the DOS not be . The can be in the 7in all Sorlec "CLtV" "Sorlec 3 - Detonaton!" kfrequently the Sorlec of Sorlec are: Sorlec 4: , Sorlec 4 is a later of the Sorlec is 10,240 +, hooking ~21. It Y, adding 553 +to the . The @and in the DOS not be . The in the "MSDOS.SYS" "Sorlec 4" Sorlec 5: , Sorlec 5 is a non- of the Sorlec . It xall of the . ain the rof 535 at the end of the b. The @and the DOS not be . The in the "Sorlec 5 *. Sorlec 6: , Sorlec 6 is a of the Sorlec . It xall of the . and . ain the rof 565 at the end of the b. The @and the DOS not be . The in the "..1... ... 1 *. usually not function ing in a hang. PZPAPN Sorry : Sorry V1.3, Perfume-2 S: 731 7: PRhCK - ], NAV, : NAV, or The Sorry . Its comes German phrase in the : "Tut mir Leid !". on the Perfume gWest Germany, and identify it as Perfume or 4711. The the Sorry the in high both Cby 1,024 nby the immediately tby the , thus insuring on later immediately. , it yany . Y, increasing the by 731 +. The at the end of The Sorry :the "G-VIRUS V1.3" "Bitte gebe den G- 7ein" "Tut mir Leid !" It is what the Sorry See: Perfume PZPAPN Soupy 00c R 0PTc : Soupy j; TSR; S: 1,072 7: PRC - NAV, 12.2 9503+, {3.0+ The Soupy , and is . Soupy is a of . , but not .. In the case of advanced vs, it may |a portion of order to facilitate the mechanism in the the Soupy Y, the Soupy yone . in the G, as well as up @a counter in the the Soupy rof 1,072 at the end of the b. The @and in the DOS not be The Soupy the counter in the has r Red 11, indicating the 11th generation of the Red. At , the |a portion of of 736 +, hooking ~08. portion of the |ed, it Othe one at a every three minutes: "Unsuspecting , 12 o'clock!" "Get ready... 'cause... THERE'S A VIRUS IN YOUR SOUP!" gthe guys brought you Lythyum, Radyum, and VioLite comes:" "The Soupy , (k) VG Enterprises, 216/513/602/904/703" "By The Attitude Adjuster & AccuPunk!" "Hurry! Hire an Anti- Professional! rWallet Space!" "...hmmm, ya' know, I think I''ll halt now..." the last N, the halted or hung. The in the Soupy 7, as are the "[Soupy] The Attitude Adjuster & AccuPunk, VG 08/23/92 to 12/02/92" "Bad of Soupy are: Soupy-Death: on the Soupy adds 1,001 +to the . Like Soupy, it |s a 720 ,portion of its an 11th generation vhas Y. In the case of Soupy-Death, the hooks ~9. , Soupy-Death waits for the to press CTRL-ALT-DEL, and clear the in color. The in the Soupy-Death "Your PC has lapsed into a higher state of %..." "D E A T H!!" "Please, feel fto cold "as nothing has #damaged," "it was a near death" "Your PC should meditate more often," "cuz all the evil "flowing around neurospace" "we wouldn't want "to "a real" "D E A T H" "[Death] The Attitude Adjuster, VG, 12/02/92" "Bad PZPAPN : Sov Leningrad, Sov-545, Sov-602 S: See 7: PNCK - ], NAV, The Sov is actually two . Both es are ws of . .. Since characteristics are Ejointly as Sov, differences noted under a Sov Y, the Sov one . in the G. If G, it may t. Sov depends on of the es is present (see &). The at the end of the be no 5to the @and in the DOS It is if the Sov es do es are: Sov-545: One of the two Sov adds 545 to 599 +to the x. The ein the "PATH=" could be a crash, crash, crash" Sov-602: One of the two Sov adds 602 to 616 +to the x. The ein the "PATH=" See: Leningrad II PZPAPN Spanish : Spanish j; TSR; slow loads; cascading letters graphic effect Spain S: 2,930 7: PRsAK - , NAV, The Spanish Iin Spain in . Spanish is a generic is very to the Traceback II The Spanish is Y, Spanish as a low TSR of 7,632 }1C, 20, 21, and 27 nby the Y, the ythe Z, along in the G. Spanish by 2,930 +. The at the end of the be no in the @and in the DOS A symptom of a Spanish loads longer . The slowdown is due to the searching the Gfor a candi Spanish is for one hour, it cascading effect to the Traceback II . The 6on the fall to the bottom of the , until encounter an character. Unlike Traceback II, the is not restored by the , and the end up %hung. See: Traceback II PZPAPN Spanish Fools : Spanish Fools A28th j; TSR; k; copy, D, and 8s may fail Spain S: 1,417 7: PRsE - ], NAV, 12.2 9503+, The Spanish Fools, or A28th, , in the Zaragoza area of Spain. It is reported to be widespread in area. Spanish Fools is a wof . cSpanish Fools Y, the as a low TSR of 1,808 }21 and 28 nby the Spanish Fools has for several minutes, it start by 1,417 to 1,431 +. The at the end of be no 5in the in the Spanish Fools if it the A28th of any year. Upon sporatically interfer DOS internal 8s, such as COPY, RENAME, and DELETE. 8s may not function involve . , either not executing the 8, or hanging the PZPAPN Spanz : Spanz ?may dis S: 639 7: PNCK - , NAV, {3.0+, The Spanz . It ated in W. Spanz is a wof . Spanz is Y, Spanz search the Gto locate the , it by 639 +, the at the end of the b. If the in the Gwas 12:00a, it now blank a DIR 8is issued. can be identified by the s near the end of all "INFECTED! * SPANZ *" Spanz Pnot do PZPAPN Sparkle : Sparkle S: 705 7: PNCK - , NAV 3.05+, 12.2 9503+, 7.00+, 2.17+, 1.05 9503+ The Sparkle . Its . Sparkle is a wof . the Sparkle yone . in the rof 705 the at the end of the b. The and in the DOS not be . The in the Sparkle "Goodday.. I am da Sparkling Cyanide fear," "however, no need to vir.. 'coz" "I do NOT ma bomb like al those childish fears." "On da contrary.. I've set your @to tomorrow," "So all the fears mn't got a chance.." "Aren't you glad you ran me "SPARKLING CYANIDE (c) [VooDoo]" PZPAPN Sparse : Sparse Sparse-B TSR; . j; gradual S: 3,840 7: PRsCK - , NAV, The Sparse . Sparse is a wof . The Sparse is Y, the as a low TSR of 3,872 }21, D1 and D3 the Sparse is , it by 3,840 at the $of the b. The @and in the to the @and Sparse mthe ASCII 6"UK" as the second and third +of the execu ;the SHELLC, and ;the of the ed in the becoming . (If the "sparse.com", "sparse.com" ein all later as long as the Sparse slowly mless and less . The loss of [of an in an 64K block of . If the Zs 10 , in effect be no of Sparse are: Sparse-B: hequivalent to the Sparse differ. PZPAPN Split : Split Split.250 S: 250 7: PNCK - 12.2 9503+, 7.00+ The Split or Split.250 . Its . Split is a wof . the Split yone Qon the Q, providing Qis not the A: rof 250 at the end of the b. The @and in the DOS to the and . The in the 7in all ?D??" "SPLIT" It is what Split may do PZPAPN Split Second : Split Second Split Second.1135 kmay , Possibly Australia S: 1,135 7: PRaCK - 2.1.7+, NAV 3.05 9503+, 12.2 9503+, The Split Second or Split Second.1135 . Its it may be Australia. is a wof . .. A later Split Second.1149, was cSplit Second in a hole in al nby the are rof 1,135 at the end of the b. The @and in the DOS not be . The in the "3D, polymorphic, real , 50 frame per second DNA" "AKA Split Second" "Bi Australian Parasite [AIH]" [of an . usually in a hang. of Split Second are: Split Second.1149: is a , fast of the . It /and . .. It at the top of &the ), hooking , as sby the DOS Bby 1,392 /and . by 1,149 +while . by 1,149 to 1,168 +. . amay tby the , adding an 1,168 v. In the case of both . /and . the at the end of the b. The @and in the DOS not be . The in the "3D, polymorphic, real , 50 frames per second DNA" "AKA Split Second" "By D r [AIH]" PZPAPN Spring : Spring Spring-640 S: 640 - 655 7: PRhAK - , NAV 3.05, 12.2 9503+, The Spring, or Spring-640, . Its . Spring is a wof . /and . cSpring-640 at the top of ), not moving ~12's and , as sby the DOS Bby 768 Spring in the Spring , it rof 640 to 655 at the end of the b. The @and in the DOS not be . The in the in all Spring "699F" It is what Spring of Spring are: Spring-768: , Spring-768 s to be a later of the Spring . Its , and usage, is the same as for the . Spring-768 /and . for any reason. by 768 - 783 the end of the b. The @and in the DOS not be . The in the in all Spring-768 "Spring" PZPAPN Spyer : Spyer Faust, Spyer-B, Spyer-C TSR; . Taiwan S: 1,181 7: PRsA - , NAV, The Spyer in Taiwan. is a wof . /and . a. It Pnot The the Spyer the Spyer as a 1,760 low TSR. }21 and 22 nby the , the attempt to the next Y. If the is already the Spyer , the "hung. If the was not already t, Spyer yit and hang the always by 1,181 Spyer between 1,181 and 1,195 +. In both cases, the at the end of the always mthe dhex character sequence at the end of b: "CBDFD9DE848484". The Spyer , in its present form, is not expected to ever be a serious problem. Since it always kthe the next becoming , it is simply too obvious thing is wrong. of Spyer are: Spyer-B: to the Spyer, gthe NCSA collection . Its source is . Spyer-B is to Spyer, the exception hooks ~21. hang the Y, but usually not. the same hex character sequence at the end of the detect Spyer miss Spyer-C: Very to the Spyer, noteable differences. It was the NCSA collection and its or source is PZPAPN Squawk : Squawk I: March, S: 852 7: PRtAK - p, NAV, The Squawk in March, . Its . Squawk is a wof . /and . cSquawk Y, the Squawk at the top of &the ), moving ~12's , as measured by the DOS Bby 4,096 nby the Squawk is , it /and . rof 852 at the end of the b. The @and in the DOS not be One can be ein all Squawk "Nguyen Van Cuong - Siagon IBM comppany." It is what Squawk PZPAPN Squeaker : Squeaker .Exe Dd if S: 1,091 7: PRhAK - , NAV, The Squeaker Squeaker is a wof . /and . The Squeaker is Y, the at the top of &the , as sby the DOS Bby 1,136 ~12's moved. }1C and 21 nby the Squeaker is , it /and . Y. If Y, it Squeaker rof 1,091 at the end of the b. The in the DOS to the @and A symptom of a Squeaker , if the .Exe, Dd. The ed to the DOS prompt. It is if Squeaker :any damage potential. PZPAPN Squisher : Squisher Hunter S: 340 7: ORfCK - , NAV, 12.2 9503+, The Squisher or Hunter . It gthe . Squisher is a Unlike many Squisher function uses techniques to avoid detection, to the ZeroHunt cSquisher Y, the Squisher in a hole in low , hooking ~21. , as sby the DOS not be the Squisher , it at least 340 +of hex '00' are mthe inserted where the hex '00' 6were . In the case of a more +of hex '00' it may tmultiple r, and the @and in the DOS not be . No are in the Squisher Pn't to do PZPAPN : Staf Staff may fail to S: 2,083 7: PNCK - , NAV, The Staf . Its but creports of it were out of w. It the Staf Y, the Othe Demo Ver.: 1.1 - Handle care! By STAF (Tel.: (819) 595-0787) Generation #n Press any key to The "n" dthe pound sign be replaced generation number of the . The " the of the . in the has just t. If no bexisted in the Y, the u:" portion of the be replaced tall your ain the ma nice day!" Staf may fail to "VIRUS ERROR #nn - Aborting process." Staf rof 2,083 at the $of the b. The Pnot alter the @and in the Gat the Staf Pnot do PZPAPN Stahl : Stahl Stahlplatte Germany S: 750 7: PNCK - NAV, The Stahl, or Stahlplatte, . It gGermany. Stahl is a of . Stahl is Y, the yone . in the G. If the encounters a very small . it is searching for a y, it stop the Stahl rof 750 +. The at the of the . The @and in the DOS not be . Two ein all Stahl "STAHLPLA.TTE Ich bin da!" "*.com" It is what Stahl PZPAPN Stanco : Stanco j; unusual Eastern S: 7,529 7: PNCK - , NAV, 2.1.7+, {3.0+, 2.0+, 1.05 9503+ The Stanco . It is gEastern W. Stanco is a wof . the Stanco yone . in the rof 7,529 at the $of the . The @and in the DOS not be . The ;ed in the 7, but are not as the s in a PKLited form: "Insufficient DOS ... must be 3.2x or greater!" "Write Protect MFull ..." "Abort" the Stanco may receive unusual such as the Write Protect PZPAPN StarDot 600 : StarDot 600 <; spurious I/O ports S: 604 7: PNE - 1, NAV, The StarDot 600 . Its is a wof . StarDot 600 is Y, StarDot 600 yone . in the StarDot 600 by 604 to 616 at the end of the newly b. The @and in the not be StarDot 600 write random data to the default s, as well as send random data to the ports (37F to 3DF). See: StarDot 789 StarDot 801 PZPAPN StarDot 789 : StarDot 789 S: 789 - 805 7: PNAK - , NAV, The StarDot 789 . Its . StarDot 789 is a of . /and . StarDot 789 is search the Gfor an y. If one is e, it t. If an bis not e, the search the Gfor an y, and it if StarDot 789 rof 789 to 805 at the end of the be no 5in the in the DOS StarDot 789 may It is what StarDot 789 See: StarDot 600 StarDot 801 PZPAPN StarDot 801 : StarDot 801 Italian S: 801 7: PNAK - , NAV, The StarDot 801 . Its it is very to the Italian 803 , so it may gItaly. StarDot 801 is a wof . /and . . It StarDot 801 is Y, the look for an in the y. If an Pnot exist in the G, it look for an is selected, the yit, adding the 7to the end of the StarDot 801 by 804 to 817 @and in the not be StarDot 801 _13th is 1PM or later. At , it write random data to all Qs on the in reverse order (it starts at QZ:). kmay See: StarDot 600 StarDot 789 PZPAPN Stasi : Stasi Stasi-1728 I: March, ?seconds = 42; S: 1,728 - 1,742 7: PNE - NAV 3.05 9503+, The Stasi, or Stasi-1728, in March, . Its . Stasi is a wof . . It ities to the Wit the Stasi Y, the Stasi yone . in the rof 1,728 to 1,742 at the end of the The @and in the DOS not to be the seconds #set to 42. in the 7in Stasi The Stasi Othe "Stasi is watching you" destructive See: Wit PZPAPN Amse, Nops.B, Stelboo BSC; Qrs may fail to load into S: N/A 7: RhBX - & MBR : DOS SYS on K, F- M/MBR on The . It is a xthe ) and . It is in the public domain in North America. (ed for the at the top of &the , as sby the DOS Bby 4,096 , the ythe if it was not , it non-write protected Kare accessed. mthe moved to the last on the (.C may \difficulty loading Qr and management software into ing in operational difficulties access upper blocks, such as Windows. It is reported to cause problems 32-bit data access on is a full , hiding the von the Mand fore, it is important to be sure not before possibly K, as well as (ing Lbefore any attempt to dis ythe PZPAPN Sterculius : Sterculius Sterculius.280, Sterculius I S: 280 7: PRaCK - , NAV 3.05+, 12.2 9503+, 1.05 9503+ The Sterculius . Its . Sterculius is a wof . .. A later cSterculius in low al hooking ~21. sby the DOS not be the Sterculius , it rof 280 at the end of the b. The @and in the DOS not be . One in the 7in all "STERCULIUS" of Sterculius are: Sterculius.240: , Sterculius.240 is a 240 of the Sterculius are by 240 at the end of the The can be in the 7in all "STERCULIUS" Sterculius.440: as Sterculius II, rof 440 at the end of the b. The in the DOS to the @and . The can be the 7in all "STERCULIUS ][" PZPAPN Sticky : Sticky Multi-2, Nu Way I: May, S: 927 - 1,407 7: PRtAKX - X, Overlay, and p, NAV, 12.2 9503+, 2.17+, 1.05 9503+ The Sticky, or Multi-2, Iat several sites in the and Canada in May, . Sticky is a multi-partite xthe ) and all execu cSticky Y, the Sticky ythe writes a copy of its 7to Side 0, Cylinder 0, 2 and 3, and alters the 7. The Sticky Pnot , and not Later, gthe Sticky M, the Sticky top of &the 12's be moved. sby the DOS 3,072 nby Sticky in the Sticky , it execu rof 927 +. . by 1,133 to 1,407 +. In both cases, the at the end of the b. The @and in the DOS . Sticky is an , and no in the It is what Sticky PZPAPN StinkFoot : StinkFoot Stink crashes on 8086/8088 machines Republic of South Africa S: 1,254 7: PNC - , NAV, The StinkFoot Iin the Republic of South Africa in . It is a a, and Pnot StinkFoot is Y, the search the Qand Gfor an ywhose is at least 1,000 +. If such e, the yit. StinkFoot rof 1,254 +. 259 of the at the $of the the remaining 995 %at the end of the be no 5in the @and in a DOS StinkFoot Pnot do . It function on XT (8088- ) machines. of StinkFoot are: StinkFoot-1273: s referred to as Stink 2, StinkFoot-1273 is an . It adds 1,273 +to the . x, splitting the 7between the $and the end of the : Republic of South Africa StinkFoot-2B: A minor of the StinkFoot adds 1,254 +to the v. It , adding an 1,273 +to the March, PZPAPN Stone`90 : Stone`90 Polish 961, Stone-90 Poland S: 961 7: PNCK - , NAV, The Stone`90 , or Polish 961, is a wof . .. It was , and is gPoland. the Stone`90 Y, the look for one . on the Qand in the y. If one is e, the tit. The newly by 961 +, and mthe at the end of the The can be "Sorry, I`m INFECTED!" "I`m already NOT "(C) Stone`90" Stone`90 Pnot to do PZPAPN (, Donald Duck, Hawaii, Marijuana, New Zealand, Rostov, San Diego, Sex Revolution, Smithsonian, Deunis, -16, -AT Love, -Collor, -Mexican, Mutation _, 1988 BSC; TSR; ; RLL controller New Zealand S: N/A 7: BRtX - , NAV, : CleanUp, M ], NAV The creported in Wellington, New Zealand in early 1988. The t360KB 5-1/4" K, doing no overt damage. The wis extinct, however, and all are capable of uthe ) as well as may damage Gor FAT z. Most minor modifications, usually in what the a computer at the top of . The be moved, and ChkDsk indicate the computer as 2K less |ed. If the (was L, the attempt to ythe , if it was not During the (process, the The Nmore or less on a random basis. The most for the "Your computer is now "Your PC is now , it are accessed on the L, it moves the 0) to 11. The copies into 0. Since 11 is normally part of the Lroot Gon 360K 5.25" K, any Gentries be lost. s of DOS 11 as part of the in the M's FAT %corrupted. M, it copies the to side 0, cyl 0, 7. A copy of the placed at side 0, cyl 0, 1, the location of the . If the Mwas formatted software starts the , or Gon side 0, cyl 0 right the , the Mmay be corrupted as well. In order to dis , the must be powered off and , write- protected L. If is not done, the Kas soon as are dis are many can dis Kand Ms. To successfully use one of , follow the instructions To remove manually, the DOS SYS 8can be used on 5.25" 360K K. On the M, the must be copied back to side 0, cyl 0, can be performed Norton Utilities, or editors. Deunis : on the , Deunis is a gSpain in . The in the is now: s abras tu Cpu!" "(c) IMAN4" on the , PS- is a has to avoid detection. Unlike most members of the ^, PS- Pnot , and Pnot Oany ythe of both normal and high-density K, as well as the . In the case of the , the is moved to cylinder 0, side 0, 17. On low density K, the is moved to 11, while on high density Kit can be gNew Brunswick, Canada university. As of May, , no products detect can be just about in Rostov: Pnot . It :the : "Non- M" and "Replace and strike". Sex Revolution V1.1: -B. the "EXPORT OF SEX REVOLUTION ver. 1.1" Sex Revolution V2.0: to Sex Revolution V1.1, the has "EXPORT OF SEX REVOLUTION ver. 2.0" -16: The Pnot as the in the replaced binary zeros. On 5.25 inch 360K the not be saved by the . On 5.25 inch 1.2M K, the is saved at 17, part of the root G. The Side 0, Cyl 0, May, in May, differs in xthe of the DOS of the . It to the , moving the on 360K 5.25" 11. It Pnot ;typical , but ;the " near the $of the May, -A: Same as , but Pnot ythe is the and is now extinct. The ein the is: "Your computer is now . Legalize Marijuana". The "Legalize Marijuana" portion of the is not -AT Love: to the PS- moves the on 5.25 inch 360K 11, the last of the root G. On 1.2M 5.25 inch K, the be moved to 17, in the middle of the root G. The on the #moved to Side 0, Cyl 0, :the may be Your PC is now St NED in L May, -B: Same as controllers may \frequent typically is: "Your computer is now . Legalise Marijuana". The "Legalise Marijuana" may be in capital letters, or may be partially . It is not -C: same as , except removed. -Collor: to the gBrazil's main distinction is in the "Collor, um tiro basta!" "Call John" : Brazil -D: same as the exception can yhigh density 3.5" and 5.25" now emits a "beep" through the speaker N: "Your PC is now !" The "LEGALISE MARIJUANA!" can ein the emits a "beep" through the speaker N. The is: "Twoj PC jest teraz be!" The "LEGALISE MARIJUANA?" can the #modified to avoid detection by utilities. Since its , most utilities can now detect in the "Your PC is now 2" Or: "Donald Duck is a lie." The " 2" portion of the may be corrupted as well. -LM: on the Hly accessed read and write intent, usually ing in a hang. The location of the and the to the : Canada -Mexican: Iin Mexico in May, :the "NO VOTES FOR EL PRI". : Mexico, May Mutation: Mutation is a minor of the . Its major destinction Pnot Kunless the is accessed write-intent. It the same as the -NSD: in the Eastern United States, -NSD is a minor of the . Its major difference is to: "Non SYStEM dISc" and "LEGALISE MARIJUANA", the second usually be corrupted to "LEGALISE4". second is corrupted, all later the corrupted -NSD can yhigh density, 1.2M 5.25" K, moving the -NZ: gNew Zealand in has one slight difference. It not always save the xthe M. The ein the is: "YOUR PC IS NOW STONED!". See: Evil Empire Horse ( Swedish Disaster NoInt WXYC PZPAPN Storm-1163 : Storm-1163 Storm ?seconds = 62; TSR S: 1,163 7: PRsCK - , NAV, {3.0+ The Storm-1163 . Its . Storm-1163 is a wof . cStorm-1163 as a low TSR of 1,424 +, hooking the Storm-1163 , it rof 1,163 at the end of the b. The in the DOS to be un however, the non- Nseconds field #set to 62. One in the Storm-1163 It is what Storm-1163 PZPAPN Storyteller 00X P LPTX : Storyteller TSR; may run out of S: 3,184 - 3,196 7: PRsE - , NAV 3.05 9503+, 12.2 9503+, {3.0+, 7.00+, 2.17+ The Storyteller . Its . Storyteller is a wof . Pnot yvery small cStoryteller Y, the Storyteller as a low TSR of 3,568 }08, 16, 21, and FB nby the . The copy of so in the case of advanced vs, the eventually run out of the Storyteller , it rof 3,184 to 3,196 at the end of the b. The @and in the DOS to the @and . The in the 7in all Storyteller "STORYTELLER" , the Storyteller Othe in a box on the monitor: "Sitting on a grassy,beneath one of the window of the church,was a little girl. her head bent back she was gazing up at the sky and singing,while one of her little hands was to the a cloud hovered like a golden feather her head.So co- mpletely absorbed was she in watching the cloud to song or incantation seemed addressed, did not observe me I rose and went toward her.As I slowly approached the child,I could see by her forehead, the sunshine seemed like a globe of pearl,and especially by her complexion she was un 9ly lovely.Her eyes at one moment seemed blue_gray, at an violet,were shaded by long black lashes,curving backword in a most peculiar way,and matched in hue her eyebrows, and the trees tossed about her tender throat and were quivering in the sunlight.Gradully the features,especially the sensitive full-lipped mouth,grew upon me as I st- ood silently gazing. Here seemed to me a more perfect beauty had ever co- me to me in my loveliest dreams of bea- uty.Yet it was not her beauty so much as the look she gave me facinsted me , melted me in the 7, as are the "By : Theodore Watts-Dunton" "Sir . Press any key" PZPAPN Striker #1 : Striker #1 Striker, QD335 I: March, S: 461 7: PNC - , NAV, : CleanUp, or The Striker #1 in the Eastern March, is a of . Striker #1 is Y, the yone . cthirteen , and the body of the appended to the end of the show a rof 461 +in the and s are not can be easily identified as the "Striker #1" in the fourth through thirteenth all s near the end of Striker #1 Pnot to do PZPAPN Student-776 : Student-776 ?seconds = "62"; S: 776 7: PRhAK - NAV 3.05 9503+, 12.2 9503+, {3.0+ The Student-776 . Its . Student-776 is a wof . /and . cStudent-776 at the top of but &the ), not moving ~12's , as sby the DOS Bby 1,024 nby the , the Student-776 ythe the the Student-776 , it rof 776 at the end of the b. The @and in the DOS to be , but the seconds field #set to "62". The in the Student-776 "(C) Student It is what Student-776 PZPAPN Stupid-1355 : Stupid-1355 (failures S: 1,355 7: PNCK - NAV, The Stupid-1355 . Its . Stupid-1355 is a of . Stupid-1355 is Y, the yone . in the G, and hang . If .is in the G, it may t, the fail to the Stupid-1355 rof 1,355 the end of the be no 5to the @and in the DOS . One can be in the "*.BNL" PZPAPN Suicidal : Suicidal I: March, S: 305 7: PNCK - , NAV 3.05+, 1.05 9503+ The Suicidal in March, . Its . Suicidal is a .. It Pn't ypast the fifth . bin a the Suicidal Y, the Suicidal yone . in the 305 at the end of the The @and in the DOS not be The in the 7in all Suicidal "Suicidal! -/\-=> [Stingray/VIPER] < Suicidal Pn't to do PZPAPN Sunday : Sunday , 1989 TSR; execu ; FAT Washington (state), S: 1,636 7: PRsAT - X. & .OV? , NAV, : CleanUp, , NAV, or The Sunday Iby many s in the Seattle, Washington area in , 1989. on any Sunday, Oing the "Today is Sunday! Why do you work so All work and no play make you a dull boy! Come on! Let's go out and fun!" The Sunday s to #derived gthe , the in many respects. Damage to the or FAT has #reported number of of Sunday are: Sunday-B: to the Sunday activate on any day of the week due to an Vin the day of the week checking routine. The in the is never N, and no damage is done to the Sunday-C: to Sunday-B, never It has, however, #modified so it differs both the Sunday and Sunday-B es. h, it is the same as Sunday-B. Sunday.Satan: to the Sunday 's low TSR is 1,936 , hooking }08 and 21. It /and . Y. . by 1,636 at the $of the b. . by 1,636 to 1,650 at the end of the b. The in the DOS not be The in the in all "-Satan-" "* Satan *Carzy !! An piece of Satan "Written by Mad Satan in TAIWAN .\ 2.04 /" "= Mad Satan =" : Taiwan Sunday-UNAM: to the Sunday 's low TSR is 1,872 , hooking }08 and 21. It /and . Y. . by 1,636 at the $of the b. . by 1,636 to 1,650 at the end of the b. The in the DOS not be On Sundays, it Othe accompanied a strange sound on the speaker: "El talento no impide tener manias, pero las hace mas no Saludos porros de la UNAM" and sound are repeated every 12 seconds. The in the , as is the : Mexico City, Mexico See: Carfield Sunday-2 PZPAPN Sunday-2 : Sunday-2 Datarape 2.2 Canada S: 2,877 7: PRhAK - , NAV, The Sunday-2 in Canada in . Sunday-2 is a generic w. It X, and overlay on the and Sunday The Sunday-2 is Y, Sunday-2 at the top of , but the sby the DOS Cby 5,888 }21, 22, and 27 nby Sunday-2. At Sunday-2 Sunday-2 is , it X, and overlay for any reason. Sunday-2 at the end of a. . rof 2,877 +. . rof 2,877 to 2,891 not see the ain the DOS Sunday-2 is as the adjusts the it is Sunday-2 on Sundays Y. The N, and the be hung: "It's Sunday. Why are you working? Take the day off compliments of RABID" cannot be seen in aas the The Sunday-2 7to perform a format on Sunday, however 7has several bugs and is not functional. Sunday-2 notice %detected by the DOS Sunday-2 is as the Gand to match checked by the DOS of Sunday-2 are: Sunday-2B: hequivalent to the is a minor See: Basilisk Sunday PZPAPN Sundevil : Sundevil j; beeping and Canada S: 691 7: PRfCK - 12.2 9503+, {3.0+ The Sundevil . Its . Sundevil is a wof . cSundevil Y, the Sundevil at 9000: hooking ~21. sby the DOS not be the Sundevil , it for any reason. rof 691 at the end of the b. The in the DOS not be . The in the Sundevil in all is no America." is no Democracy." IBM, ITT, and AT&T." is dedicated to all #busted" "for computer hacking activities." "The SunDevil by Crypt Keeper" "[Sundevil]" The Nby the on the O, accompanied by beeping. kmay of Sundevil are: Sundevil.762: , Sundevil.762 is a 762 of the Sundevil . It adds 762 +to the . x. The at the end of the b. The in the 7in all is no America." is no Democracy." IBM, ITT, and AT&T." "Sundevil ][ by Crypt Keeper [RoT] -Reign of T "[SUNDEVIL 2]" "Insert QA: and press any key." PZPAPN Suriv 1.01 : Suriv 1.01 1st, Israeli, Suriv01, Suriv A Extinct , 1987 TSR; . lock on Israel S: 897 7: PRsC - , NAV, ], or The Suriv 1.01 is a w. It activate on tby running an band Y. On , it Othe "APRIL 1ST HA HA HA YOU HAVE A VIRUS". The lock up, requiring it to be powered off and back on. The "sURIV 1.01" can be ein the See: Suriv 4.02 PZPAPN Suriv 2.01 : Suriv 2.01 1st-B, Israeli, Suriv02, Suriv A Extinct I: 1987 TSR; . lock on Israel S: 1,488 7: PRsE - , NAV, ], or The Suriv 2.01 is a w. It activate on tby running an Oing the same as Suriv 1.01 and locking up the . The cause a lockup, , 1 hour on any day on default @of 01-01-80 is used. The ythe of Suriv 2.01 are: Suriv 2.01B: gFrance in on the Suriv 2.01 Y, it |a 1,808 ,TSR, hooking ~21. rof 1,488 at the $of the . The @and in the DOS not be . The can be in the 7in all "sURIV 2.01M" "TMP$$TMP. may be the not be consistent in all : France PZPAPN Suriv 3.00 : Suriv 3.00 Israeli, Suriv03, Suriv B Extinct I: 1988 TSR; . X, & .SYS j; black window; slowdown Israel S: 1,813 ( a) & 1,808 ( 7: PRsA - , NAV, : CleanUp, ], or May be a of the . The "sUMsDos" has 3to "sURIV 3.00". The Suriv 3.00 Friday the 13th is run or if it is already present in , however aare not Dd due to a bug in the on Friday the 13th, for 30 seconds, an area of the is turned into a "black window" and a wasting loop is overlay, . SYS, and execu Xand . Pnot See: PZPAPN Suriv 4.02 : Suriv 4.02 j; TSR; to DOS prompt; (failures; Ireland S: 897 7: PRsC - , NAV, The Suriv 4.02 gIreland in Suriv 4.02 is a wof . a, but not .. It The Suriv 4.02 is Y, the as a low TSR. Suriv 4.02 is , it Y. If Y, it by 897 at the $of the The can be ein all "Suriv 4.02" /MAND "$$TMP. /APRIL 1ST" The , "Suriv 4.02", is the vmarker the uses to determine if the bis already t. It in the fourth through thirteenth Suriv 4.02 . If the Zthem, or Za non , the to the DOS prompt. in a (failure. Suriv 4.02 1st, at the "APRIL 1ST" followed by blanks the next goes . A , requiring the to re (the See: Suriv 1.01 PZPAPN Surrender : Surrender S: 513 7: PRaAK - , NAV, The Surrender , and has an . Surrender is a wof . and . . It .if it is The the Surrender in the DOS buffers and graphics card be no sby the DOS Hly by the Surrender is , it /and . rof 513 at the end of the be no 5to the @and in the DOS The in the Surrender all "Jet" "Jews NEVER surrender!" Surrender Pn't to do PZPAPN Susan : Susan [failure; Dd; TSR; ?set to "62" Mexico S: 571 7: ORsE - , NAV, 1.05+, 2.17+, {3.0+ The Susan gMexico in . Susan is a wof . on Sundays, and in a very limited manner. cSusan Y, the Susan as a low TSR of 832 nby Susan in Susan is , and the issues a DOS DIR 8line arguments (ie. simply "DIR" at the DOS prompt) on any Sunday, the ythe in the G. . not be re t, and the Pnot spread past the in any Susan mthe c571 by the Susan 7. The @and in the DOS to be un , but the seconds field #set to "62". The in the 7in all Susan "Susan" "*.* *. "DIR" "Bad fifteen vs of the Susan activate. At , the start deleting all of the ain the PZPAPN SVC 3.1 : SVC 3.1 SVC V3.1 I: May, S: 1,064 7: PRhAK - ], NAV, The SVC 3.1 Win May, . It is gthe . SVC 3.1 is a of . /and . The SVC 3.1 is Y, it at the top of but &the , as measured by the DOS 1,088 ~12's not be moved. nby the SVC 3.1 is , it /and . Y. If Y, it 1,064 at the end of the b. The @and in the DOS not be SVC 3.1 ;the "(c) by SVC,Vers. 3.1" SVC 3.1 is an earlier of the 1689 . Unlike 1689, it Pnot hang the the next becoming . It Pnot hide the of SVC 3.1 are: SVC 3.1-CHR: , SVC 3.1-CHR is a modified of the SVC 3.1 Like the adds 1,064 to the . /and . are Y. The at the end of a. The can be in the 7in SVC 3.1-CHR "(C) by CHR,Sverdlovsk" is not detected by all can detect the SVC 3.1 See: SVC 4.0 SVC 5.0 SVC 6.0 SVC-2936 SVC.3241 PZPAPN SVC 4.0 : SVC 4.0 1689, Off , SVC V4.0, SVC 4.0-1740 S: 1,689 7: PRA - ], NAV, The SVC 4.0 . It is is not a very viable both . /and . SVC 4.0 is in the in- interpreter. , the ythe next /or . hang by 1,689 alarger 1,689 +, the hide the rif the is already in smaller 1,689 indicate a rin the DOS . In all cases, the at the end of hang , it is not a very viable , and should not be considered a threat in its =state. of SVC 4.0 are: SVC 4.0-1740: A 1,740 of SVC 4.0, the bug fixed in the k. It Pnot yvery small . a. The DOS Uon all . The "(c) by SVC,Vers. 4.0" See: SVC 3.1 SVC 5.0 SVC 6.0 SVC-2936 SVC.3241 PZPAPN SVC 5.0 : SVC 5.0 3103, SVC V5.0 Israel S: 3,103 7: PRhAK - , NAV, The SVC 5.0, or 3103, in Israel in . It is believed to ated in the 3103 is a wof . , as well as overlay a. It is a The SVC 5.0 is Y, the at the top of &the , as sby the DOS Cby 3,120 }01, 03, 08, and 21 nby the , SVC 5.0 /and . Y. SVC 5.0 is a , and , the of 3,103 not be . Likewise, to view SVC 5.0 in a "clean" copy of the %made . In reality, the by 3,103 at the end of the b. The can be in the "(c) by SVC, Vers. 5.0" SVC 5.0 checks see if the is "AIDSTEST.C". If the has add a copyright the reads: "-* -91 by SVC, Vers 6.0 *- SVC 5.0 may cause multiple open at the same of SVC 5.0 are: SVC 5.0B: hequivalent to the SVC 5.0, minor SVC 5.0C: hequivalent to the SVC 5.0, minor 4. It "(c) by SVC,Vers. 5.0" SVC 5.0D: on the SVC 5.0 are two major differences c, the hooks }13 and 21, instead of 01, 03, 08, and 21. Second, it Pn't ;the typical copyright notice ein the SVC 5.0 See: SVC 3.1 SVC 4.0 SVC 6.0 SVC-2936 SVC.3241 PZPAPN SVC 6.0 : SVC 6.0 S: 4,644 7: PRhAX - p, NAV, 12.2 9503+, The SVC 6.0 Iin the . It is gthe . SVC 6.0 is a /and . . It Pnot The SVC 6.0 is Y, the at the top of &the , as measured by the DOS by 4,672 }08 and 21 nby the and ~12's #moved. The SVC 6.0 has actually al 68K of uses the 4,672 If the cSVC 6.0 gthe M, the tthe by altering three +. The written to the Mstarting at side 0, cylinder 0, 2. The three +cause the to be gthe SVC 6.0 is , it /and . rof 4,644 be hidden by the it is SVC 6.0 at the end of be no 5in the @and in the DOS SVC 6.0 is a true are read into , it "dis x" them, so a clean copy be in As such, if SVC 6.0 is utilities may not be able to detect the in the Three be able to be if the is not "(c) -91 by SVC, Vers. 6.0" "AIDSTEST.C" "SVC 6.0" It is what SVC 6.0 of SVC 6.0 are: SVC 6.0-4677: A later of SVC 6.0, is 4,704 +. Like the SVC 6.0, it hooks }08 and 21. , SVC 6.0-4677 /and . for any reason. rof 4,677 at the end of the b. The ris not SVC 6.0-4677 is . The @and in the DOS not be . The in the SVC 6.0-4677 "/* (c) -91 by Moscow SVC, Vers. 6.0 */" "AIDSTEST.C" "SVC 6.0" Like SVC 6.0, SVC 6.0-4677 is a full SVC 6.01: A later of SVC 6.0, is 4,688 +. Like the SVC 6.0, it hooks }08 and 21. , SVC 6.01 /and . for any reason. rof 4,661 at the end of the b. The ris not SVC 6.01 is The @and in the DOS not be . The in the SVC 6.01 "/* (c) -91 by Moscow SVC, Vers. 6.0 */" "AIDSTEST. "Moscow SVC 6.01" Like SVC 6.0, SVC 6.01 is a full SVC 6.01-B: to the SVC 6.01 is a minor . The "/* (c) -91 by Moscow SVC, Vers. 6.0 */" "AIDSTEST. "Moscow SVC 6.01" See: SVC 3.1 SVC 4.0 SVC 5.0 SVC-2936 SVC.3241 PZPAPN SVC-2936 : SVC-2936 S: 2,936 7: PRhA - , NAV, 12.2 9503+, {3.0+ The SVC-2936 . Its . SVC-2936 is a wof . /and . , but not The SVC-2936 is Y, it at the top of but &the , as measured by the DOS 2,960 ~12's not be moved. 01, 03, 08, 13, and 21 nby the SVC-2936 is , it /and . by 2,936 at the end of the b. The r, however, not be SVC-2936 is as the , or Gand FAT entries, are read into The @and in the DOS not be SVC-2936 ;the at the very end of all it can be seen in is not "5Fr" It is what SVC-2936 See: SVC 3.1 SVC 4.0 SVC 5.0 SVC 6.0 SVC.3241 PZPAPN SVC.3241 : SVC.3241 ?seconds set to "58"; S: 3,241 7: PRhA - NAV 3.05 9503+, 12.2 9503+, The SVC.3241 . Its . SVC.3241 is a wof . /and . , but not .. It is a , hiding the well as dis are read into The SVC.3241 is Y, it at the top of but &the , as measured by the DOS 3,264 ~12's not be moved. 01, 03, 08, 13, and 21 nby the SVC.3241 is , it /and . by 3,241 at the end of the b. The r, however, not be SVC.3241 is as the , or Gand FAT entries, are read into The @and in the DOS to be un , but the seconds field set to "58". It is what SVC.3241 See: SVC 3.1 SVC 4.0 SVC 5.0 SVC 6.0 SVC-2936 PZPAPN Sverdlov : Sverdlov Hymn-2 S: 1,962 7: PRhAK - ], NAV, The Sverdlov believed to ated in the . Sverdlov is a wof . /and . a, and The the Sverdlov Y, the at the top &the DOS ). 4,080 #reserved, and the is not by the . The DOS indicate is 4,080 +less expected. if it was not already Sverdlov is , any . /or . bover 2K in tif it is for any reason. rof 1,962 1,962 to 1,977 . In both cases, the at the end of It is if Sverdlov of Sverdlov are: Sverdlov-B: Very to the Sverdlov has one basic 5in behavior. It /and . aover 3K in before wise, the 7is very to avoid detection, and may identify it as Hymn-2. PZPAPN : SVir Endangered Poland S: 512 7: PNE - , NAV, The SVir in Poland early in The had a fatal flaw in its prevented it gexecuting. In , a sample was obtained gFridrik Skulason second sample, identified as SVir-B, is a a. A third the SVir-B Y, the yone . between 516 and 526 7appended to the end of the b. If the could not find an . y, it leave the Q"spinning" as it be in an endless loop looking for a Interestingly enough, the A: ?in the 3to the @and SVir, at least in the three Pnot do malicious, it simply of SVir are: SVir-0: A is very to SVir-B. the yeither 1 or 2 ain the in a hang. SVir-A: The gPoland in early not SVir-B: A has the bug in SVir-A fixed so PZPAPN : Swap Falling Letters (, Israeli , 1989 Graphic O; BSC (floppy ); TSR; bad cluster Israel S: N/A 7: RsF - Floppy M, CleanUp, ], or DOS SYS The Swap , or Israeli , was creported in 1989. is a xfloppies. The floppy's it is accessed. One bad cluster be written on track 39, 6 and 7 the head unspecified. If track 39, 6 and 7, are not empty, the , it uses 2K or RAM. The actual of the 7is 740 The Swap for 10 minutes. A cascading effect of letters and 6on the monitor is seen, to the cascading effect of the Cascade and Traceback The d the Swap because the had the dphrase +00B7-00E4 on track 39, "The Swapping- . (C) , 1989 by the CIA" However, phrase is not freshly tby the Swap the Swap can be easily identified by looking at the editor, such as Norton Utilities. The normally at the end of the not be , instead the start of the 7is present. The remainder of the track 39, 6 and 7. PZPAPN Swedish Boys : Swedish Boys Data Molester, Headache, Swedish, Why Windows Sweden S: 457, 459, or 538 +(depending on present) 7: PNCK - , NAV, {3.0+ Swedish Boys is a group of initially three Sweden in es are all ws of . .. Depending on the present, may be destructive. The Swedish Boys es are: Data Molester: The Data Molester is a wof . yall . in the rof 538 the at the end of the b. The @and in the DOS . The in the , and are not ":+:+ The Data Molester V1.00 +:+:" "The Vile One / The BetaBoys Development Corporation." Data Molester the C: root Gand : Sweden Headache: The Headache is a wof . .. It yone . in the rof 459 at the end of the b. The and to the . The can be in the 7in all "-+( Severe Head-Ache V2.oo )+-" "Created by The Vile One & MaZ" "Copyright (c) The BetaBoys Development Corp" "-Sweden 04/19/92" : Sweden Swedish Boys.Headache.441: The Swedish Boys.Headache.441 wof . .. It yone . in the rof 441 at the end of the The @and to the @and . The can be in the 7in all "Severe Head-Ache V2.oo )+-" "Created by The Vile One & MaZ" "Copyright (c) The BetaBoys Development Corp" "-Sweden 04/19/92" : Sweden Why Windows: The Why Windows is a wof . yone . in the 459 at the end of the . The @and in the DOS to the and . The can be ein the 7in all Why Windows "*.com" "C:\ 8.Com C:\Autoexec.Bat C:\Config.Sys" "\windows\win.com" "Why Windows (c) MaZ / BetaBoys B.B" Why Windows is a destructive . It attempt to Dthe b\windows\win.com. ly, on _23rd of any year it attempt to C:\Autoexec.Bat. On _24th of any year, it attempt to DC:\Config.Sys. Lastly, on _25th of any year it attempt to the C: Qroot Gand : Sweden PZPAPN Swedish Disaster : Swedish Disaster BSC; Sweden S: N/A 7: BRhX - ], NAV, The Swedish Disaster was s to be gSweden. It is a floppy and the Lwhose the Swedish Disaster , the moved to side 0, cylinder 0, 6. The at the top of but &the by 2,048 be 6,944 +less what is expected by the ~12's moved by the Swedish Disaster is , the all non-write protected are accessed on the . On 360K 5.25" K, the #moved to is normally a part of the root means if the entries in be lost. The can be eat the end of the K, as well as in the "The Swedish Disaster" the Swedish Disaster can be dis powering off the and re (ing ga write-protected, L. The DOS SYS 8can be used to replace the K. For Ms, the remove remain in the See: PZPAPN Swiss 143 : Swiss 143 Switzerland S: 143 7: PNCK - NAV, The Swiss 143 , by Dany Schoch of Hagendern, Switzerland. is a non- wof . Swiss 143 is Y, the yall . ain the by 143 +, the the end of the . The @and to the @and were Pnot do PZPAPN Swiss Phoenix : Swiss Phoenix Switzerland S: 927 7: PRhAK - , NAV, The Swiss Phoenix in Switzerland in is a wof . /and . .. It exhibits techniques. The Swiss Phoenix ga low-level sub , it reside at the top of but &the , as sby the DOS by 976 nby Swiss Phoenix in the Swiss Phoenix , it /and . , or copied, usually in sub Hories. the Swiss Phoenix rof 927 at the end of the b. The @and in the DOS not be . The the , and is not the Swiss Phoenix the DOS . Not all be flagged, but those were prior to the becoming It is what Swiss Phoenix may do PZPAPN Sword : Sword may dis S: 794 7: PRhAK - 2.1.7+, NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.17+ The Sword . Its . Sword is a /and . cSword at the top of the ), hooking ~21. sby the DOS gDOS 5.0, not be while Bby 1,100 the Sword , it rof 794 at the end of the b. The not be in the DOS , but the may be . The in the 7in all "The POWER of my SWORD!!!" the Sword may find execu gthe still, however, be on the the hidden attribute set. of Sword: Sword.B: , Sword.B is a minor of the Sword . It has four differ. PZPAPN Sybille : Sybille Sybille.853 S: 853 - 867 7: PRhE - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 12.2 9503+, 2.0+, 2.71+, 2.17+ The Sybille or Sybille.853 . Its . Sybille is a wof . cSybille at the top of the ), not moving ~12's , as sby the DOS gDOS 5.0, }21 and nby the the Sybille , it may rof 853 to 867 at the end of the b. The @and in the DOS not be . The in the "@:\AUTO XC.BAT @echo off" "echo Looking for Sibylle..." "goto b" It is what the Sybille may do PZPAPN Sylvia : Sylvia Holland Girl A, 1989 j; TSR S: 1,332 7: PRsC - , NAV, ], or The Sylvia, or Holland Girl, creported by Jan Terpstra of the a, increasing by 1,332 +. The apparently damage, and Pnot The is due to the fact and phone number of a girl d Sylvia in Holland, along her address, requesting post cards be sent to her. The is believed to #written by her ex-boyfriend. of Sylvia are: Sylvia 2: The Sylvia 2, or Holland Girl 2, is a modified of the Sylvia wof . [of an in up to four becoming may be in the C: Qroot G, or the rof 1,332 at the $of the b. The can be in the 7, along Sylvia's last and full address is not %repeated here: tby a HARMLESS V2.1" "Send a FUNNY postcard to : Sylvia" "You might get an ANTIVIRUS : New Brunswick, Canada PZPAPN Sylwia : Sylwia j; unexpected (DOS 5.0) S: 734 7: PRhCK - ]2.17+, 7.00+, p2.10+, 2.71+, 7.00+, 2.71+, 2.17+ The Sylwia . Its is unkown. Sylwia is a of . .. Unexpected may cSylwia at the top of the ), not moving ~12's , as sby the DOS 5.0 Bby approximated 1,008 by the the Sylwia , it rof 734 the end of the b. The @and in the DOS not be . The in the 7in all Sylwia "SYLWIA" PZPAPN Synergy : Synergy S: 288 7: PRbCK - 12.2 9503+, 7.00+ The Synergy . Its . Synergy is a cSynergy in video card at B000. , as sby the DOS not be }10 and 21 the Synergy is , it of 288 at the end of the The @and in the DOS to the @and . The can be in the 7in all "SynergY" PZPAPN Syrian : Syrian Syrian.241 S: 241 7: ORsAK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, 7.00+, 2.0+, 2.71+, 2.17+ The Syrian or Syrian.241 . Its . Syrian is a /and . .. It permanently corrupts the cSyrian as a low TSR. 21 wil be nby the the Syrian , it mthe c241 by the 7. The @and in the DOS to the @and . The the 7in all "Syrian Brain II" "Bad "MS-DOS v4.22" "Volume label for QZ is the Syrian cannot be dis must be Dd or erased and replaced copies. of Syrian are: Syrian.412: is a 412 of the Syrian . It the c412 +of the :the "Syrian Brain II" "Bad "C:\SYRIAN??.II? C:\*.BAT C:\*.SYS C:\*. /C:\*. C:\AUTO XC.* C:\CONFIG.* C:\The C:\Syrian C:\Brain C:\II C:\Has C:\Struck" kfrequently PZPAPN SysLock 00I G [PTI : SysLock 3551, 3555 Endangered , 1988 j; data S: 3,551 7: PNA - Encrypting , NAV, ], or The SysLock is a encrypting both . /and . a, as well as damaging data Pnot , but instead searches through the . /and . Hories on the M, picking one execu random to y. The mits 3,551 it may vary slightly depending on The SysLock damage aby searching for the word "Microsoft" in any combination of upper and lower case and ereplace the word "MACROSOFT". If the SysLock finds an en ment variable "SYSLOCK" exists in the and has #set to "@" (hex 40), the yany or perform replacements, but instead pass control to its host immediately. of SysLock are: Advent: Reported to be a SysLock , the sample of by the author Pnot . All samples of researchers do not . Fridrik Skulason of Iceland has it is on an b, and t to be extinct. Advent-B: gthe NCSA is , Advent-B is a bug fixed of the Advent . Advent-B may yone . /or . in the , however, ythe cfew ain the 2,768 to 2,783 at the end of the . The @and in the not be . Like Advent, Advent-B activate in A, at randomly activate, Oing four candles and playing "On Tannenbaum" on the speaker. Cookie: on the SysLock , Cookie is a considerably shorter in . It is a wof . /and . .. It xone . /or . the of 2,232 to 2,251 at the end of the b. The @and in the DOS Cookie may Y. In cases, the functioning a number of [s. #reported to Othe "I want a COOKIE!", the sample Pn't exhibit behavior. Macho-A: same as the SysLock , except "Microsoft" is replaced "MACHOSOFT". PZPAPN : Sze Sze.314 S: 314 7: PNCK - ]2.17+, 7.00+, p2.10+, 2.1.7+, 2.71+, NAV 3.05 9503+, 12.2 9503+, 7.00+, 2.0+, 2.71+, 1.05 9503+, 2.17+ The Sze or Sze.314 . Its . Sze is a wof . the Sze yall of the . in the rof 314 at the end of the b. The @and in the DOS to the @and The in the 7in all Sze "*.co*" "Sze" The "Sze" at the very end of all of Sze are: Sze.351: , Sze.351 is a 351 of the Sze . It adds 351 +to the . x, the at the end of the :the same as the Sze PZPAPN T-1000 : T-1000 (failure; S: 128 7: ONCK - NAV 3.05+, {3.0+, 1.05 9503+ The T-1000 . T-1000 is a .. It corrupts the the T-1000 Y, the T-1000 yall of the . in the G, and Othe "T-1000" hang the T-1000 mthe +of the host by the T-1000 unless were smaller +, in case "128 . The @and in the DOS to the @and . The , along , is in the "*.Com" PZPAPN Tabulero : Tabulero 9- South America j; TSR Venezuela Argentina S: 2,048 - 2,062 7: PRsE - 12.2 9503+, {3.0+ The Tabulero . It is Venezuela, it was in Argentina. Tabulero is a wof . . It is on the cTabulero Y, the Tabulero as a low TSR of 2,048 +. It hooks }09 and 21. the Tabulero , it Y. Tabulero cannot recognize previous vs on a, so it the Tabulero rof 2,048 to 2,062 of the b, and 2,048 v. The at the end of the b. The @and the DOS not be . The can be ein all Tabulero "pTpApBpUpLpEpRpOp pI.U.P.L.C.M Wilmer C G" "exe" Tabulero may Othe "TABULERO" on the it has period of of Tabulero are: Tabulero-B: A later of the Tabulero , it Pnot re . The "pTpApBpUpLpEpRpOp p" "ISRAEL" "ODALUBAT atse CP us, otreum ah LEMRAC" "--IUP LUIS CABALLERO MEJIAS--" Tabulero 2: An of the Tabulero Pnot re a. The in the 7are: "ODALUBAT atse CP us, otreum ah LEMRAC" "--IUP LUIS CABALLERO MEJIAS--" "Wilmer 86-Phonix (R) Rescue anti "Copyright (C) Phonix Corp 1987- All right reserved." "Immunizing" "No path especifed or no "Example RESCUE A:" "pTpApBpUpLpEpRpOp p" "ISRAEL" PZPAPN : Tack I: May, S: 449 - 464 7: PNCK - , NAV, 12.2 9503+, {3.0+ The Tack, or 4-A, in May, . Its . Tack is a the Tack Y, the Tack yone . in the and Othe - Hello, I am rof 449 to 464 at the end of the b. The @and in the DOS to the @and 'the , the can be in the 7in Tack "TACK" the Tack Non the monitor, and of Tack are: Tack-411: , Tack-411 is a 411 of the Tack Os the It adds 411 to 426 +to the . In addition to the in its "*.com" Tack-477: , Tack-477 is a 477 of the Tack Os the same as the , and adds 477 to 492 +to the . t. In addition to the in its "*.com" PZPAPN Tai-Pan : Tai-Pan Whisper S: 438 7: PRhE - ]2.17+, NAV 3.05, 12.2 9503+, AVTN/N, 2.17+, 1.05 9503+ The Tai-Pan or Whisper . Its s it may be in the public domain in North America. Tai-Pan is a wof . are smaller cTai-Pan Y, the Tai-Pan at the top of but &the ), not moving ~12's , as sby the DOS Bby 512 nby the are 438 at the end of the b. The @and in the DOS not be . The in the in all "[Whisper presenterar Tai-Pan]" It is what Tai-Pan may do PZPAPN Taiwan : Taiwan Taiwan 2, Taiwan-B, Doom I, Doom I-B Endangered j; 8th day of any month corrupts (, FAT, Taiwan S: 743 7: PNCK - , NAV, ], NAV, or The Taiwan in Taiwan, R.O.C. ., and Pnot into the Taiwan Y, the attempt to yup to three . a. The default Gis not t, instead the start its search for candi ain the C: Qroot , the xthe bby copying the 7to the c743 of the b, the c743 +of the bis re to the end of the . b. A bug exists in , if the bis less , the always be 1,486 effect is due to the not checking to see if it read less +of the bbefore The Taiwan is destructive. On the 8th day of any month, is run the perform an absolute write for 160 starting at logical 0 on the C: and D: Qs. In effect, logical write in the FATs and root of Taiwan are: Doom I: The of Taiwan is between Taiwan-B and Taiwan, Doom I adds 752 5in the @and in the DOS G. Doom I yfour . aon the C: Y. It reset the Qand a, so if the was not =ly using the C: as the may notice the 5. Due to a bug in the Doom I smaller +, the 1,488 Doom I-B: Doom I-B is a later of the Taiwan , and rs the aby 677 +. It ythree . on the C: Y. The and reset to the Gthe vprocess is complete. Unlike Taiwan, smaller Taiwan-B: Apparently an earlier of the Taiwan hang the Y, but it has busing the selection mechanism sfor the Taiwan PZPAPN Taiwan 3 : Taiwan 3 Anticad 2 Taiwan S: 2,900 7: PRA - ], NAV, : CleanUp, or The Taiwan 3 in Taiwan, R.O.C. It was dubbed the Taiwan 3 by John McAfee because it is the third gTaiwan, the two are Taiwan and MKiller. is not related to either of The the Taiwan 3 Yon a , the in low 3,152 +. The hooks becoming , Taiwan 3 yany Y. . by 2,900 rby between 2,900 and 2,908 Overlay amay tas well. It is what the criteria is for what it 'spreading. See: Fu Manchu PZPAPN Taiwan 4 : Taiwan 4 2576, Anticad 5 TSR; . slowdown and Thailand Taiwan S: 2,576 7: PRsA - p, NAV, : CleanUp, or The Taiwan 4, or 2576, . While one copy of by a of Excalibur! who it had ga download of AutoCad BBS, a second copy was to John McAfee Thailand on the same s to ated in Taiwan, and is on the Taiwan 3 . It is a wof . /and . a, but the Taiwan 4 Y, the check to see if it is already . If the isn't already in , the as a low TSR of 2,832 and 21 nby the , the start to slow down the gradually. 30 minutes, it slowed the down by 30 percent. Any . /or . Taiwan 4 active in rd by 2,576 +for . a, and 2,576 - 2,590 for . a. The at the $of . a, and the end of . a. The ein all "To Whom see : Shit! As you can see document, you may know what is. But I must tell you: DO NOT TRY to WRITE ANY ANTI-PROGRAM to THIS VIRUS. is a test- , the real dangerous implement on . I use MASM to generate varius easily and you must use DEBUG against my lly, is foolish. Save your until next month. OK? Your Sincerely, ABT Group., Oct 13th, 1989 at FCU." can be ein all "ACAD. PZPAPN Tajfun : Tajfun Tajfun 1.0, Tajfun.250 S: 250 7: PNCK - The Tajfun, Tajfun 1.0, or Tajfun.250, . Its . Tajfun is a Pn't to do the Tajfun yall of the . in the 250 at the end of the b. The @and in the DOS to the @and . The in the 7in all "*.com" "tajfun1.0" PZPAPN Talentless : Talentless S: 1,077 7: PNAK - , NAV, The Talentless . Its . Talentless is a /and . w. It the Talentless the Talentless yone . /or . on the C: Q. The start looking for a yin the C: Qroot G, and move down through the Gstructure. the Talentless rof 1,077 +. The at the end of the b. The @and in the DOS not be . The in all Talentless "Bad It is if Talentless PZPAPN TalkingHeads : TalkingHeads fail to function; README. bcreated S: 519 7: ONCK - 1, NAV, {3.0+ The TalkingHeads . Its . TalkingHeads is a wof . .. It permanently corrupts the . the TalkingHeads ytwo . in the , the create a 519 README. /in the G, as create a 519 bin the C:\DOS Gif the Pn't already exist. the TalkingHeads mthe 519 +of the host by the be no unless the bwas smaller , in case it . The @and in the DOS not be . The can be in the 7in all "C:\DOS\ "README. The TalkingHeads Othe Yon Fridays between 11:00 and 11:59: ain't no disco..." The Pn't always behaviour. The in the PZPAPN Tamanna : Tamanna j; Read Attribute set on S: 1,857 - 1,872 7: PRhAK - 12.2 9503+, The Tamanna . Its . Tamanna is a /and . cTamanna Y, the Tamanna at the top of &the ), hooking }1C and 21. ~12's not be moved. , as sby the DOS Bby 1,888 the Tamanna , it rof 1,857 to 1,872 at the end of the b. The @and in the DOS not be , but the read attribute be set. The in the Tamanna 7in all "Tamanna" "Wish.." "Facts need no recognition" "A silent friend" "DHAKA" "Press T to reconcile my Wish" "OK carry on >>" bhas #modified" "Rebuilding..." "Standby while re (ing" It is what Tamanna may do PZPAPN Tamper : Tamper j; TSR S: 1,400 - 1,414 7: PRsE - 12.2 9503+, The Tamper . Its . Tamper is a cTamper as a low TSR of 1,744 nby the , it are 1,400 to 1,414 at the end of the b. The @and in the DOS not be . The the 7in all Tamper "WARNING: Do not tamper 7!!! Mgt. Dynamics, Inc." It is what Tamper PZPAPN Tankard : Tankard Tankard V2.0 I: March, S: 493 7: PRhCK - , NAV, {3.0+ The Tankard, or Tankard V2.0, in March, Its . Tankard is a , fast wof . cTankard Y, the Tankard at the top of &the ), hooking ~12's not be moved. , as sby the DOS Bby 1,024 the Tankard , it for any reason. rof 493 at the end of the b. The in the DOS not be . The in the Tankard in all "IBMBIO. /IBMDOS. "Tankard vers.2.0" It is what Tankard may do of Tankard are: Tankard V3.01: A 556 of the Tankard 1,024 +, hooking ~21. It adds 556 +to the . [and open. The can be in the Tankard V3.0 "IBMBIO. /IBMDOS. "Tankard vers. 3.01" March, PZPAPN Tao Cheng : Tao Cheng k; video mode (failure; garbage 6written to unexpected S: 1,295 7: PRtAK - p, NAV, {3.0+ The Tao Cheng . Its . Tao Cheng is a wof . /and . cTao Cheng Y, the Tao Cheng at the top of &the ), moving ~12's , as sby the DOS Bby 3,072 nby the Tao Cheng the Tao Cheng , it and . rof 1,295 at the end of the b. The @and the DOS not be . The in the Tao Cheng "TheDraw Save" "Unsupported Video Mode" "[Tao Cheng] Tommy Chong" The author of the "TheDraw" had nothing to do creation of . The ctwo are in the due to use of TheDraw to create part of the the Tao Cheng \a number . Frequent kmay be accompanied colored squares ;ing random 6on the monitor. The video mode may be switched. Unexpected may , as well as (failures (copy of Umay accompanied by a /MAND cannot be loaded, and the #halted. PZPAPN Tatou : Tatou j; TSR; seconds set to "62" Poland S: 1,153 7: PRsCK - p, NAV, {3.0+ The Tatou gPoland in . Tatou is a wof . cTatou Y, the Tatou as a low TSR of 1,424 +. It hooks interrup 21. the Tatou , it rof 1,153 at the end of the b. The @and in the DOS to not be 's seconds field #set to "62". The in all Tatou It is what Tatou PZPAPN Taurus : Taurus S: 358 7: PNCK - , NAV 3.05 9503+, 12.2 9503+, 2.0+, The Taurus . Its . Taurus is a wof . the Taurus yone . in the rof 358 at the end of the b. The @and the DOS not be . The in the "TAURUS (C) Prymityw 0.3" PZPAPN : TB1 S: 124 - 448 7: PNE - The TB1 . Its . TB1 is a wof . the TB1 Y, the TB1 yup to three . in the 124 to 448 at the end of the b. The @and in the DOS not be . No in the TB1 Pn't to do PZPAPN TBug-634 : TBug-634 Andr-634 S: 634 7: PRhAK - NAV 3.05 9503+, 12.2 9503+, {3.0+ The TBug-634 . Its . TBug-634 is a of . /and . cTBug-634 at the top of the ), not moving ~12's , as sby the DOS Bby 640 nby TBug-634 in the TBug-634 , it rof 634 the end of the b. The @and in the DOS to the and . The can be enear the end of all "TbUg" TBug-634 uses a mechanism employed by the Vacsina . As a employing ning technologies may detect of the Vacsina PZPAPN Tchantches : Tchantches j; graphic hang; Liege, Belgium S: 3,303 - 3,318 7: PRsAK - , NAV, {3.0+ The Tchantches . It is gLiege, Belgium, and is on the Gotcha Tchantches is a wof . /and . cTchantches at the top of but &the ), not moving ~12's , as sby the DOS Bby 3,648 nby Tchantches in , the Tchantches the Tchantches , it and . for any reason. Tchantches 3,303 to 3,318 at the end of the b. The @and in the DOS not be . The the Tchantches 7, thus not "TCHANTCHES d mineur v1,10" "Portez secours votre disque dur" "Entr e=Drapeau, Espace=Explorer" "(C)Copyright Setaicossa EefaCm '92" The Tchantches 1st of any year. At , the draw a box centered on the O. The ctwo lines be at the top of the box, and the last two lines at the bottom. The be hung. See: Gotcha PZPAPN TechnoRat : TechnoRat Rat-615 I: March, ?seconds set to "62" S: 615 7: PNCK - NAV, {3.0+ The TechnoRat, or Rat-615, in March, . It s to be gthe . TechnoRat is a wof . the TechnoRat yall of the . in the G, and the rof 615 the at the end of the b. The and in the DOS to be , however the seconds field #set to "62". The in the TechnoRat in all "Techno-Rat I. Copyright by Lord Blaise, Odessa "*.* *. /..\*. It is what TechnoRat may do PZPAPN Telecom : Telecom Telefonica, Telecom b, Spanish Telecom-2 Mformatted Spain S: 3,700 7: PRhC - , NAV, The Telecom, Telefonica, or Telecom creported , in Spain. several samples of Telecom were in early , the creplicable sample arrived sample is gSpain. Telecom is a wof . . It carries a of the Anti-Tel |on the ). Telecom was written by the same individual as the Anti-Tel and Holocaust es. All of es are Telecom is Y, Telecom at the top of &the ~12's not be moved. , as measured by the DOS Bby 3,984 nby the Telecom Telecom is , it larger 1K in by 3,700 the rcannot be seen in the as the hides it. The alters the in the Gby adding 100 to the year, readily apparent. The @alteration is how Telecom determines if the bis already Telecom , it ythe of the Anti-Tel accesses a on the M. See the description for Anti-Tel for zon the The Pnot ;a complete copy of the Telecom , so it by cannot The wportion of Telecom Pnot mechanism per say, the mechanism is in the M, the See: Anti-Tel Holocaust PZPAPN : Ten 1554, 9800: , V-Alert, 1559 J: j, TSR, linkage S: 1,554 7: PRfAK - ], NAV, ], or The Ten +, or 1554, was accidentally sent out over the VALERT-L network on _13, subscribers. , the . It proceed to aover 1000 and . aover 1024 ., increasing vby 1,554 to 1,569 The Ten Aof any year. Upon , any are written be missing the cten +. At the end of a, ten +of miscellaneous . In effect, both and data be corrupted. If the Ten Yon a less , the hang the of Ten +are: 1415: The 1415 on the Ten . It flow hooking }21 and 49. The 1415 by 1,415 to 1,462 at the end of the be no 5in the @and in the DOS +-1514: The Ten +-1514 on the Ten . It , it and . by 1,518 to 1,569 at the end of the may notice awritten to Mmay be missing the were in the b, thus corrupting the +-1514B: hequivalent to the Ten +-1514, differs in a few PZPAPN Tequila : Tequila modified; Switzerland S: 2,468 7: PRtEX - , NAV, : CleanUp, ], or replace The Tequila . It is gSwitzerland, and at the of its W. Tequila is a ) and . uses a complex encryption method and garbling to avoid disassembly and detection by using a or search The Tequila is Yon a , the check to see if it has already . If the has not t, Tequila write an un Tcopy of to the last six of the M, as well as modify the yious. Tequila , and it Later, is re gthe Tequila . It at the top &the ~12's be moved, preventing the }13 and 21 nby the , as sby the DOS be 3,072 +less expected. Tequila is , it 2,468 +, but not be able to be seen in the DOS Gif the . The at the end of . The @and in the not be The be able to be eon the last few of the "Welcome to T.TEQUILA's latest production. Contact T.TEQUILA/P.o.Box 543/6312 St'hausen Switzerland. Loving t to L.I.N.D.A. BEER and TEQUILA forever !" Tequila notice %detected the DOS . If the /F option, <may perform CRC checking may not be able to detect Tequila on a, regardless of whether the Tequila four months the initial of the M. At , and every month on the anniversary @, the Oa graphic and the Z: mov ax, FE03 / int 21. Key to go on!" If the Zs a ;ing sequence of instructions, the eon the last the PZPAPN Terminator : Terminator 4; TSR; write protect S: 526 7: PRsCK - , NAV, The Terminator . Its . Terminator is a wof . The the Terminator Y, the Terminator as a low TSR of 1,104 }21, 22, and the Terminator , it the Terminator of 526 at the end of the The @and in the DOS to the @and the Terminator may notice the ga write-protected L, a write-protect PZPAPN Terminator-2294 : Terminator-2294 S: 2,294 7: PRhAK - ], NAV, {3.0+ The Terminator-2294 . Its . Terminator-2294 is a wof . /and . .. It employs techniques to avoid detection, and Pnot until the ring A31, A31, , and a Terminator-2294 Y, the Terminator-2294 at the top of &the ), hooking }13, 21 and 24. , as the DOS Bby 2,448 , the Terminator-2294 .if it was not the Terminator-2294 , it /and . rof 2,294 at the end of the b. The not be . The @and in the DOS not be . The in the Terminator-2294 "TERMINATOR" ".csc.eziarchomanxep" the Terminator-2294 notice Uon all . It is what effects the Terminator-2294 may PZPAPN Terminator-3549 : Terminator-3549 acorrupted; fail to function ; "Divide overflow" The S: 3,549 7: ONE - The Terminator-3549 . It is gThe . Terminator-3549 is a . It permanently damages the the Terminator-3549 the Terminator-3549 yone . the C: Q. The starting in the Q's root G, and slowly work down the structure. the Terminator-3549 c3,549 +of the host by the 7. Unless the . bwas smaller 3,549 be no smaller 3,549 before "3,549 v. The @and in the DOS to the and . The in the 7in Terminator-3549 "*.exe" "$456789:;<o>=>?u" in the Non the monitor: "Divide overflow" PZPAPN Tester : Tester TestVir, Test B V1.4 S: 1,000 7: PNCK - ], NAV, The Tester, or TestVir, . Its is a wof . a. It Tester is Y, the Othe , requiring a response by the is TESTVIRUS B V1.4 ! 1 = G+ run orig. prog. 5 = run orig. 9 = abort" If a "1" is entered by the , the all of the . in the G, and the Tester , it Oone of the dtwo lines, indicating it is =ly processing. The cline is the if it was t, the second line it is uthe "Already "INFECTED: Entering a "5" in no t, and the Y. Finally, entering a "9" in the terminating and the ed to a DOS prompt. Tester by 1,000 the at the $of the The @and in the DOS to the @and PZPAPN The Click : The Click = "2:24a"; "Click" sound emitted S: 291 7: PNCK - ]2.17+, 12.2 9503+, 2.17+ The The Click . Its is a w. It can The Click yone . in the rof 291 at the end of the b. The @in the DOS not be , but the field #set to "2:24a". The are visibile in the 7in all "The Click" "*.com" in a click- sound %emitted on the speaker. PZPAPN Thimble : Thimble j; TSR; S: 1,024 - 2,046 7: PRsCK - , NAV, The Thimble . Its , is . Thimble is a wof . cThimble Y, the Thimble as a low TSR of 4,416 }21 and CC the the Thimble , it Y. If the Thimble normally by 1,024 +. The exception is smaller 1,024 "2,048 . The at the $of the . The @and in the DOS to the @and The can be ein all Thimble "Greetings to Cracker Jack..." "Loving ts to Shirley" "Marty McFly lives where in "Kill Eddie. Kill Diana. Kill Fredo." It is if Thimble PZPAPN Thirty Three : Thirty Three S: 525 7: PRtCK - NAV 3.05 9503+, 12.2 9503+, {3.0+, 2.17+ The Thirty Three . Its . Thirty Three is a wof . cThirty Three at the top of &the ), moving ~12's , as sby the DOS Bby 1,024 nby the , the Thirty Three rof 525 at the end of the b. The @and in the DOS to the @and . One in the "33" It is very near the end of all PZPAPN mark 1 J: Poland S: 1,062 - 1,076 7: PRhE - , NAV, The mark . It is gPoland. mark is a wof . mark Y, the mark at the top of the sby the DOS Bby 1,072 }1C and 21 nby the mark mark , it very small ones) rof 1,062 to 1,076 %at the end of the b. The @and in the DOS . No in the mark It is what mark mark are: mark 2: Probably an earlier of the mark is 1,088 +, hooking }1C and 21. It adds 1,083 to 1,097 to the . x. Unlike mark, mark 2 adding an 1,083 to 1,097 +. The @and in the DOS not be : Poland PZPAPN Timid : Timid J: [failure Oregon, S: 306 7: PNCK - , NAV, The Timid Iin the state of Oregon in the . Timid is a wof . .. Timid s to be an escaped research , and has ein the public domain. It was by Wallace Hale of Canada. Timid is Y, the Timid look for an in the y. The encountered tby the . If no exist in the G, a hang Timid rof 306 +. The at the end of the The @and in the DOS to the @and . Two can be ein the "VI" The , "VI", in the fourth and fifth a. Together a jump (E9h) instruction at the $of the b, it forms the marker used by the to determine if the bwas tby Timid. (the in a hang. yield unexpected s, such as beeping, or a of Timid are: Hehheh: , Hehheh is a 320 of the Timid . It xone bin the amay be of any qdata a, as the uses a search argument of *.*. rof 320 at the end of the b. The and in the DOS to the @and all of the ain the [of the next in the %repeatedly Non the monitor, accompanied by beeping: "*.* HEH!HEH!HEH!HEH!" can be in the 7in all Hehheh Timid-290: , Timid-290 is a 290 of the Timid [of an in the searching the Gfor an y. Unlike the , it Pnot Othe newly rof 290 at the end of the b. The @and in the DOS to the @and . The 6"VI" can be estarting in the fourth all . The the 7is "*. : North America Timid-297: , Timid-297 is a 297 of the Timid-371 [of an in the searching the Gfor an y. If the cannot find an y, it hang the rof 297 at the end of the b. The @and in the DOS to the @and . The 6"GR" can be estarting in the fourth all . The the 7is "*. : North America Timid.300: , Timid.300 is a 300 of the Timid . It one . in the rof 300 at the end of the b. The @in the DOS to 3-15-95 while the #set to the . The 6"VI" can be estarting in the fourth ,of all One in the 7: "*. Timid-305: , Timid-305 is one ,smaller Timid [of an in the searching the Gfor an y. If the , it Othe newly . No beeping Timid-371: , Timid-371 is a 371 of the Timid-290 [of an in the searching the Gfor an y. If the cannot find an y, it of the Mstarting at Side 0, Cylinder 0, any to access the in an "Invalid Qspecification" V. Norton MDoctor can be used to fix the rof 371 the end of the b. The @and in the DOS to the @and . The 6"VI" can be estarting in the fourth all . The the 7is "*. : North America Timid-382: , Timid-382 is on the Timid [of an in the searching the Gfor an y. If the , it Othe newly . No beeping rof 382 at the end of the b. The @and in the DOS to the @and . The "VI" can be estarting in the fourth ,of all may corrupt the (record ( Timid-431: , Timid-431 is on the Timid [of an in the searching the Gfor an X, or .SYS rof 431 at the end of the b. The @and not be in the DOS . The "GR" can be estarting in the fourth of all s of (failures and failing to function Timid-526: , Timid-526 is on the Timid [of an in the searching the Gfor an yboth and data the exception in the root ythe hidden a, both and data, rof 526 at the end of the b. The and not be in the DOS . The "GR" can be estarting in the fourth ,of all s of (failures, failing to function , and data non-execu t. If the Pnot encounter y, it may slowly alter the Ountil it is left blank. A hang Timid-557: , Timid-557 is on the Timid [of an in the searching the Gfor an yboth and data the exception in the root ythe hidden a, both and data, rof 557 at the end of the b. The and not be in the DOS . The "GR" can be estarting in the fourth ,of all s of (failures, failing to function , and data non-execu t. If the Pnot encounter y, it slowly drop down the Oif it is in mode, and later move them back into place. Timid-LM: , Timid-LM is a 305 of the Timid . It is gCanada, written by Lucifer Messiah. Timid-LM xone . bin the by 305 at the end of the b. The and in the DOS to the @and ;the "LM" starting in the fourth ,of the b. The ein the 7is "*. : Canada Timid-Orig: The Timid whose source published in "The Little Black Book of Computer by Mark Ludwig. the Timid- Orig Y, the search the Gfor an y, and yit. it has , it Othe of the has just Timid-Orig rof 306 at the end of the . The @and in the DOS to the @and . The Timid-Orig Pnot cause beeping on the speaker. : Arizona, PZPAPN Timor : Timor J: j; TSR; S: 1,562 - 1,576 7: PRsA - 1, NAV, The Timor . Its . Timor is a wof . /and . , and is on the cTimor Y, the Timor as a low TSR of 2,816 +. It hook }21 and F8. Timor is , it /and . Y. . rof 1,562 at the $of the b. . rof 1,562 - 1,576 at the end of the b. Unlike , Timor many @and in the DOS The can be ein all Timor "Timor" Cruz, Dili" "LxTimor" "sso, fdom for East Timor !" Nov 12, Lusit ia Expres" Timor 12th of any year, at may Othe : "St Cruz, Dili". See: PZPAPN Di-94, Di-101, Di-108, Di-110, Di-94, Di-101, Di-108, Di-110 J: (failure; S: 94 - 110 +(see 7: PNCK - p, NAV, The Di, or Di, ^of four es was . Its . The es in ^are non- ws of . .. Since four es exhibit behavior, in general, differences &under Y, the yall . in the G. If G, it well. one of the the at the $of the b. The r, and whether the later be re depends on is present. In any case, the mhad @and in the DOS to the @and One can be in the "*.com" The es do not intentionally do may fail to are t. The fail to (if the copy of members of the ^are: Di-94: adds 94 +to the . x. It is unable to distinquish has t, so it add 94 Di-101: A 101 ,member of the xall . ain the not always in a manner. In cases, the c101 out saving the c101 fore, the initial vof a , the be either zero or 101 Like Di-94, it cannot recognize a, and later re ythem, adding an zero or 101 Di-108: Di-101, is 108 in a manner, and s by c108 Unlike Di-101, it can recognize a, and Pnot re ythem. Di-110: Di-108, is 110 PZPAPN see &under " members" J: S: 133 - 198 +(see 7: PRC - ], NAV, The es was by the author in gVesselin Bontchev of *. All the es in grouping share the same characteristics, difference is the effective of the five (5) es included in the " ^" as of -158, -159, -160, -167, and -198. In , five (5) es in ^were Vesselin Bontchev: -134, -138, -143, -154, and -156. In , an eleventh member was -133. In March , the twelveth member was -143B. The one of the Yon a , the segment 60h. area of is normally used by DOS (ed, it is never used or referenced. nby the , the yany . rof between 134 - 198 +, depending on is present on the . The @and in the to the @and The Pnot do The es in ^" are not related to the documented members of the ^are: -133: -134, 's effective 133 +. The bugs in -134 #fixed, is an excellent replicator. it cannot be detected by utilities were aware of members of -134: 's effective is 134 is the member of is not a very viable , it usually hang the -138: Same as , effective is 138 -143: Same as , effective is 143 -143B: -143B was in March, , and is -143. It has to avoid detection by familiar -143. March, -154: Same as , effective is 154 -156: Same as , effective is 156 -158: Same as , effective is 158 -159: Same as , effective is 159 -160: Same as , effective is 160 -167: Same as , effective is 167 -198: Same as , effective is 198 ^.Fred: ^.Fred was . It is a 255 ,member of group of es. It adds 255 +to the . /and . ;the at the end of the "Fred" See: Dutch Micro 128 Mini-97 PZPAPN Danish , 163 J: Denmark S: 163 7: PNCK - ], NAV, ], or The 163 , or , was by Fridrik Skulason of Iceland in is a generic . w, and it The the 163 the attempt to ythe bin the G. On (able normally be attempt to be aare greater by 163 +, and ?stamps in the 3to the always end hex : '2A2E434F4D00'. Pnothing but , and is the smallest MS-DOS as of its The may or may not be related to the documented elsewhere in of the 191: A 191 of the , the 191 yone . bin the rof 191 at the end of the b. The @and in the DOS not be . One s in the The 191 Pnot yvery small a, and it usually not ymore four ain the G. It Pnothing Brenda: A 256 of the , Brenda one . bin the of 256 at the end of the b. The @and in the DOS to the Brenda has cthree . ain the G, it the instead of "(C) '92, Stingray/VIPER Luv, Brenda" is not aas it is T. One in the Brenda 7: "*. May, Brenda-B: to Brenda, has one Danish .476: A 476 of the yone . bin the rof 476 at the end of the b. The @and the DOS not be . The in the "EW_476 MM2 VIRUS\MYVIRII\TEMP ge by the BLACK WIND VIRUS..." "Copyright (C) , Destructive Technologies, Unlimited." Danish .NC.284: A 284 of the ythe bin the rof 284 at the end of the b. The @and in the DOS not be . The in the "*.*" "***NIGHTCRAWLER V 2.0 ***" "Written by the Weasel! (C) wInc" a, adding an Kennedy: The Kennedy is a 333 of the . It xone . Y, adding 333 +to the end of the has three 6 (Robert Kennedy's assassination in 1968), 18 (death of Joseph Kennedy in 1969), and 22 (John F. Kennedy's assassination in 1963) of any year. On , the "Kennedy is deal - long live 'The Dead Kennedys'" Two can be in the 8.com" "The Dead Kennedys" \cross-linking of a, lost clusters, and : Denmark Stigmata: Stigmata is a 1,000 of the xone . in the if it encounters a very small . the Stigmata rof 1,000 the end of the b. The @and in the DOS not be . No in the -177: A 177 of the , the yone . bin the rof 177 at the end of the b. The @and the DOS 3to the @and . One in the -180: A 180 of the , the yone . bin the rof 180 at the end of the b. The @and the DOS not be . One s in the The -180 Pnot yvery small a, and it usually not ymore four ain the G. It Pnothing See: PZPAPN : Tiso J: Italy S: 846 7: PRhCK - ]2.17+, 12.2 9503+, The Tiso , and is Italy. Tiso is a wof . cTiso Y, the Tiso ythe copy of in the C: Qroot G. It Pnot until later gthe Mand the Tiso is , it at the top of &the ), moving ~12's sby the DOS Bby 1,024 }08 and 24 nby Tiso in the Tiso , it rof 846 at the end of the b. The @and in the DOS not be . No in the 7in Tiso It is what Tiso of Tiso are: Tiso.1279: in May, , Tiso.1279 is a 1,279 of the Tiso . Unlike the is multi-partite, the ), in addition to . /and . Y, the the . The not , however, until the gthe M. The is 2,048 +at the top of , but &the ~12's be moved, and the /and . rof 1,279 at the end of the b. The @and in the DOS . No in the 7. It is what : Italy May, PZPAPN : TMTM Two Minutes To Midnight J: England S: 441 7: PNCK - , NAV, The TMTM, or Two Minutes To Midnight, Manchester, England in . TMTM is a wof . the TMTM yone . in the hang may rof 441 at the end of the b. The in the DOS to 11:58p, or two minutes to midnight. One in the kfrequently PZPAPN Tobacco : Tobacco J: j; TSR S: 2,900 - 2,914 7: PRsAK - , NAV, The Tobacco . Its . Tobacco is a wof . /and . on the Plastique cTobacco Y, the Tobacco as a low TSR of 3,152 +. It hook the Tobacco , it and . the exception of rof 2,900 at the $of the b. . tby Tobacco by 2,900 to 2,914 at the end of the many tby Tobacco. The can be ein all Tobacco "Tobacco v2" "AntiDacha. 21193We don't want" "gypsies in our" "world. We don't" "want DACHAs." 2nd Tabacalera gana siempre. Tobacco Ver. 2.0" It is what Tobacco of Tobacco are: Tobacco-B: to the Tobacco Pnot .. The the "Tobacco v2" "We don't want" "gypsies in our" "world. DHC 1997" "ENIGMA MCMXCV I@TTF" 2nd Tabacalera gana siempre. Tobacco Ver. 2.0" See: Plastique PZPAPN Today : Today J: [failure; (failure; S: 177 7: ONCK - 12.2 9503+, {3.0+ The Today . Its . Today is a .. It permanently corrupts the the Today Y, the Today yone . in the The Today s the c177 +of the host b, so unless the smaller +, the not be were smaller "177 tby Today. The @and in the DOS to the @and . The in the 7in all Today /Today is Good Thursday, nothing can go wrong!" PZPAPN Todor : Todor J: S: 1,993 7: PNEK - p, NAV, The Todor . It is Todor is a wof . aand the Todor yup to four . in the ly, it .if it was not the Todor rof 1,993 at the end of the b. The in the DOS not be The in the Todor "*.exe *.com" /SPEC=(C)Todor" It is what Todor of Todor are: Todor-B: hequivalent to the :minor alterations. : The PZPAPN Tokyo : Tokyo J: may not function Japan S: 1,258 - 1,273 7: PNE - The Tokyo Iin Japan in . Tokyo is wof . Tokyo is Y, the one . bin the by 1,258 to 1,273 at the end of the Tokyo may \frequent are made to hang Pnot , often the mas the is expecting, pauses ring in output operations, such as to the It is if Tokyo PZPAPN Tolbuhin : Tolbuhin Sk1, Tolbuhin-1147 J: S: 1,147 7: PRhC - , NAV, The Tolbuhin, or Sk1, . Its . Tolbuhin is a wof . , but not cTolbuhin Y, the Tolbuhin at the top of &the , as sby the DOS Bby 2,048 }20 and 21 Tolbuhin. The yone . in the Tolbuhin is , it rof 1,147 the end of the b. The @and in the DOS to the @and . The can be ein all the Tolbuhin "Created 21.I. - PMG\OTME - Tolbuhin" "*.com" /MAND" kfrequently . It destructive of Tolbuhin are: Tolbuhin-626: on the Tolbuhin 2,048 +. It hooks 13, and 21. rof 626 at the end of the b. The and in the DOS to the @and . The can be in the "*.com" "SK9" The "SK" estarting in the fourth ,of all Tolbuhin-992: on the Tolbuhin 2,048 +. It hooks 13, 20, and 21. rof 992 at the end of the b. The and in the DOS to the @and . The can be in the "Created 21.I. - PMG\OTME - Tolbuhin" "*.com" /MAND" Tolbuhin-1004: on the Tolbuhin 2,048 +. It hooks 13, 20, and 21. rof 1,004 at the end of the b. The and in the DOS to the @and . The can be in the "*.com" /MAND" PZPAPN Tomato : Tomato J: k; unusual S: 2,156 - 2,171 7: PRhAK - p2.10+, {3.0+ The Tomato . Its . Tomato is a wof . /and . The the Tomato Y, the Tomato at the top of &the , as sby the DOS Bby 2,736 }09, 13, and 28 nby Tomato in the Tomato , it /and . Y. If Y, it may the Tomato of 2,156 to 2,171 at the end of the b. The @and in the DOS not be The in the Tomato "TOMATO!!!" "Praise the tomato! God save the tomato" "Big tomato is watching you Big Tomato says:" "Fighting for peace" "is like fucking for virginity TOMATO says:" "the pope suffers gAIDS Big Tomato says:" "NO MERCY myou ever danced the devil" "under the red light of a big tomato ?" "pray for your Ms . . . Call McAfee (408) 988-3832" "if you \problems gTomato "\VIRUS \DOS *. .tomato.tmp" the Tomato kor unusual For example, the DOS get the "Cannot -a Network it is Yeven it is not on a networked PZPAPN : Tony J: S: 200 7: PNCK - , NAV, The Tony . It comes to us *. Tony is a wof . the Tony Y, the check the day of the @. Depending on the day of the month, the determine ain the y. The algorithm is if the day = "1", astarting "B" are t. On the 2nd, astarting "C" are algorithm continues for the rest of the days of the month. Tony xall . ain the meet the selection criteria. Tony rof 200 +. The at the $of the be no 5in the @and DOS . The can be in the 7in Tony "Tony+*. Tony Pnot do of Tony are: Tony-203: to the Tony adds 203 +to the . x. The ein the s in PZPAPN Tony : Tony S: N/A 7: BR - p, NAV, Mor DOS SYS The Tony . It is *. Tony (is a The ga Tony L, Tony copy the to the last of the Q, and ythe . The not be The next gthe M, the Tony it is , it yany non-write protected exposed to the . The in the Ms and "Tony" It is if Tony of Tony (are: Tony (Dropper: Tony (Dropper is a small places a copy of the Tony into a . The Dropper not PZPAPN Tormentor : Tormentor J: j; .PAS Sweden S: 1,024 7: PRhE - , NAV, The Tormentor gMikael Larssen of the Help Center, Sweden, in . Tormentor is a wof . The Tormentor is Y, the Tormentor at the top of &the , as sby the DOS Bby 1,056 nby the ~12's #moved. Tormentor is , it over 3K in rof 1,024 at the end of the b. The @and in the DOS . The dtwo can be ein Tormentor "*.PAS" "TORMENTOR!" The Tormentor D.PAS the a Tormentor kmay of Tormentor are: Tormentor-1040: , Tormentor-1040 is a 1,040 of the Tormentor . Its is 1,072 +, and like the it hooks ~21. Tormentor-1040 rof 1,040 at the end of the b. No are in the : Sweden Tormentor-1072: on the Tormentor Tormentor-1072 is a 1,072 /and . , but not Its is 1,104 +, and it hooks ~21. it is , it /and . larger by 1,072 at the end of the b. The @and in the DOS reflect the @and . The can be ein all "NUKE!" "TORMENTOR,soldier of -=DY=-" ks DAv!] DEMORALIZED YOUTH!" Unlike Tormentor, Pnot .PAS kmay : Sweden Tormentor-1072B: hequivalent to the Tormentor-1072 , the are: "NUKE!" "THOMASC. KILLER !!! -=SY=-" ks DAv!] DEMORALIZED YOUTH!" Tormentor-1072C: hequivalent to the Tormentor-1072 has a few differ. Tormentor-1072D: hequivalent to the Tormentor-1072, minor Nuke: on the Tormentor-1072 , Nuke adds 1,072 +to the . x. The Nuke a, not . members of the Tormentor group do. The in the Nuke "NUKE!" ks DAv!] DEMORALIZED YOUTH!" Nuke on the second day of any month. At Mon the gC: through Z:. Nuke Dropper: A small . the Nuke . The is not a natural and serves no purpose except to release or drop the Nuke Lixo Nuke: to the Nuke reformat the Mon the 31st of any month. becoming , it are copied. Both the source and target rof 1,072 at the end of the b. The can be ein the Lixo Nuke "NUKE!" "TORMENTOR,soldier of -=DY=-" ks DAv!]" "DEMORALIZED YOUTH!" : Sweden Lixo Nuke Dropper: A small . the Lixo Nuke . The is not a natural v, and serves no purpose except to release or drop the Lixo Nuke : Sweden See: Murphy PZPAPN Tormentor-205 : Tormentor-205 Lession, Lession-1 J: 5; unexpected executing Sweden S: 205 7: PNCK - NAV, The Tormentor-205 gSweden in is a wof . .. It is by the same author as The Tormentor and Tormentor-1072 the Tormentor-205 yall the . in the rof 205 at the end of the b. The @and in the DOS to the . The in the 7in all Tormentor-205 "(c) Tormentor ,Swedish Laboratory" "/ Demoralized Youth /" Tormentor-205 may receive unexpected include "Exec failure" and "Too many aopen". usually not run of Tormentor-205 are: Tormentor-263: Tormentor-263 is a 263 of the Tormentor-205 . It in the rof 263 at the end of the The @and in the DOS to the @and . The can be ein all "Modifications provided by ME, Inc." "I hope works!" "(c) Tormentor ,Swedish Laboratory" "/ Demoralized Youth /" : Sweden Tormentor-358: Tormentor-358 or Lession-2B is a 358 of the Tormentor-205 xall . in the rof 358 at the end of the . The @and in the DOS to the @and . The can be ein all "(c) Tormentor / Demoralized Youth" "Rather cin hell, second in heaven." : Sweden Tormentor-358 Dropper: is a small . is a dropper for the Tormentor-358 : Sweden Tormentor-360: Tormentor-360 or Lession-2 is a 360 of the Tormentor-205 . It xall . in the rof 360 at the end of the . The @and in the DOS to the @and . It the same as Tormentor-358. : Sweden Tormentor-360 Dropper: is a small . is a dropper for the Tormentor-360 : Sweden See: Tormentor PZPAPN Totoro : Totoro J: March, 4; TSR Taiwan S: 1,540 - 1,554 7: PRsA - , NAV, 1.0A06+, {3.0+ The Totoro in March, , and is gTaiwan. Totoro is a wof . , but not .. It is on the cTotoro Y, the Totoro as a low TSR of 1,856 +, hooking the Totoro , it rof 1,540 at the $of the rof 1,540 to 1,554 at the end of the b. In both cases, the @and in the DOS to the @and . The in the Totoro 7in all "Totoro Dragon" "Hello! I am TOTORO CAT" "Written by Y.T.J.C.T." "Don't Worry,be Happy" "YTIT" It is what Totoro of Totoro are: Totoro.B: , Totoro.B's TSR is 1,872 +, hooking ~21. Like the /and . are rof 1,540 at the $of the b. . 1,540 to 1,554 at the end of the b. The @and in the DOS to the @and . The in the "MMAND. "--- Satan "Welcome to the "CLUB"" "Written by Mad Satan" "Ver 1.06 in Taipei" "- Mad Satan -" in the %blanked, and the cursor moving across the bottom of the . Every in while, it spike up to the top of the to the bottom of the PZPAPN Toxic : Toxic J: March, fail to function England S: 171 7: ONCK - p, NAV 3.05 9503+, The Toxic in March, , and is gEngland. Toxic is a are permanently corrupted, and not function the Toxic Y, the Toxic yone . in the mthe c171 +of the host the Toxic 7. The in the DOS not be . The can be in the 7in all Toxic /[Toxic] By Toxic Crusader -=ARCV=-" PZPAPN : TPE Girafe J: ; graphic & The S: Generally Over 3,000 7: PRhA - The TPE, or Trident Polymorphic Engine, was . It is gThe . TPE is not actually a , but rather a polymorphic encryption engine is used as part of the entry. The encryption produced by the encryption engine is extremely complex and in respects to the DAME encryption engine. engine can be identified by the presence of the encryption engine . At the of its submission, one Girafe, exists uses TPE for its encryption. Girafe uses 1.1 of the Trident Polymorphic Engine. An 1.2, has , but not encorporated it. The entry &is for the Girafe , and future using encryption engine be listed and researched. The the Girafe the Girafe at the top of but blow the ), hooking , as sby the DOS Bby 8,960 ~12's #moved. the Girafe , it rof 3,039 - 3,117 at the end of the b. The @and in the DOS . The in the 7in Girafe "COSCCLVSNEHTTBVIFIGIRAFEMTBRIM" "[ MK / Trident ]3 RV" "Amsterdam = COFFEESHOP!" The Girafe on Thursdays, at Oa graphic cannabis (marijuana) leaf and the "legalize cannabis". (es) use the TPE engine are: Beethoven: The Beethoven in March, . It is a wof . /and . . Its at the top of &the )is 2,048 +, hooking }1C and 21. , it /and . are Yor openned, as well as 1,718 - 1,745 the at the end of the b. The @and in the DOS not be . The in the Beethoven 7in all "Beethoven is here . And now, enjoy the music..." The in the all "EMS Page Frame Mappable Pages" Beethoven may play music on the speaker. March, Bosnia: The Bosnia . It is wof . /and . . Its at the top of &the )is 9,216 +, hooking ~21. , it /and . , but not 3,146 - 3,245 at the end of the The @and in the DOS not be . The in the Bosnia 7in all "HELP BOSNIA, BEFORE IT'S TOO LATE!" "[ MK / TridenT ]" "[TPE 1.4]" Bosnia Pn't to do Civil War IV v1.1: A later of the Civil War Civil War IV v1.1 is a of . .. It in the rof 2,018 - 2,127 at the end of the b. The in the DOS not be The in the Civil War IV v1.1 7in all "Civil War IV v1.1, (c) Jan '93 *.com" "For all i've seen has 3my mind But still the wars go on as the years go by no love of God or human rights Cause all dreams are swept aside By bloody hands of the hypnotized Who carry the cross of homicide And history bears the scars of our Civil Wars." "[ DH / TridenT ] [ MK / TridenT ]" "[TPE 1.3]" : The March, Civil War V v1.0: A later of the Civil War IV v1.1 , Civil War V v1.0 is a of . at the top of , but Y, hooking ~21. , as sby the DOS Bby 8,192 , it rof 2,068 - 2,161 at the end of the b. The @and in the DOS not be . The in the Civil War V v1.0 7in all "Civil War IV v1.0, (c) Jan '92" "DH[ DH / TridenT ][ MK / TridenT ]" "[TPE 1.3" : The March, Coffeeshop 4: , Coffeeshop 4 is a wof . uses the TPE engine for its encryption. It is on the Coffeeshop were >Mutating Engine. at the top of &the sby the DOS 8,960 +, and /and . Y, adding 3,043 - 3,139 . The at the end of The in the is not "Amsterdam = COFFEESHOP! =" : Amsterdam, The PZPAPN TPWorm : TPWorm J: acreated; S: 12,969 7: SNE - Spawning p, NAV 3.05 9503+, The TPWorm . Its . TPWorm is a spawning or companion the TPWorm Y, the TPWorm ythree . in the Gby creating 12,969 the same base companion . mthe @and were created. The the "Find me!" The TPWorm Pnot always . It Dthe companion . , the companion acreated by 12,969 are not hidden, and are in the . The can be in the TPWorm companion ".com .exe" "PATH ; ; ; \ *.exe .com rb wb . "Find me!" "Packed bis corrupt" TPWorm Pn't to do Oits and PZPAPN Traceback 00S F PTS : Traceback 3066, TB Extinct , 1988 j; TSR; graphic O1 hour S: 3,066 7: PRsA - , NAV, , NAV, CleanUp, or The Traceback xboth . /and . a, adding 3,066 +to the of the Y, it ly, if the A5, 1988, it attempt to yone /or . bin the G. If an Pn't exist in the G, it search the entire M, starting at the root G, looking for a candi search process terminates if it encounters an before finding a candi @non- derives its gtwo characteristics. ;the Gpath of the bcausing the in the 7, thus is it possible to "trace back" the vthrough a number of a. Second, succeeds in b, the attempt to access the on- Mcopy of the the copy of the was loaded it can up @a counter in the . The takes over Vhandling while trying to @the , so if it can't yit, the be unaware The primary symptom of the Traceback having if the A28, 1988, the produce a cascading effect to the Cascade (1701/1704) . The cascading s one hour If a keystroke is entered gthe during lockup one minute, the restore ing to positions. cascade and restore Oare repeated by the at one hour intervals. of Traceback are: Traceback-B: to the Traceback , the major differences are Traceback-B .and is no cascading Oeffect for one hour. ;the of the became , but instead the of the b. A "MICRODIC MSG" can be Traceback-B. If the whose copy of Zany in a Vand the %halted. : Spain, March Traceback-B2: to Traceback-B2, has the cascading Oeffect for one (1) hour. The " XPO DAD " replaces the "MICRODIS MSG" in Traceback-B. : Spain, May See: Spanish Traceback 3029 Traceback II PZPAPN Traceback 3029 : Traceback 3029 Traceback-4 j; TSR; graphic O1 hour S: 3,029 7: PRsAK - , NAV, The Traceback 3029, or Traceback-4, . Its . Traceback 3029 is a wof . and . .. It hour becoming cTraceback 3029 Y, the Traceback 3029 yone . in the G. If the Yhappens to be a . , the a low TSR of 7,696 +. It }1C, 20, 21, and 27. If the not a . , the until the Zs an Traceback 3029 , it and . Y. In addition to the , the yone /or . . Traceback 3029 rof 3,029 +. The at the end of the b. The @and DOS . The can be in the "BASE" "SPC FIL" Traceback 3029 it has for one hour. At , all the 6on the "cascade" into a pile at the bottom of the minute has elasped, the be restored to its "pre-cascade" See: Spanish Traceback Traceback II PZPAPN Traceback II : Traceback II 2930 Extinct , 1988 j; TSR; graphic O1 hour S: 2,930 7: PRA - , NAV, , NAV, or The Traceback II is a of the Traceback (3066) It is believed Traceback II pre @s the Traceback however the Traceback and reported c. As the Traceback , the Traceback II and xboth . The comments sfor the Traceback generally apply to the Traceback II the exception ris 2,930 +instead of 3,066 of Traceback II are: Traceback II-B: to Traceback II, the cascading effect s, the not be restored, instead the be hung requiring it to be powered off and See: Spanish Traceback Traceback 3029 PZPAPN Traveller : Traveller Bupt S: 1,220 - 1,237 7: PRhAK - , NAV 3.05+, 1.05+, {3.0+ The Traveller . It is reported ated in the . Traveller is a generic wof . /and . The Traveller is Y, the Traveller at the top of &the , as measured by the DOS Bby 1,840 the in high , as well as ~24 in low ~12's #moved. Traveller is , it /and . Y. It yone Y, or a DOS DIR 8is issued. Traveller of 1,220 to 1,237 at the end of the be no 5to the and in a DOS Traveller ;the "Traveller (C) BUPT "Don't panic I'm harmless <<--- "*.* It is if Traveller of Traveller are: Traveller-B: as BUPT-B, is 1,840 +, hooking ~21. It /and . or one a DOS DIR 8is performed. of 1,220 +. . 1,223 to 1,238 +. In both cases, the at the end of the b. The in the DOS not be . The can be all Traveller-B "*.* !--->> Traveller (C) BUPT .4 Don't p Traveller-C: is 2,032 +, hooking ~21. It /and . or one a DOS DIR 8is performed. of 1,261 +. . 1,261 to 1,278 +. In both cases, the at the end of the b. The in the DOS not be . The can be all Traveller-C "*.* !--->> Traveller (C) BUPT IE .4 Don't panic,I'm harmless !<<---" Traveller-C2: is a very minor of Traveller-C, and is Traveller-C3: is a very minor of Traveller-C, and is PZPAPN Tremor : Tremor 9(particularly in Germany) I: March, ; minor shaking of Germany S: 4,000 7: PRhEK - , NAV, 12.2 9503+, {3.0+, The Tremor in March, , and is gGermany. Tremor is a .and . It is an "anti anti- ;ing checks to avoid detection by software. cTremor Y, the Tremor at the top of &the ), hooking }15 and 21. If, however, upper or extended , the |most of its instead, a hook to it in sby the DOS Bby 4,288 , the ythe copy of ed to by the /SPEC variable. , the Tremor Y, adding 4,000 +to the The be hidden Tremor is The at the end of the b. The @and in the DOS , but actually mhad 100 to the years field in the is the vmarker for the Tremor is an , and no the the Tremor \a sluggish response to 8s and be detected by the , but not Tremor is not in Tremor has #present on the for over three months, a slight shaking effect of the contents of the Omay accompanied by a hang. The clear the Oand Othe on the monitor: "-=> T.R.E.M.O.R was done by NEUROBASHER / May- '92, Germany <=- -MOMENT-OF-TERROR-IS-THE-BEGINNING-OF-LIFE-" a few seconds, the to "normal". The Tremor is a full , dis are read into . As a are Yto check bchecksums/CRCs, or for the presence of the cverifying it isn't in not find the a. It checks for the presence of monitoring ly, Tremor is polymorphic, and an algorithmic approach must be used for detection. PZPAPN Trident : Trident See /and/or . possible The S: Depends on Present 7: PNRAK- NAV 3.05 9503+, The Trident entry represents a group of were written by members of the Trident writing group in The es are . /and/or . ws, and may or may not be . At least one of the es in group, Trident 90210, is a The are members of the Trident ^are: Trident 90210: , Trident 90210 is as the 90210 BH . It is a wof . .. Trident 90210 at the top of &the ), hooking and 21. , as by the DOS Bby 896 , it 647 be hidden the . The at the end of the b. The @and in the DOS not be . The in the "[90210 BH]" "John Tardy / TridenT" The DOS indicate all : The Trident.439: , Trident.439 is a wof . , but not xone . in the Y. It Pnot on the A: Trident.439 rof 439 the at the end of the b. The @and in the DOS not be . The in the "[NoLimit2] ohn Tardy / Trident CAVAGUCO4DVSTB" "*.CoM" limits cfive ain any : The Trident-444: , and as the Servant , Trident-444 is a wof . .. It xone . in the Y. It Pnot on the A: Trident-444 rof 444 the at the end of the b. The @and in the DOS not be . The in the "CAVAGUCO4DVSTB" "*.CoM" "John Tardy / TridenT" not function : The Trident.454: , Trident.454 is a wof . , but not xone . in the Y. It Pnot on the A: Trident.454 rof 454 the at the end of the b. The @and in the DOS not be . The in the "[NoLimit2] ohn Tardy / Trident CAVAGUCO4DVSTB" "*.CoM" limits cfive ain any : The Trident-611: , Trident-611 is as the Bugfix 1.1 . It is a wof . .. Trident-611 at the top of but &the ), hooking }1C and 21. , as sby the DOS Bby 624 , it rof 611 at the end of the b. The @and in the DOS not be . The in the "[TridenT]" "{V1.1 Bugfix}" "OROiOgOhOaOrOdO OZOwOiOeOnOeOnObOeOrOgO OmOaOdOeO OtOhOeO ODOUOTOCOHO-O5O5O5O OVOiOrOuOsO!O!O!O" It is what Trident-611 : The Trident.914: , Trident.914 is a fast wof . .. Trident.914 the top of &the hooking }1C and 21. , as sby the DOS Bby 2,080 , it Y, copied, or rof 914 be hidden . The at the end of the b. The @and in the DOS not to be the seconds field be set to "62". The in the "[ John Tardy / Trident ]" "Trapped in a spell of the Necromonicon" The DOS indicate all See: Darkray Flue PZPAPN Trigger : Trigger j; possible beeping speaker; S: 2,520 - 2,696 7: PRtAK - 2.1.7+, 12.2 9503+, The Trigger , and is Phalcon/Skism writting group in the . Trigger is a wof . /and . .. It is more or less a proto uses the Dark Angel Multiple Encryptor engine for its encryption, thus making it a polymorphic . It is the to use engine. cTrigger Y, the Trigger at the top of &the ), moving ~12's , as sby the DOS Bby 6,144 nby the , as well as 21. The hooking of ~21 is accomplished using a tunnelling technique, so mapping utilities not map it to the the Trigger , it accompanied by beeping on the speaker. rof 2,520 to 2,696 at the end of the . The @and in the DOS not be . The in the Trigger "Trigger by Dark Angel of Phalcon/Skism" "Utilising Dark Angel's Multiple Encryptor (DAME)" Trigger Pn't to do PZPAPN : Troi I: March, ; output not be written to input 6may not Michigan, S: 322 7: PRaCK - , NAV, {3.0+ The Troi in the state of Michigan in the United States in March, is a of . The the Troi , hooking Hly in the be no sby the DOS the Troi , it Y. If the Troi rof 322 at the end of the b. The @and the DOS not to the @. The s in the Troi "The Troi the Troi may notice d on the may not on the O, or output should be written to not actually be written to the of Troi are: Troi-2: Simultaneously in Finland and Australia in May, of Troi May 19, . It are Y, adding 512 +to the end of the b. The @and not be the DOS . One the ">>>-Troi Two -->" The remap the it is May, Troi-2B: hequivalent to Troi-2, Troi-2B is a very minor Troi-2C: hequivalent to Troi-2, Troi-2C is a very minor PZPAPN TSoft : TSoft TSoft-547, TurboSoft, TurboSoft-547 seconds set to "62"; Poland S: 547 7: PNCK - , NAV, The TSoft, or TurboSoft, . It gPoland. TSoft is a wof . .. It is the the TSoft Y, the TSoft yone . in the rof 547 at the end of the b. The @and in the DOS not be the seconds field in the #set to "62". The can be the 7in all TSoft "TurboSoftware" TSoft a portion of the of TSoft are: TSoft-598: A 598 of the TSoft xone . in the rof 598 +. The seconds field in the in the DOS be set to "62". The can be in the 7in all TSoft-598 "\dos" "T.Software -Death 1.0" TSoft-598 a portion of the : Poland See: PZPAPN Tu-482 : Tu-482 S: 482 7: PRhCK - , NAV, {3.0+ The Tu-482 , and is gthe . Tu-482 is a wof . larger cTu-482 Y, the Tu-482 at the top of &the ), hooking ~21. , as sby the DOS Bby 512 ~12's #moved. the Tu-482 , it larger 8K in rof 482 the at the end of the b. The and in the DOS not be . No in the 7in Tu-482 It is if Tu-482 PZPAPN : Tula Tula-419 S: 419 7: PRtCK - , NAV, 12.2 9503+, The Tula, or Tula-419, . It is gthe . Tula is a .. It Pnot all The the Tula Tula at the top of but &the ~12's moved. , as sby the DOS Bby 1,024 21 and 22 nby Tula in the Tula , it larger rof 419 at the $of the . The @and in the DOS to the @and One in the Tula "Tula .Sat" of Tula are: Tula-417: as the F-Word or F-You is an earlier of the Tula Its is 1,024 +, hooking 08 and 21. , Tula-417 by 417 the at the end of the b. The @and in the DOS to the . The can be ein all "Fuck You!" Tula-417 may \difficulties executing . , such as EDLIN. require 8line input. Tula-593: The Tule-593 is a 593 of the Tula . Its is 1,024 hooking }08 and 21. , Tula-593 /and . by 593 at the end of the b. The @and in the DOS not be . One can be at the end of Tula-593: "TR" Tula-593 may \difficulties executing . , such as EDLIN. require 8line input. Tula-635: The Tule-635 is a 635 of the Tula . Its is 1,024 hooking }08 and 21. , Tula-635 /and . by 635 at the end of the b. The @and in the DOS not be . No in the Tula-635 may \difficulties executing , such as EDLIN. require 8line input. Tula-1480: The Tule-1480 is a 1,480 of the Tula . Its is 2,048 hooking }03 and 21. , Tula-1480 /and . for any reason. by 1,480 by 1,480 to 1,494 In either case, the at the end of the b. The @and in the DOS not be . No in the PZPAPN Tumen : Tumen Tumen V.5 I: May, ; music and graphics; S: 1,663 7: PRhCK - , NAV, The Tumen, or Tumen V.5, Win May, ated in the . It is a wof . cTumen Y, the at the top of but &the , as measured by the DOS by 4,096 }09 and 21 nby the Tumen is , it Y. If Y, it of 1,663 at the end of the b. The @and in the to the @and The in the Tumen "Full moon tonight... The of Wolfbacks... U...U...U... demonstration , but you hear howl." "(C) Copyright MMA Company All rights reserved. Tumen -v0.5 was created in Tumen by group of three Wolfbacks at General aaffecting effects by Max Main consultant -- Tall Lazy Micle General Music_&_Video harmless effects by Alex BACKWOLFS OF THE WORLD, UNITE!!" The cset of s near the $of the the remaining at the end of the Tumen should produce graphic and musical effects upon event ring. of Tumen are: Tumen V1.2: , Tumen V1.2 is a later of the Tumen rof 1,255 at the end of the b. The @and in the DOS to the @and Tumen V1.3: , Tumen V1.3 is a later of the Tumen rof 1,242 at the end of the b. The @and in the DOS to the @and The can be in the 7in all Tumen V1.3 "Tumen.,v1.3" Tumen V2.0: in May, , Tumen V2.0 is a later of both Tumen and Tumen V1.2. In addition to the behavior of the modify the C: is present. It adds 1,092 +to the . The can be ein all "Be carefull... Hackers tonight... present was created in Tumen in v 2.0. (c) Max Soft corporation Hackers of the work, Unite!" Tumen V2.0 may May, PZPAPN Turbo : Turbo Turbo 448, @ , Turbo @, Polish-2, Nagytud bnot utilities Hungary S: 448 7: PRCK - , NAV, The Turbo, or Turbo 448, Iin Hungary in is a The the Turbo Y, the at the end of the 8Interpreter in nby the The Turbo is unusual in Pnot Y. Instead, it are reason [. For example, if the /is copied to B. both tby the by 448 at the end of the b. The in the to the @and bwas t. The can be eat the end of all "Udv minden nagytudasunak! Turbo @" interesting behavior of products are unaware of the Turbo 448's presence in not function the third bis read, the may fail due to a " to open the fourth of Turbo are: Turbo Kukac: Iin Hungary in is a wof . .. It dthe 8interpreter and any loaded TSRs, decreasing by 1,040 and 21 are nby the . Turbo Kukac for a reason by 512 at the end of the b. The in the DOS . The can be in all "Turbo Kukac 9.9" : Hungary PZPAPN Turn.557 : Turn.557 S: 557 7: PRhCK - {3.0+, The Turn.557 . Its . Turn.557 is a The the Turn.557 Y, the at the top of &the ), hooking , as sby the DOS Bby 1,632 , the Turn.557 rof 557 at the $of the b. The @and in the DOS to the @and . No in the PZPAPN Tver-308 : Tver-308 S: 308 7: PRaCK - 12.2 9503+, {3.0+ The Tver-308 . Its . Tver-308 is a wof . cTver-308 Y, the Tver-308 in a "hole" in al , hooking ~21. , as sby the DOS not be the Tver-308 , it rof 308 end of the b. The @and in the DOS to the and . The in the 7in all Tver-308 "G.J.V. Tver PZPAPN Twin Peaks : Twin Peaks (failures; Australia S: 1,310 7: ONCK - {3.0+ Dhidden The Twin Peaks gAustralia in Twin Peaks is a the Twin Peaks yone . on the C: Q. The Othe , and to the DOS prompt: "Welcome to Twin Peaks.. Your PC now has the Twin Peaks the Twin Peaks mthe 1,310 be no 5to the @and in the DOS . The a, as are the "*.com*" ?com\" ?exe ?com" See: VirDem PZPAPN Twin-351 : Twin-351 /351, Twin acreated & hidden attributes; TSR S: 351 7: SRsA - Spawning , NAV, Dhidden The Twin-351 . Twin-351 is a spawning . It creating a corresponding . Zin place of the . The Twin-351 is Y, Twin-351 as a low TSR of 656 nby the , Twin-351 Y. Instead of altering the . b, Twin-351 creates a 351 corresponds to the of the . b. For example, if the ZABC. X, Twin-351 create ABC. 7. The 351 acreated by the the hidden and attributes set so aare not in the As a of the hidden . b, the Twin-351 . If Twin-351 is already , it corresponding . b. If Twin-351 wasn't already Twin-351 hide the hidden aif the Twin-351 in PZPAPN Twister : Twister Twister.451 S: 451 7: PRhCK - Dhidden The Twister or Twister.451 . Its . Twister is a wof . cTwister at the top of the ), not moving ~12's and , as sby the DOS Bby 1,408 the , Twister rof 451 at the $of the b. The in the "Twister (c) The Twister is unable to determine it has b, as a be re tby the , adding an 7can be eat both the $and the end of the of Twister are: Twister.863: , Twister.863 is an 863 of the Twister . Its is 2,208 +, hooking ~21. Y. Like the , it cannot recognize prior vs of a, so it Twister.863 rof 863 +for vpresent on a b. The at the $of the b, as well as the end of the bin the case of re a. The @and in the DOS to the @and . The can be in the "Twister (c) Unlike the of the prevent the gviewing the Twister.1015: , Twister.1015 is an 1,015 of the Twister . Its is 2,528 +, hooking }21 and 24. Y. Like the , it cannot recognize prior vs of a, so it Twister.1015 rof 1,015 +for vpresent on a b. The at the $of the b, as well as the end of the bin the case of a. The @and in the DOS to the @and The can be in the "Twister (c) "C:\ of the adds the ability to copy of in the C: Qroot Y. Twister and Twister.863 did not ability. Twister.1767: , Twister.1767 is Twister.1015. Its is 4,032 +, hooking }08, 09, 10, 1C, and 21. Y. Like the , it cannot recognize prior vs of a, so it Twister.1767 rof 1,767 +for vpresent on a b. The at the $of the b, as well as the end of the bin the case of re a. The @and in the DOS to the @and . The can be in the "Twister" "C:\ "We are demons to , angels to "So Far... So Good... So What?" "Children of the Damned" heals all wounds" it may starting scrolling the gleft to right, typing out on the O. Like Twister.1015, xthe copy of in the C: Qroot PZPAPN Typo : Typo Mistake , 1989 BSC; -TOM; garbled printout Israel S: N/A 7: BRt - , NAV, ], NAV, CleanUp, or DOS SYS The Typo in Israel by Y. Radai in , 1989. is a taking up 2K at the upper end of it has The major symptom be noticed on Typo certain 6in printouts are always replaced phonetically 6. Since the substitutes Hebrew letters for Hebrew letters, the was most likely written by one in Israel. Digits in numbers may be transposed or replaced numbers. The substitutions impact printouts , the Oand data in aare not affected. The Typo structurally to the Ping Pong and may be a of Ping Pong. It can be removed by using M M, CleanUp, DOS SYS 8, or just about any Ping Pong dis PZPAPN Typo : Typo Fumble, 867, , 712, Typo-712 Extinct , 1989 -TOM; garbled printout (see England S: 867 7: PRtC - , NAV, ], or The Typo to the Typo garble data is sent to the parallel port it has activated. Unlike the , the . xgeneric creported by Joe Hirst of Brighton, UK, in , 1989. The Typo aon even-numbered days. of Typo /are: Typo-712: Typo-712 is a 712 of the Typo xall . ain the Y, adding its 7to the end of the b. Its portion is 224 and hooks ~16. It may intermittently interfer input. Typo-867B: Typo-867B is a minor of the Typo . It xall . ain the Y. It a 480 ,TSR hooks ~16. rof 867 at the end of the May, PZPAPN : Tyst atruncated to 3,424 @set to 4-04-92; S: 3,424 7: ONAK - 7.00+, ]2.17+, 7.00+, 2.17+ The Tyst . Its . Tyst is a X, and .SYS the Tyst Y, the Tyst copy the s of the the C:\DOS Gto the G. The the ;the but instead of pure copy of the Tyst of 3,424 +. The @in the DOS Gof 4-04-92. The be set to the zero /SPEC, may be created in the The Tyst Os the ever an "Tyst f r fan.. Jag spr nger!" 'the , the can be the 7in all Tyst "C:\DOS\*.*" /SPEC" "/C copy" "NUL" "RoTh" PZPAPN UFA-1201 : UFA-1201 S: 1,201 7: PNCK - NAV, The UFA-1201 , and is gthe . UFA-1201 is a the UFA-1201 Y, the UFA-1201 ytwo . in the 1,201 at the end of the The @and in the DOS not be . The in the UFA-1201 "*.com" It is what UFA-1201 may do PZPAPN : Ugur Mumcu Turkey S: 1,297 - 1,313 7: PRhAK - 12.2 9503+, {3.0+ The Ugur in Turkey in . Ugur is a wof . /and . .. It "commemorates" turkish journalist Ugur Mumcu whom passed away in early cUgur Y, the Ugur at the top of &the ), hooking ~21. and , as sby the DOS not be ~12's not be moved. the Ugur , it for any reason. . the Ugur rof 1,297 +. . by 1,301 to 1,313 +. In both cases, the at the end of the b. The @and in the DOS not be . The in the 7in all Ugur "UGUR MUMCU LMEDi.." turkish phrase translates roughly to: "Ugur Mumcu has not died" PZPAPN Ultimation : Ultimation I: March, 4; hidden starting "_" created; S: 23,802 7: ONE - {3.0+ The Ultimation in March, . Ultimation is a. Unlike most one saves a copy of the the Ultimation Y, the Ultimation yone . in the G. The cmakes a copy of the ccharacter of the base 3to "_", and sets the hidden attribute. The s the 23,802 +of the host 7. . larger 23,802 r, while those smaller 23,802 "23,802 . The @and in the DOS value. The can be in the 7in Ultimation "PATH *. "I'm bored." "Screw you." "Life is a drag." "kufc fof." "Ouch! Don't hit me so "Floppy QA: is flooded. Please insert J cloth." "Murderer." "You tby ULTIMATION corp." "Go Hly to jail. Do not pass go. Do not collect $200." "Ah ha! Caught you." "Copy protection V23. Please re- , one of the may be Nas a , possibly accompanied by hang, To dis vof the Ultimation , and remove the hidden attribute the . bcopies start the "_" character. The need to be re d so ccharacter of the is restored to its value. PZPAPN Under 7 : Under 7 Paradise S: 320 7: PRaCK - 12.2 9503+, {3.0+ The Under 7 . Under 7 is a wof . cUnder 7 in low , hooking ~21. It access the and a hang may the Under 7 , it rof 320 at the end of the b. The @and in the DOS to the @and . One can be eat the end of the 7in all Under 7 PZPAPN UnExe : UnExe S: 425 7: PNCK - , NAV, {3.0+ The UnExe . UnExe is a non- wof . .. It the UnExe Y, the UnExe yone . in the G. If G, it may of 425 at the end of the The @and in the DOS to the @and . The in the UnExe 7in all UnExe "Viru" "1 /M" The UnExe Done . in the PZPAPN : Unk I: March, ?s corrupted S: 1,015 7: PRhAK - , NAV, The Unk . Its . Unk is a /and . cUnk Y, the Unk at the top of but &the , as sby the DOS Bby 3,008 the Unk , it for any reason. The hides the a, so it is not noticeable to the the Unk rof 1,015 at the end of the , adding an 1,015 The @and in the DOS Gmay to be corrupted. One can be in the 7in Unk "(c) Szegedi & Farmosi Kiss." It is what Unk PZPAPN Urfydus : Urfydus I: May, j; TSR Italy S: 2,638 - 2,653 7: PRsAK - , NAV, {3.0+ The Urfydus in Italy in May, is a wof . /and . ., but not very small . /and . . Its is italian, and translates to "Nasty" in english. The Urfydus is as a low TSR of 3,152 +, hooking }21, CC, and F8. Urfydus is , it /and . Y. If the ga write protected L, the attempt ythe ing in the hanging while it to write to the write protected Urfydus of 2,638 to 2,653 +. The at the end of the b. The @and in the DOS . The can be in the 7in all "C:\SYSTEM\ .MMAND. It is what Urfydus PZPAPN Uruguay : Uruguay Uruguay 3 k; music; Uruguay S: 2,552 - 2,637 7: PRhA - 7.00+, The Uruguay, or Uruguay 3, and is gUruguay. Uruguay 3 is a /and . , but not .. Uruguay 3 and the later s of are polymorphic, using a complex encryption mechanism to complicate ability to be detected by products employing ning technology. An algorithmic approach is required to detect the Uruguay 3 Y, the Uruguay 3 at the top of &the , as sby the DOS Bby 5,120 ~mapping indicate nany use both ~13 and 21 via a tunnelling technique. the Uruguay 3 , it and . rof 2,552 - 2,637 at the end of the b. The @and in the DOS not be . The in the Uruguay 3 notice slow response to 8. The s be accompanied by tones on the speaker. "'Uruguay-#3' med in Montevideo (URUGUAY) by F3161. 06/92 is a research - DO NOT DISTRIBUTE" is not aas it is of Uruguay are: Uruguay 4: on the Uruguay 3 Uruguay 4's is 5,456 +. It adds 2,718 to 2,859 +to the . /and . [and bopen for read- . The Nby the accompanied by a tune on the speaker is: "'Uruguay-#4' med in Montevideo (URUGUAY) by F3161. 07/92 is a research - DO NOT DISTRIBUTE" : Uruguay Uruguay 5: on the Uruguay 4 , Uruguay 5's is 8,352 of Uruguay at all, but stays the presses CTL-ALT-DEL: "'Uruguay-#5' med in Montevideo (URUGUAY) by F3161. 08/92 is a research - DO NOT DISTRIBUTE" As Uruguay 5 Pnot , it is included here for zal purposes, and is not used for product testing. : Uruguay Uruguay 6: on the Uruguay 5 Uruguay 6's is 9,504 +. It adds 4,879 +to the . /and . [and bopen for read- . The ris hidden Uruguay 6 is . The DOS detect all Uruguay 6 is in . The Nby the accompanied by a tune on the speaker is: "'Uruguay-#6' med in Montevideo (URUGUAY) by F3161. 11/92 is a research - DO NOT DISTRIBUTE" : Uruguay PZPAPN Uruk-hai : Uruk-hai S: 394 7: PRxCK - , NAV 3.05 9503+, {3.0+ The Uruk-hai , and is . Uruk-hai is a wof . /progams, cUruk-hai in a "hole" in low al , hooking ~21. , as sby the DOS not be the Uruk-hai , it Y. If Y, it the Uruk-hai rof 394 at the end of the b. The @and in the DOS to the @and . The can be in the 7in all Uruk-hai "V 1.0 Igor, The Uruk-hai are upon you!" of Uruk-hai are: Uruk-hai 300: A 300 of the Uruk-hai resides in a "hole" in al , hooking ~21. It Y, adding 300 . The the end of the b. The @and the DOS to the @and . The can be in the 7in all Uruk-hai 300 "Igor v.2.0 The Uruk-hai and winged Nazgul strikes again!" Uruk-hai 361: A 361 of the Uruk-hai at the top of &the ), moving ~12's and , as sby the DOS Bby 1,024 nby the . It Y, adding 361 . The the end of the b. The @and the DOS to the @and . The can be in the 7in all Uruk-hai 361 "Igor v.3.0 It was last assault of the Uruk-hai... We shall meet in Valhalla!" PZPAPN damage; k; long load S: 576 7: PNE - , NAV, The in the . It is generic wof . Y, it search the Gfor the b. If it finds one, it attempt to yit. b, it hang the leaving the Qlight on, however most of the successful. by 576 to 586 at the end of the may go to its to find #removed, and the ) has damaged, thus rendering the Minaccessible. damage can be repaired using Norton MDoctor, or M the /P option. \longer normal load Y. The longer normal load is due to the searching for a y, and uthe candi bif one was PZPAPN V-311, -311, Com2Con d to /MAND.CON S: 311 7: PNCK - 1, NAV, The 311, or V-311, . It ated in the is a 311 is Y, the check the to see if the seconds value is equal to one of 16 values. If it was equal to one of those 16 values, be re d to /MAND.CON. Whether or not the , the in the by 311 +, the at the end of the b. The in the be modified to be 11:19:32, the vmarker for . The @in the Gis not alter the battributes for the bin the G. In particular, bits 8 through 15 be reset, may produce unexpected s in en ments make use of bits. PZPAPN -492, RC492, 492 S: 495 - 508 7: PRfCK - ], NAV, The and is is a w, it 492 is Y, the in high but &the is not reserved by the nby the . At the of going , the check to determine if .on the C: t, if it isn't, 492 is , it yany . .on the A: Qis the way to .on A:. 495 to 508 +. The at the end of @and the 3to the @and Pnot to do PZPAPN Leapfrog, V516, 516 S: 516 7: PRCK - ], NAV, The . It is is a wof . .. It The Y, the in a "hole " between MSDOS and the DOS Stacks. area labeled DOS Data. nby the be no , it had an greater rd by 516 +, the at the end of the Pnot to do . The sample was not a natural , so may be a research PZPAPN -600, V600, 600 S: 600 7: PRhCK - ], NAV, The , and is is a wof . 600 is Y, the at the top of &the ). The DOS indicate are 2,048 +less expected. Pnot move the 600 uses }21 and 24. 600 is , it of at least 600 by 600 +, and the at the $of the It is PZPAPN -707, V707 S: 707 7: PRtCK - , NAV, The . It is is a wof . at the top &the ). It move the cannot be 707 makes use of ~21, map to the in high be 720 +less expected. 707 is , any . tby the rof 707 +, the at the end of the b. If Y, it It is PZPAPN -711, 699, V711-2 S: 704 - 719 7: PRhC - ], NAV, The , and comes the is a wof . Pnot 711 is Y, the at the top of &the is reserved. The hooks }08, 13, and 21. The DOS indicate is 704 +less what the expects. The is not 711 is , any . had an of at least 1600 tby the by 704 to 719 +, and the at the end of the 711 may notice occasional It is occasionally hang the PZPAPN -948, V948, 948 S: 948 7: PRhA - ], NAV, The , and in the is a wof . a, and 948 is at the top of &the ). The not be in use by the reserved. }1C and 21 nby the 948 is , and . /or . for any reason tby the the exception of by between 950 to 963 +. In the case of ., the a portion of the stack space in the b, so the 5. In all cases, the @and s in the Gare not mthe at the end of the It is PZPAPN 1014 S: 1,014 - 1,028 7: PRhA - {3.0+ The 1014, or 1014, . It is gthe 1014 is a of . /and . .. It smaller The 1014 at the top &the , as sby the DOS Bby 1,040 }10, 21, and 60 1014. , the 1014 /and . rof 1,014 to 1,028 at the end of the b. The @and in the DOS not be . No in the The 1014 alter . smaller , adding 2 to 30 +to the aare not t, and continue to function PZPAPN RCE-1049, 1049 and S: 1,049 7: PRhA - , NAV, 2.17+ The 1049 . It in the is a wof . a, and Pnot 1049 is Y, the at the top of &the be 1,056 and is reserved. The is not moved. nby the 1049 is , the Y. The , however, yvery small . by 1,051 to 1,064 +, the at the end of the 1049 is unusual in 7to support a 7via a special ~21 call the 7may #used by the author developing the to stop it 1049 occasionally actually be 1049 Pnot do See: Alfa PZPAPN V2144, 2144, 2144-B S: 2,144 7: PRhAK - ], NAV, {3.0+ The 2144 , and is the is a wof . 2144 Y, the at the top &the ). The DOS indicate values show 4,608 +less expected. Pnot move the . The Hly alters the ~page in Zthe 2144 is , and greater in reason tby the by 2,144 +. . by 2,144 to 2,159 +. In both cases, the at the end of @and in the and Pnot hide the It is 2144 2144 are: 2144-B: in March, hequivalent to the . The ' encryption has #slightly modified. PZPAPN : V-1n V-10, V-11 I: May, S: 113 or 624 7: ONCK - The V-1n group of es was in May, group's . The es in entry are earlier s of the Ein the V-3n entry. Unlike the Ein the V-3n entry, the Ehere are es. The earliest of the es, V-10, entry, member of the group &. Both of the es in entry the V-10 ythe third . in the c624 +of the . The ed to the DOS prompt. 'having the c624 +of the host 7of the V-10 @and in the DOS to the @and . If the host smaller +, it 628 larger r. The can be in V-10 "V - V-10 Pn't do , destroying the host Member(s) of the V-1n group of es are: V-11: A later of the V-10 s the c113 +of the . x. The in the "V - 1.1". May, See: V-3n PZPAPN : V-3n V-30, V-31, V-32 j; seconds in set to 00 S: 268 7: PNCK - The V-3n es was . The earliest of the es, V-30, entry, ^members &under . All of the es in ^are ws of . V-30 is Y, the V-30 yone in the G. If .resides in G, it may V-30 268 +. The at the end of the The seconds in the in the DOS be set to "00", is the marker the uses to determine if the bis already t. The ein all V-30 "*.com V - V-30 Pn't do Members of the V-3n es are: V-31: to the V-30 adds 266 to the . x. The is now: "*.com V - 3.1". V-32: to the V-30 adds 274 to the . x. The is now: "*.com V - 3.2". See: V-1n PZPAPN V270x : V270x 268-Plus I: May, S: 268 - 272 7: PNC - NAV, 12.2 9503+, The V270x Win May, . V270x is wof . a. It V270x is Y, the yup to five . in the G. The by 268 +. The second rby 269 +. The third through fifth by 270, 271, and 272 +, respectively. In all cases, the at the . The and in the not be V270x s to not do PZPAPN : V351 V-351 fail to function S: 351 7: PRhCK - ]2.17+, p2.10+, NAV 3.05 9503+, 12.2 9503+, 2.17+ The V351, or V-351, . Its . V351 is a wof . cV351 Y, the V351 at the top of &the ), hooking ~21 at address 7D00. ~12's #moved. the V351 , it rof 351 at the end of the b. The @and in the DOS not be . One in the 7in V351 the V351 fail to function PZPAPN : V388 V-388 S: 388 - 403 7: PRhCK - , NAV, {3.0+ The V388, or V-388, , and is gthe . V388 is a wof . .. It is not likely to "a serious threat in its present form. cV388 Y, the V388 at the top of &the ), hooking ~21. , as sby the DOS Bby 102,400 ~12's #moved. the V388 , it rof 394 to 403 at the end of the b. The @and in the DOS not be . No in the 7in V388 the V388 \frequent PZPAPN : V483 S: 483 7: PRAK - The V483 . Its . V483 is a wof . /and . V483 is becoming ythe next . /or . Y, it t. At , the "hung has completed uthe V483 483 +. The at the end of the . The @and in the DOS to the @and . V483 hex "FF" 6, thus permanently corrupting them. usually not PZPAPN : V651 Eddie 3, Sofia, S: 651 7: PRtA - , NAV, : CleanUp, or The V651, or Eddie 3, in Sofia, by Vesselin Bontchev. V651 is believed to written by the same author as >, V1024, and V2000. is a generic wfor . /and . The V651 is Y, the . Using the DOS , as well as Bby 688 Later, as of 651 +or greater are tby the by 651 not be seen by performing a present in . The Mspace adjusted by the Mspace due to the 's activities cannot be seen. Powering off the (ing clean L, followed by issuing a in the correct Nas well as the actual space on the acan be easily identified as the "Eddie Lives." s near the end of the be 651 +longer expected is not present in A side effect of the V651 lost clusters may if the 8is used. While not for all a, the number of Ureported by be much higher statistically V651 is present. Unlike >and V2000, Pnot any bopen. It See: Alfa > V1024 V2000 PZPAPN : V800 Live Death I: May, S: 800 7: PRC - ], NAV, : CleanUp, ], or The V800, or Live Death, Vesselin Bontchev in May, . The V800 is a self-encrypting w, and it Pnot t to #written by the same person as the since many of the same techniques are used. The of the Live Death the :the "Live Death" it cannot be seen in aas the The is run on a , the V800 . In the process of |ing , it by 16K, using 8,192 +for in the top of . It hook , every bis attempted to be the check to see if it is a candi @for Whether the tdepends on the of the . it is attempted to be Y. In no event is a . bsmaller 1024 t, but not all . aover 1024 +are teither. The V800 increasing by 800 v. It Pnot, however, amore eight of V800 are: V800M: Very to V800, the major difference is V800M aon both bopen and putting into the " category. the 8,192 not mthe "Live Death" in it. PZPAPN : V801 V791, V-801, 805 I: March, S: 791 7: PNAK - , NAV, : CleanUp, or The V801 in March, gthe is a wof . . It V801 is Y, the search the Gfor an . If one is e, it ythe . If an is not e, the search for an in the G, and V801 by 791 to 808 +. . mthe $. . mthe at the end of the b. The @and in the not be may cause a hang attempted to be V801 Pn't to do PZPAPN : V82 balternation; S: 2,000 7: PRhAK - 2.17+ The V82 . The submitter bwas *. V82 is a wof . /and . , and internally , but not actually ;a replicating copy of the The V82 is Y, the V82 at the top of &the , as sby the DOS Bby 8,192 ~12's moved. nby the . It |a 48 ,portion in low , V82 either yor alter . /and . In the case of . over 2,000 at the end of the tmany s as the Pnot recognize the already it is later Yby the by 2,000 vof the on the b. V82 yor alter . asmaller 2,000 tby the fairly large, and usually not many the part of the host . In most . a, however, the not actually ythe bbut a portion of the ;ing 00h 6, thus altering it. 7may actually be a trojan if it is by the host It is what V82 See: Phoenix Phoenix 2000 PZPAPN V1024 : V1024 >III, , Diamond, 1024 I: May, TSR; S: 1,024 7: PRA - , NAV, The V1024, or >III, by Daniel Kalchev. V1024 is a generic wof . /and . a. It is believed to written by the same person wrote >and V2000. may actually be an earlier of the it has many of the same characteristics, Pnot all for any reason. The V1024 is Y, the . At , it checks to see if several }are %monitored, 1 and 3. If }1 and 3 are monitored, V1024 allow the to run, but any subsequent hang the and V1024 V1024 is by 1,072 The mremapped several }by altering location in the ~map page in now be controlled by V1024. V1024 , the is greater in 1,024 +. Both /and . aare .is not by 1,024 if the is present in and a DIR is done. V1024 acan be identified by a s very close to the end of a. The is: '7106286813'. V1024 Pnot ;any of V1024 are: Diamond: to V1024, Diamond's main difference is at the top of &the , and , as measured by the DOS ChkDsk Cby 1,072 }08 and nby the Diamond-B: to Diamond, #slightly to avoid detection by See: Alfa > Diamond V651 V2000 Ah Damage PZPAPN V2000 : V2000 >II, , Travel , Eddie 2000, Apocalypse II I: 1989 TSR; . X, .OV? j(see ); crashes; cross-linked S: 2,000 7: PRA - , NAV, : NAV, or The V2000, or >II, is a generic w. The samples of *, where it was by Daniel Kalchev and Niki Spahiev. V2000 X, and Overlay a, as well as Y, the , and it has not already an execu for any reason, it is tif it hasn't not be shown if the V2000 present in a DIR 8is issued. Issuing a in cross-linking of since the zmay not to match the entries in the (FAT). the V2000 \unexpected crashes, ing in lost data. (able due to the modification of .or the hidden One of the dtwo in the a, thus accounting for the of Travel used in "Zopy me - I want to travel" "Copy me - I want to travel" are reports the V2000 looks for and kthe written by Vesselin Bontchev are attempted to be would explain the presence of the dcopyright notice in the "(c) 1989 by Vesselin Bontchev" of V2000 are: V2000-B: (Die Young) to the V2000 , the main difference is "Zopy me - I want to travel" is now " the Good die young..." or "Mnly the Good die young..." and the encryption used by the different. is actually the predating V2000. Apocalypse II: Apocalypse II was Win May, . It is to V2000 and V2000-B, the major it no longer crashes the , and the "Zopy me - I want to travel" is now "Apocalypse II begin!!". modifies the , but not yious copy of the See: > V651 V1024 PZPAPN V2100 : V2100 2100, S: 2,100 7: PRtA - , NAV, : NAV, or The V2100, or 2100, in Sofia, Vesselin Bontchev in . It is a generic of . X, and overlay a. It s to released into the public domain on an was uploaded to a BBS in W. While not all copies of U are carriers of was one exists has the embedded in its 7. The cannot be detected on Trojan using search algorithms for . V2100 is believed to #written by the author of The V2100 is Y, the top of the ). The top of ed by be lower expected by 4,288 +. Likewise, Bby 4,288 +. At same , V2100 be hidden by the , it yany . or overlay of at least 2100 for any reason. The simple act of copying an execu in both the source and target becoming be 2,100 +longer, hide the isn't noticeable Hories are listed. In cases, to be 2,100 +smaller expected if the is present in the V2100 notice ring, along cross-linking of a. Due to amay "corrupted. Uare truly exist whether or not the present in A side note on the V2100 : if the the Anthrax , V2100's introduction in the Anthrax again %present in the effect s because Anthrax stores a copy of on the last of the V2100 , it searches the last 16 cylinders of the for a copy of Anthrax. If V2100 finds the hidden copy of Anthrax, it copies it into the . On the next gthe M, Anthrax again be active on the PZPAPN : V2P2 Chameleon Research Minnesota, S: 1,426 - 2,157 7: PNCK - , NAV, The V2P2 is a research written by Mark Washburn and distributed to authors in , according to its author, has not #released. is a generic wof . the V2P2 Y, it ythe bit finds in the is not . The adds its 7to the end of the b, and the rbetween 1,426 and 2,157 Like the 1260 uses a complex encryption method. In fact, the encryption used the 1260 is one of several possible encryptions V2P2 may produce. As a ning software often identify the 1260 in a %both 1260 and V2P2. identification is entirely valid as 1260 is a special case of V2P2. See: 1260 Casper V2P6 PZPAPN : V2P6 Research Minnesota, S: 1,946 - 2,111 7: PNCK - , NAV, : NAV, or The V2P6 is a research written by Mark Washburn and distributed to authors in , according to its author, has not #released. is a generic wof . the 1260 and V2P2 the V2P6 Y, it ythe bit finds in the is not . The adds its 7to the end of the b, and the rbetween 1,946 and 2,111 Like the 1260 and es by Mark Washburn, uses a complex encryption method. The encryption method used by V2P6 is more complex used in V2P2, but less complex used in the last ^, V2P6Z. Like V2P2, an algorithmic approach must be used to identify of V2P6 are: V2P6-B: to V2P6 in behavior, by 1,990 to 2,261 V2P6Z: to V2P6 in behavior, is the last ^to be by researchers. It employs a more complex encryption algorithm requiring an algorithmic search to identify a. V2P6Z adds 2,076 to 2,364 +to the . See: 1260 Adolph Casper V2P2 PZPAPN Vacsina : Vacsina , 1989 TSR; . X, .BIN, & .SYS j; "beeps" S: 1,206 7: PRsA - , NAV, : CleanUp, ], or The Vacsina 1200 and can be are at least 48 of the Vacsina as the TP not all of them . Later s of are included in under the "Yankee Doodle". Generally, the Vacsina xboth . /and . a, as well as .SYS and .BIN cconvert it into . /format by changing the MZ or ZM identifier in the ctwo +of the bto a JMP instruction and adding a small piece of relocator 7, so the . bcan be it were One sign of a Vacsina tmay "beep" ?in the 3to the were of Vacsina are: TP04VIR: a, changing them internally into . may beep Y, and may be identified by searching for the "VACSINA" along the second gthe end of the ;ing a 04h. of Vacsina is a poor replicator, and while it always convert a to . bformat, adding 132 +, it Pnot always TP05VIR: to TP04VIR, except the second to the last ,in the bis now a 05h. kmay TP06VIR: to TP05VIR, except the second to the last the bis now a 06h. TP16VIR: to TP06VIR, the second to the last ,in the bis now 10h. TP23VIR: to TP16VIR, the second to the last ,in the bis now 17h. The "VACSINA" no longer s in the TP24VIR: to TP23VIR, the second to the last ,in the bis now 18h. TP25VIR: to TP24VIR, the second to the last ,in the bis now 19h. See: Penza Yankee Doodle PZPAPN Vampire : Vampire S: 417 7: ONCK - 12.2 9503+, The Vampire . Its . Vampire is a the Vampire yone . in the mthe c417 by the The @and in the DOS to the @and . The in the 7in all "[Vampire] [DS] [OEC-G001] NJ stack overflow." "Insuffiscient too big to fit into usually in the third N, and the ed to the DOS prompt. PZPAPN Varicell : Varicell Varisela S: 1,482 7: PRhAK - NAV 3.05+, 12.2 9503+, {3.0+, 1.05+ The Varicell, or Varisela, Its . Varicell is a wof . /and . It is a fast w, and cVaricell Y, the Varicell at the top of &the ), not moving ~12's , as sby the DOS Bby 1,536 13, 1C, 21, and 22 are nby Varicell in the Varicell , it , or copied. rof 1,482 be hidden by the it is . The @and in the DOS not be . No in the Varicell It is what Varicell PZPAPN : VCL 7Zero J: May, S: 576 7: PNCK - , NAV, 12.2 9503+, o, NAV 1.05 9503+ The 7Zero, or the VCL created, May, . It ated in the or Canada. 7Zero is a wof . .. The es listed &under were created by a of Nowhere Man's V.C.L., a whose purpose is to simplify the task of writing 7Zero Y, the 7Zero search the Gto locate an y. If it finds an , it yit, and the host continue [. If the 7Zero Pnot find an , it Othe "** CODE ZERO **" 7Zero rof 576 +. The at the end of the b. The @and in the DOS . Four can be ein the "*.* *. "** CODE ZERO **" 7Zero Nowhere Man/[NukE]" es created VCL are: Angel: Angel is a VCL generated It is a wof . .. Angel xone . in the rof 1,681 at the end of the b. The @and in the DOS not be . The in the Angel "*.* *. "CHKLIST.MS" "Your computer was ANGEL" "Don't be afraid it's harmless!" "Today is 21st of _, my birthday!" "Be young, be crazy, be nice, be ANGEL!" "HI! Don't forget: ANGEL is watching you!" (FAT) <may Ms. all of the . t, the Othe "HI! Don't forget: ANGEL is watching you!" _21st of any year, the in graphic "Your computer was ANGEL Don't be afraid it's harmless! Today is 21st of _, my birthday! Be young, be crazy, be nice, be ANGEL!" Arwen3: Arwen3 is a VCL generated . It xone . bin the rof 722 at the end of the The @and in the DOS not be . The in the Arwen3 "Arwen3 is a fat sow" "[VCL]" B-52: B-52 is a VCL generated generated by the generation . B-52 is wof . .. It xtwo . rof 3,808 at the end of the b. The and in the DOS not be . Many can be in the 7in all ".. *.* *. "c:\dos\*.com" "AT&FL0M0DT911" "[MPC] Call 911" "*.exe *.com .. *.exe" "Abort, Retry, Ignore, Fail?" "Fail on INT 24" "I'm hungry! Insert PIZZA & BEER in to QA: and" "Strike any key ready..." "Impotence Vreading 's dick" too big to fit in "Cannot load /MAND, halted" "I'm sorry, Dave . but I'm afraid I can't do "[vcl] March, Beva 32: Beva 32 is a VCL generated . It xone . bin the G, or one Gup in the Gstructure, rof 562 the at the end of the b. The @and in the DOS . The Beva 32 on the 22nd day of any month, at attempt to "Whats wrong my computer, you ask? Well I do believe it has ma nice day!" The in the , as are the "[VCL/BEv]" ".. *. : Oregon, Beva 33: Beva 33 is a VCL generated . It xone . bin the G, or one Gup in the Gstructure, rof 519 the at the end of the b. The @and in the DOS . The Beva 33 1st of any year, at attempt to "Happy New Years, Eat my viril lware!" The in the , as are the "[VCL/BEv]" ".. *. "-=BEv#A33=-" : Oregon, Beva 96: Beva 96 is a VCL generated . It xone . bin the G, or one Gup in the Gstructure, rof 516 the at the end of the b. The @and in the DOS . The Beva 96 4th of any year, at attempt to Othe "Happy 4th! Hope you enjoy your messed up computer!" "-=BEv#A96=-" The in the , as are the "[VCL/BEv]" ".. *. : Oregon, : Big is a VCL generated March, . It xseveral . ain the rof 676 at the end of the The @and in the DOS not be . The in the ".. *.* *. "[VCL] VIRUSES!! HACKERS!!" "Who ya gonna call???Not McAfee Associates!!! Suck BIGTIME!!! [DJ]" kmay frequently are March, CD Player: CD Player is a VCL generated . It xall of the . /and . in the Y. A sound to the sound made by a "scratch" on a record is emitted on the speaker, and the is re (ed. mthe +of the host by the CD Player 7. The @and in the DOS not be Chicken Pox: Chicken Pox is a VCL generated . It xthree . the G, or along the path, by 604 at the end of the b. The @and in the DOS not be kfrequently as well as write protect gwrite-protected 7Zero-652: A 652 of the 7Zero . It was created by Nowhere Man by recompiling the 7Zero 1.0. xone . rof 652 at the end of the b. The @and in the DOS not be . The in the and are not d samples: "*.* *. "** CODE ZERO **" "[VCL] [ 7Zero] Nowhere Man, [NuKE] '92" all of the . in the [of the next in a Oof the "** CODE ZERO" tby the 7Zero-652 becoming locked out Cops-1: Cops-1 is a VCL generated . It xfour . ain the higher level rof 1,083 at the end of the b. The @and in the DOS not be . The Tthe Cops-1 ".. *. "Your Computer has #one of the many" "to be tortured by the CoPs-1 , one" "of the many to come. Made by CoPs in "I guess today really isn't a lucky" "day for you, because you "hit the CoPs-1 "It has #a year since "released, and the CoPs-1 is still going" "strong. Was Made By CoPs" "in .Your Computer Has #Honored" "By %Able To Witness TheWrath of The" "Infamous CoPs-1 . Made By CoPs in Rapid beeping and a hang may ever an Crasher: Crasher is a VCL generated xfive . ain the =or a higher level rof 594 at the end of the The @and in the DOS not be . The in the Crasher ".. *.* *. "CRASHER" Dial: Dial is a VCL generated March, . It xfour . ain the rof 599 at the end of the The @and in the DOS not be . The in the 7in all ".. *.* *. "AT&FM0L0DT9008201110" (Note: "[VCL]" The starting "AT" is a to dial the included phone number on Hayes compatible modems. Area 7900 phone numbers typically carry a per minute connection fee, and the owner of the phone number Pn't ma connection to : North America March, Diarrhea: Diarrhea is a VCL generated . It xone . bin the G, or along the path, by 931 at the end of the Diarrhea on Fridays [of an s in the Oof the "EAT MY DIARRHEA!" in graphic 6made of ASCII line &in normal 6: "--GG Allin & The Texas Nazi". If ANSI.SYS is loaded, the be in red, the second line %in yellow. Diarrhea6: Diarrhea6 is a later of Diarrhea. It adds 1,221 +to the . x. Like the on Fridays. In the case of Diarrhea6, it trojanize an . in the c596 the trojanized . Y, it Othe gthe Diarrhea a flashing border has to the be bright blue if ANSI.SYS is loaded. Diarrhea6 Trojan: The trojan dropped by the Diarrhea6 Fridays a Diarrhea6 trojanized by the mthe a small to produce the for the Diogenes: Diogenes is on the Diarrhea , and has #specifically 7d to avoid detection by utilities can detect VCL generated es. It adds 846 +to the . Diogenes on the 31st of any month, at c718 of the C: "DIOGENES 2.0 has visited you fine product of the Lehigh Valley." "Watch (out) for future 'upgrades'." "The world's deceit has raped my soul. We melt the plastic people down, we melt plastic town are not in the DM 92 Bios: DM 92 Bios is a VCL generated . DM 92 Bios xtwo in the preference to . mthe c457 by the permanently corrupting them. The in the ".. *.* *. "DM-92 BIOS Dome: Dome is a VCL generated Canada in . It s the c546 of . , as well as .. It "*.* *. "Divide overflow" /[VCL] DOME" : Canada Dome2: A of Dome, generated by VCL. s two . /or . Y. It may the hidden aand .BAT a, and alter the Unlike Dome, s the entire host are : Canada Dome3: An Dome one creates 433 companion . afor the . in the G. The companion . aare hidden, and ;the "Divide overflow" "*.* [VCL] DOME3" "*.* *. : Canada Dome4: An minor of the Dome one has one differs. In addition to the host , it corrupt . . Executing one of the corrupted . give unpredic unexpected Donatello: Donatello is a 827 created VCL 1.0. xthree . it is rof 827 at the end of the The @and in the DOS not be . The are in the 7, and as such are not "Cowabunga, dudes! It's Donatello!" "(Hey, John, can I be on Nightline too?)" "[VCL] [Donatello] Nowhere Man, [NuKE] '92" "Hey, Donatello, be like Mike!" kmay and the ctwo Nas a , a "Divide overflow" Y, and no E-Coli: , E-Coli is a 706 ,companion or spawning yone . bin the Gby creating a 706 ,hidden . same base . The hidden . Read- and Hidden attributes set, and the @and . The in the E-Coli "[VCL] is for corporate" "America for poisoning the peopl" ".. *.* *. d samples aunless the battributes are reset by the Earth Day: Earth Day is a 797 created VCL 1.0. xone . rof 797 at the end of the b. The @and in the DOS not be The in the and are not d samples: "*.* *. "Happy Earth Day!!!" "In the spirit of Earth Day, VIRUS has recycled your "[VCL] [ 7Zero] Nowhere Man, [NuKE] '92" tby the Earth Day becoming locked out Y. "Divide overflow" frequently Y. The Othe and Earthquake: , Earthquake is a 1,145 companion or spawning yone . bin the Gby creating a 1,145 ,hidden . same base . The hidden . Read- and Hidden attributes set, and the . The in the Earthquake ".. *.* *. "* * * Earthquake Warning! * * *" "Head for the hills!" "Take cover!!!" "Whew! We Made It!" "-=[VCL/BEv]=-" frequently ^is a VCL generated March, . It xtwo . ain the rof 663 at the end of the The @and in the DOS not be . The in the 7in all ".. *.* *. failure of Traditional ^Values! Oh no!" "[VCL]" The second may be Nas a in flashing March, Garfield: Garfield is a VCL generated . It xone . bin the rof 515 at the end of the The @and in the DOS not be . The in the 7in all ".. *.* *. "You got da Garfield ma nice MONDAY[HAL]" Handler: Handler is a VCL generated . It xthree . ain the rof 420 at the end of the The @and in the DOS not be . The in the 7in all "[VCL] beep beepHandler is a fag!" Heevahava: Heevahava is a VCL generated in the . It in the Yby creating companion The companion acreated by the Heevahava be 514 +long and mthe read , and hidden attributes set. The base correspond to an . in the G, and the be the the companion bwas created. The can be ein the Heevahava hidden companion heeva-hava's get stuck THE HEEVAHAVA "HEEVA[VCL]" "*.* *. Kinison: An 806 created 1.0. xone . rof 806 at the end of the b. The @and in the DOS not be . The in the are not d samples: "*.* *. "DIE BITCH "[VCL] *VIRUS* is dedicated to the of Sam Kinsion, 1954- [Kinison]" "Nowhere Man, [NuKE] '92" tby the Kinison becoming locked out Y. "Divide overflow" frequently Kinison on any Friday the 11th, at Oits and trash the Kinnison-734: Kinnison-734 is a of the Kinison is two +longer, and :the "*.* *. "DIE BITCH "[VCL] Dedicated to the "Sam Kinnison 1954- "[Kinnison Nowhere Man, [NuKE] '92" : Canada McYellow: McYellow is a VCL generated in May, . It xthree . aor one . in the Y. It Os the in yellow blocked graphic 6on the " MCAFEE IS A FAG" On non-VGA , the Omay just #cleared. mthe c1,297 +of the host by the The @and in the DOS not be . The in the 7in all May, Miles: , Miles is a 480 ,companion or spawning yone . bin the Gby creating a 480 ,hidden . same base . The hidden . Read- and Hidden attributes set, and the @and . The in the Miles ".. *.* *. "... miles to go before I sleep." On the 3rd day of any month, in the Oing the second as a on the d samples a, or Othe on the 3rd, unless the battributes are reset by the Pearl Harbor: A 930 created VCL. xone . bsmaller Y. Unlike Pearl Harbor is a spawning or companion , so no to the . Instead, a 930 bis created the same base as the . t. The 930 mattributes of read- , and hidden, so it is not in the DOS . The @and on the hidden . be the @and The in the and are not d samples: A7th, 1941 -- A day live in infamy..." "*** REMEMBER PEARL HARBOR ***" "C:\*.* [VCL]" "Dedicated to the memories of the brave American men and women who gave lives at [Pearl Harbor]." "Nowhere Man, [NuKE] '92" Pearl Harbor A7th, at Othe Y, as well as attempt to write to device PRN or LPT1: A7th, 1941 -- A day live in infamy..." "*** REMEMBER PEARL HARBOR ***" 7to corrupt the C: Qroot G, but it may not actually be Pro-Choice: Pro-Choice is a VCL generated . It xfive . ain the rof 1,569 at the end of the The @and in the DOS not be . The in the 7in all ".. *.* *. "Hello, all fascist narrow-minded jerks!! one's for you" "The p tyour "HAHAHAHAHAHAHAHA!" "I hope makes you think twice about restricting a person's fdom of" "choice and limiting his/her decision about aborting a baby. I hope demonstrates fucking up one's life in the of an unborn" "child is OK. Not. ma wonderful day." "And may corrupted ming reign!! Long live Jim Shorts" "[VCL] Pro-Choice kmay as well as the second may be as a Red Team: Red Team is a VCL generated . It xfour . ain the rof 716 at the end of the The @and in the DOS not be . The in the ".. *.* *. "Now YOU are a part of the Red Team!" "by Dark in 93" Red Team on Wednesdays, last two as a accompanied by a scraping sound and a hang. VCL.551: VCL.551 is a VCL generated VCL.551 xtwo . ain the rof 551 at the end of the b. The @and in the DOS not be . The in the "*.*" VCL.587: VCL.587 is a VCL generated VCL.587 xthree . ain the Yby creating a 587 ,companion b. The companion . ;the mthe read , and hidden attributes set and the @and The in the "*.*" "Well, nobody is going to give a damn eyour dead, limp,body in the river next week a knife through your heart. just laugh and say..." "Good, I hated anyways." "[VCL]" "FAKE DARK AVENGER!!!(c) BeePoP / [PuKe] WaReZ The third, fourth, and fifth may be as a on the monitor, accompanied by a hang, VCL.Angel.436: VCL.Angel.436 is a VCL generated . It xone . bin the rof 436 at the end of the b. The @and in the DOS not be . The in the "Angel X v.1.1" "(c) Laboratorio Luz de Luna y Angel X" "Lima - Per" "MUERA FUJIMORI !!!" It may Othe second thru fifth lines of , accompanied by a hang, : Peru VCL.Blue Moon: VCL.Blue Moon is a VCL generated . It xup to four . ain the rof 932 at the end of the b. The in the DOS not be The in the "THe =BLue Moon= Rise.." The may be VCL.Elena: VCL.Elena is a VCL generated . It xone . bin the rof 730 at the end of the b. The @and in the DOS not be . The in the "Elena M." "Tnx2NMan.." "*.*" "Hey Jack! please contact me, I'm in your city! What? is a simple ? Don't worry... it's a demo!" VCL.Noble: VCL.Noble is a VCL generated . VCL.Noble xall of the . in the rof 531 at the $of the b. The @and in the DOS not be . The the 7in all ".. *.* *. "NOBLE VIRUS Happy B-Day!" VCL.Olympic: VCL.Olympic is a VCL generated . It xup to five . ain the rof 1,440 at the end of the b. The in the DOS not be . The ;ed in the 7, however all are the exception of the last "*.*" "Haakon And Kristin Blew It Up Again..." #Fucking Around The Olympic Computers, And Managed" "To yA Lot Of Your Computers A Little Destructive "Now, Antonio, You Can't Let Them Runaway Punish The Little Bastards!" "Olympic Aid(s) '94 (c) The Penetrator" VCL.Reptoid: VCL.Reptoid is a VCL generated . It xup to two . ain the rof 2,536 at the end of the b. The in the DOS not be . The in the ".. *.* *. "Live! gZeta Reticuli..." "_Attack of the Reptoids_Starring Earl Gray as *The Lizard's Assistant*" all of the . ain the [of an in the Oing a rapid and short-viewed graphic of a reptoid, or sort of a face. The cleared and the proceeds to VCL-409: VCL-409 is a VCL generated . VCL-409 xall of the . X, .ZIP, .DAT, .SYS, and .OVL in the c409 by the 7, permanently corrupting them. The the 7in all ".. *. X*.ZIP *.DAT *.SYS *.OVL" "Tempest - Of Luxemburg Vaginal Discharged" VCL-409 Pnot asmaller : Sweden VCL-JP2: , VCL-JP2 is a 1,919 companion or spawning yone . bin the Gby creating a 1,919 ,hidden . same base . The hidden . Read- and Hidden attributes set, and the @and . The in the VCL-JP2 "[ MK / TridenT ]" "[TPE 1.3]" "[VCL] "dicat to ?he fuckn homo" "Spr" "gf ?ield's R.A.T." "LAMERS! Viru?" "by J.P." "Paul C" "ag Davi" d samples aunless the battributes are reset by the VCL-Windows: VCL-Windows is a VCL generated . It xall . /and . in the mthe +of the host by the , so for larger be no smaller "873 v. The @and in the DOS not be . The VCL-Windows Os the accompanied by a scraping sound Y, along hang: requires Microsoft Windows." The in the are the "Hey Toto, I don't think were in "WINDOZE any more!!" "[VCL] BenderHead '93Windows Voco: A 745 , Voco xseveral . ain the be permanently corrupted as the s the c745 +of the host . The host @and in the DOS not be . Voco smaller +, so . The in the 7in all Voco "PATH=" "You Now mThe VoCo BBS Was Made By My M The Car." "*.*" is made for all the s of Voco bbs. And for theentire country of volusia" "mayyou all fucking rot in hell:" VCL-YD2: An 821 created 1.0 of VCL. xone . rof 821 at the end of the b. The @and in the DOS not be The in the and are not d samples: "PATH=" "[VCL] [Yankee Doodle 2] Nowhere Man, [NuKE] '92" \the song "Yankee Doodle" between 5:00PM and 7:00PM VCL-YD2B: on the VCL-YD2 is one longer, adding 822 +to the end of the . x. It has to avoid detection by utilities. ZipLoc: A 710 ,companion or spawning , ZipLoc one . in the ever an Y. The companion be 710 , hidden, and read- attributes set. The @and be the @and . No in the 7. The ZipLoc search the Gstructure of the Qfor .ZIP a, and corrupt the .ZIP ait encounters. all of the . tby the creation of the matching companion . a, the ZipLoc'd" See: Nowhere Man PZPAPN VComm : VComm 637, A, 1989 j; TSR; write failures Poland S: 637 - 1,149 7: PRaE - , NAV, , or The VComm is of Polish 1989. The is a . run, the attempt to yone . bin the G. It ythe of the 8interpreter. VComm b, it cpads the is a multiple of 512 it adds its 637 7to the end of the b, so the between 637 and 1,149 +. The @and in the DOS not be The portion of the intercepts any Mwrites are attempted, and 4them into Mreads. of VComm are: VComm.633: A 633 of the VComm adds 633 to 1,145 +to the . t. The at the end of the and the @and in the DOS not be . One in the "-DWD" kmay PZPAPN : VCS Construction Set I: May, ; autoexec.bat & config.sys replaced Germany S: 1,077 7: PNCK - , NAV, The VCS, or Construction Set, was in May, . It gGermany. VCS is a creates of a 1,077 the VCS Y, it prompt the in German for the number of generations before the activate, and for the of a includes the for the The VCS create a d VIRUS. be a live generated to the 's specification. The input by the not the VIRUS. Y, the VCS-generated 1,077 gone to three . in the G. If .exists in the it may by 1,077 at the end of the be no 5in the in the DOS VCS-generated activate the number of generations was specified by the . At the , the replace AUTO XC.BAT and CONFIG.SYS in the C: Qroot G. If adid not exist, it create them. The new AUTO XC.BAT and CONFIG.SYS be 512 ;the specified during the ' creation using VCS. VCS generated es are: DarkSide: DarkSide is a .. It of the . in the rof 1,077 at the end of the b. The in the "Welcome to the DarkSide of the Realm!" "We all heed a certain call, our minds cannot control," "drawn gdeep in our hearts and deep in our" "souls." "c:\autoexec.bat" "c:\config.sys" Paranoimia: Paranoimia is a of . .. It or two . in the rof 1,077 at the end of the b. The in the "You mjust the Paranoimia "If you mgotten the odds are you pirated" "software you shouldn't m..." "Might as well press <Ctrl>-<Alt>-<Del> now..." "c:\autoexec.bat c:\config.sys" VCS generated the AUTO XC.BAT and CONFIG.SYS the C: Qroot VCS-Post: A wof . .. It several . in the rof 1,077 at the end of the b. It the C: Qroot G's AUTO XC.BAT and CONFIG.SYS ever an Deutsche Bundespost Telekom Tin the AUTO XC.BAT and CONFIG.SYS aon the C: : Germany See: Manta PZPAPN Veronika : Veronika j; DOS ?seconds = "42" Unkown S: 1,549 7: PRhA - p, NAV 3.05 9503+, 12.2 9503+, The Veronika . Its . Veronika is a steath /and . a, but not cVeronika at the top of the ), not moving ~12's and , as sby the DOS Bby 2,128 the , the Veronika /and . Y. . for any reason. rof 1,549 be hidden by the it is . The @and in the DOS to be the seconds field #set to "42". The can be eat the end of all "Veronika P." The in the "Pctihomg" The DOS indicate Uon all Veronika is PZPAPN : VFSI 437, Happy Day S: 437 7: PNCK - ], NAV, The VFSI at VFSI (the Higher Institute of Financial Management) in Svistov, a town on the Danube. VFSI is a the VFSI Y, it yone in the Candi ato be tare caligned to be a multiple of 16, and by between 437 and 452 at the end of acan be easily identified as always the dhex : 3A483F244B6F636E706C74. one out of five [s of an the flash the on the "HELLO!!! HAPPY DAY and SUCCESS 1.1 VFSI-Svistov" Tin the 7, so it is not PZPAPN : VHP VHP-348, VHP-353, VHP-367, VHP-435, VHP-757, VHP-776 Research S: 348 - 435 7: PNC - ], NAV, ], or The VHP is actually a small group or " ^" of was *in early =ly four identified to the VHP the VHP-435 %the one the most potential for spreading. were on the . The progression of the shows to be a slightly better replicator. The VHP es are: VHP-348: Pnot due to bugs in the 7. If it did , it would The 's effective is 348 VHP-353: VHP-348 fixed so increasing its by 353 +. It Pnot is still buggy, and it occasionally hang to find a . VHP-367: VHP-353 by 367 +. Very b. VHP-353 Pnot always Y, it not yany . it has in effect immunized the effect is probably a bug in VHP-435: , 1989, is 435 and is not destructive, all it Pis spread. VHP-435 attempt to yone .and . are not uall of the . on the Qand G, it attempt to QC:. VHP-435 is the VHP-367 modifications to make it less likely to be noticed. VHP-757: , VHP-757 is a 757 of the VHP group of . It xone . , but not by 757 at the end of the d samples are typically not very yious, and VHP-776: , VHP-776 is a 776 of the VHP group. It is in behaviour to the VHP-757 ythe two . ain a See: Sicilian Mob VHP2 PZPAPN : VHP2 623, VHP-623, VHP-2 Research I: March, j; re (s or S: 623 7: PNC - ], NAV, ], or The VHP2 *in March, on the , and has many of the same characteristics of the VHP-435 of the VHP . It's major difference is of effective , and 1 of every 8 perform a warm VHP2 is 623 +long, abut not of VHP2 are: VHP-627: to VHP-623, except is 627 See: VHP PZPAPN Vicious : Vicious Vicious.918 ?seconds = "40"; Sweden S: 918 or 943 7: PRAK - , NAV 3.05+, 12.2 9503+, 2.0+, 1.05 9503+ The Vicious or Vicious.918 s to be gSweden. Vicious is a wof . /and . cVicious at the top of the ), not moving ~12's and , as sby the DOS Bby 2,016 the the Vicious , it , copied, or a DOS DIR 8is issued. rof 918 +while by 943 +. In both cases the at the end of the b. The @and in the DOS to be the seconds field #set to "40". The in the "[Vicious!] MnemoniX" PZPAPN Victor : Victor I: May, j; data blinkage U; unexpected S: 2,443 - 2,458 7: PRAK - ], NAV, ], NAV, or The Victor in May, . It is believed ated in the due to the "Victor V1.0 The Incredible High Performance Enhanced soon. was imported ks to Ivan." The can be eat the end of a, but Pnot to ever be The the Victor Y, the , occupying 3,072 +at the top of intercepted by the becoming , Victor seek out and Victor is a very slow in every 10 by between 2,443 and 2,458 +. The is not hidden by the Occasionally in the process of b, the hang the in data <. Overlay amay ing in blinkage Victor on Wednesdays, at be 3,008 cVictor Yon a Wednesday, the yall . and . larger 2,500 immediately. PZPAPN PTu4 Austrian, Unesco, DOS-62, DOS-68, 1-in-8, 648 , 1988 Austria S: 648 7: PNCK - , NAV, : CleanUp, , NAV, or The , 1988, in Moscow at a UNESCO children's computer summer camp. The wof . Y, the select a . in the #modified by the . Usually, the band set the seconds in the in the Gto 62. rof 648 at the end of the One out of every six selects not be actively tby the . Instead, the cfive the selected . 3to the hex character "EAF0FF00F0", and the seconds field in the set to 62. are later Y, a (may . Since corrupted do not actually ;the , and most cannot detect them, continue to \unexpected re (s until all of the corrupted . #replaced clean copies. hang upon tby the The was written by a high school student in Austria as an experiment. Its large number of , as well as are in part 7, can be accounted for as its source 7has #published many Due to the large number of vs may not exhibit exactly the Cracky: , Cracky is a 546 the on 8088 . On 286 and higher [of an in a hang, or the "Cracky !" Nin the upper left hand corner of the and a hang the next or .BAT Y. On XT , Cracky yone . of 546 at the end of the b. The seconds field in the in the DOS Gentry #set to 22, the vmarker. The Oof the "Cracky !" may on 286 and higher , along hang. The can be in the 7in all "Cracky !" "*.com" DOS 625: DOS 625 is a 625 of the . It :the /", "PATH=", and "om OM". It is in behavior to the Pnot do Dr Q: Dr Q is a 1,161 of the . It :the "(C) DOCTOR QUMAK" in the 7in all Dr Q-1028: Dr Q-1028 is a 1,028 of the Dr Q . It :the "(C) DOCTOR QUMAK" in the 7in all , as well as the "Hello world "Infecks" "stuff should be here" xone . in the by 1,028 +and 5in the @and in the DOS [of an in the Oof the "Hello world Genny-648: Genny-648 is a 648 of the It either xor trojanizes one . rof 648 at the end of the b. Trojanized (the Y, the cfive +having Like the sets the seconds in the stamp to 62 to indicate March, Kuzmitch: Kuzmitch is a 1,064 of the yone . bin the G, but not rof 1,064 - 1,222 at the end of the b. It is if it Maxwell-498: Maxwell-498 is a 498 of the . It xone . bin the Y, but not The can be in the "MaxWell Defender: I don't kill MMM" "PATH=*. , the ?seconds field be set to "62" on all Maxwell-499: Maxwell-499 is a 499 of the . It xone . bin the Y. The can be in the "MaxWell-Defender: I mn't "PATH=*. , the ?seconds field be set to "62" on all New Generation: New Generation is a 1,054 of the . It yone . bin the rof 1,054 at the end of the b. On every 20th generation of the , it Othe on the monitor: New Generation by NET CRASHER, a PROUD member in Hyper. s in a generation is devided by 20. Please don't remove was created for research purposes > Get a Life!" The in the 7, as are the dtwo "*.com PATH=" mthe seconds field in the in the DOS Gset to 62. : Israel Twer-1000: Twer-1000 is a 1,000 of the yone . bin the rof 1,000 at the end of the b. The in the DOS to be , but the seconds field has actually "60". The can be in the 7in all Twer-1000 "Twer "PATH=" 822: 822 is -B 645 in behavior. ., increasing by 822 Pnot perform either a warm re W May, -415: -415 is a 415 of the in the C: Qroot G. It adds 415 +to the . .. It sets the seconds in the in the DOS to 62 to indicate the -618: -618 is a 618 of the . It adds 618 +to the . .. It sets the seconds in the in the DOS Gto 62 to indicate the all the in the [of an hang. -621: -621 is to the . It adds 621 +to the . x. Like -618, it sets the seconds in the 62 to indicate -634 Re -634 Re (is a 634 the . It xone . 25% of the Y, a instead of t. The alteration in the (ed the next -645: to the -B 645 adds 645 +to the . x. It not trojanize to perform a warm re :the /", "PATH=", and -648E: on the adds 648 +to the . x. It alters a, rather uthem, by cfive hex 20 The seconds field in the be set to 62 on all trojanized and . It /", "PATH=", and " -656: -656 is a 656 of the Y, it bin the G, as well as accessing the C: Q. It Pn't on the C: Q, but may crosslink the C: -712: -712 is a 712 of the occasionally trojanize a instead of uit. trojanized Y, a warm -716: -716 is 716 of the in "Divide overflow" ring, or possible -726: -726 is a 726 of the Like , it xone . bin the 50% of the Y, a warm re da long Maccess. The can be "(c) Copyright IBM Corp 1981, 1987 Licensed Material" Property of IBM" -726B: -726, has six differ. -827: on the adds 827 +to the . x. Like xone . Y, locating the at the end of the . The can be ein the "Alan Solomon" "Doctor of what?" "Thinks he's a copper," "A copper he's not." "HVPOW YXNHM SUWXM XXCPO MX" "PATH=" The seconds field in the @and in the DOS be set to "60" on all -851: on the adds 851 +to the . x. Like xone . Y, locating the at the end of the . The can be ein the 7: "PATH=", " /", and /". kfrequently -943: on the adds 943 +to the . x. Like xone . Y, locating the at the end of the . The can be ein the 7: "PATH=", " /", and /". kfrequently Y. The ma NICE day...r is no longer operational due to an outbreak of". March, Vien6: , except the warm re (has removed. Effective of the is still 648 ton the Q, the start -Abacus: on the adds 648 +to the . x. It alters a, rather uthem, by cfive hex 20 The seconds field in the be set to 62 on all trojanized and . It /", "PATH=", " /", and "Abacus Software!". Unexpected (s may trojanized .Ambalama: xall of the . ain the by 493 at the the end of the b. The ?seconds field #set to "08". The can be in the "(C) BLACK STAR Inc., . USA,BOX 13263,Ambalama Called g: BBS (095) 135-62-53" "ft 1988" Y, the Qmay "unreadable until the is re , except instead of a warm re the -B 645: to the effective is 645 +. It Pnot perform either a warm re . It P, however, -Beta Boys: gSweden in adds 679 +to the . ., and sets the seconds field in the to 62. The can be ein all "-+[BetaBoys]+-" "PATH=" Beta Boys _of any year, overwritting the C:, D:, and E:. : Sweden -Beta Boys 730: gSweden in adds 730 +to the . ., and sets the seconds field in the to 62. The can be ein all "BetaBoys Present: Memo v2.0 /MaZ" "PATH=" : Sweden -CDM.A: gPoland in adds 642 +to the . ., and sets the seconds field in the to 58. The can be ein all "PATH=" "COULD DO MORE "YOU COULD D" -CDM.A @is set to 1st thru May 5th of any year. It Pn't : Poland -CDM.B: on the -CDM.A is a minor : Poland -CDM.C: on the -CDM.A is a minor : Poland -Feliz: on the adds 518 +to the . x. Like , it one . locating the at the end of the . The can be ein the "(C) Feliz Navidad!" Feliz A o Nuevo!" /PATH=" The seconds field in the @and in the DOS be set to "60" on all : Spain -Kaszana: on the adds 1,848 +to the . x. Like , it one . locating the at the end of the . The are usually in the an un Tcopy of the "PATH=" /WCLOCK. "REVEROF ANASZAK" The seconds field in the @and in the DOS be set to "26" on all -Nag: -Nag is a 648 of the . Like the adds 648 +to the . .. It sets the seconds field in the to 62. It :the "PATH=" -New Years: -New Years is a 697 of the . It xone . bin the Y. The can be in the "The New-Years "PATH=" , the ?seconds field be set to "62" on all -Refresh: -Refresh is a 648 of the . Like the adds 648 +to the . .. It sets the seconds field in the 32. It :the "PATH=" -Yam 92: -Yam 92 adds 849 +to the . and sets the seconds field in the to 56. The can be ein all 'Matthew Stolarski - "A Loser in deep trouble "Matthew Stolarski is a born loser..." "Let's kill him "YAM '92. Remember "PATH=" -Yam 92B: -YAM 92B, has four differ. March, Wien: in all details, minor avoid detection. : Poland See: 1260 Arf Ghostballs Grither Lisbon Mexican Mud Parasite Rattle Sicilian Mob TSoft VHP VHP2 W13 Incom Viperize PZPAPN Vinchuca : Vinchuca j; TSR Argentina S: 925 7: PRsC - p2.10+, ]2.17+, 12.2 9503+, 2.0+, 7.00+ The Vinchuca , and is Argentina. It is a wof . but not cVinchuca as a low of 1,232 nby the the Vinchuca , it rof 925 at the $of the b. The @and in the DOS not be . The in the Vinchuca "Saludos para SaTaNiC BRaiN y Patoruzu" ViNCHuCa V1.0 "Creado por MURDOCK." "Buenos Aires,Argentina" "Su PC tiene Mal de Chagas .jajaja..." PZPAPN Vindicator : Vindicator kon 386 S: 734 7: PRhCK - p, NAV, The Vindicator . Its . Vindicator is a wof . The the Vindicator Y, Vindicator at the top of &the , as sby the DOS Bby 1,536 }1C and nby Vindicator in . The if it was not the Vindicator , it rof 734 at the $of the . The in the DOS not be The can be in the all Vindicator It is what Vindicator PZPAPN Strain B Endangered QB:; formats Canada S: 1,055 7: PNCK - , NAV, : CleanUp, or The by an anonymous of Homebase BBS. While in the United States, gCanada. Y, what happens depends on what the @is set to. If the prior to , the yone . in the G, adding 1,055 +to the . If the , the not yany a, but format the ctrack of the of an vof the include unexpected to access QB:. If is no or the QB: is write-protected, a The s in the "TransMogrified (TM) RABID N'tnl Development Corp Copyright (c) RABID! @: 08/15/90 Strain B - ! (Field Demo Test ! * NOT TO BE DISTRIBUTED * !" Baby: Baby is a 1,000 , its . Baby xone . bin the rof 1,000 at the end of the b. The in the DOS to be , however the seconds field #set to "60". The in the 7in all Baby "by by baby" "PATH=" It is what Baby may do on the is 716 . The major 4, and A4. On reformat track 0 of all The "*.com" " B2 is a 1,000 , and related to the Arf s to #written by the same group. activate on 31 and the year or later. At , it wipe out the c700h random :the /" "Arf Arf! Got you!" " /" "-- RABID '90" "down or DIE!" "--- RABID '90" xone or two . Y, along the : "Arf Arf Got you! -- RABID '90" B2-969: B2-969 is a 969 of the . It : "*. /" and B2 (C) '90 RABID Nat'nl Development Corp." B3 is a 843 . Like the s, it Y. Unlike the s, it affect the C: immediately in circumstances. Damage caused by B3 can be fixed Norton MDoctor. B3 should activate on A25, at attempt to format the B3 are: " Strain B3 - RABID Nat'nl Development Corp. " "*. BT: Very to the . It includes the same .707: .707 is a 707 of 707 at the end of the b. The seconds field of the in the DOS #set to "62". The in the "DDrUS (C) - "PATH=" -C is a 821 . Like the s, it rof 821 at the end of the b. The seconds field of the in the DOS set to "56". The in the 7, un Strain C - (C) RABID Int'nl Development Corp." strikes again..." "PATH=*. thru of any year, at [of an in the of the $of the M, and the strikes again...". : Canada See: Arf B4 Violite PZPAPN Christmas Strain B4 jon 8088 80286 & 80386 Canada S: 5,302 7: PNCK - ], NAV, The in the United States. It is gCanada. released into the public domain on a Trojan of DSZ (DSZ1203). It is a wof . What Pdepends on what processor is in the personal computer it is Yon. On 80286 and processors, the activate immediately, portion of the M. It attempt to Christmas greeting at , but the greeting garbled if ANSI.SYS is not loaded. Damage caused by B4 at can be repaired using Norton MDoctor. On an 8088 do nothing but Y, the one in the rof 5,302 The @and in the not be . The at the end of the The in the it is never Strain B4 - Written by RABID Nat'nl Development Corp. RABID would like to take opportunity to extend it's sincerest holiday wishes to all Pir8 lamers around the world! If you are reading you are lame!!! Anyway, to John McAffe! ma Merry Christmas and a filled new year. Go ahead! Make our day! Remember! In the festive season, Say No to drugs!!! suck shit! (Bah! We make a large, might as well thing positive!)" B4 are: B4-1: Very to the track 1 of the it has completed two vs on a 386- machine. It same as the , and differs by a few B4-B: is the same as B4-1, it differs by two +. Its behavior is identical to B4-1. See: PZPAPN Violetta : Violetta 9- Germany j; TSR Germany S: 3,840 - 7,678 7: PRsC - 1, NAV, The Violetta Iin Germany in . It was reported to be widespread in Germany at the of its . Violetta is a wof . but Pnot The Violetta is Y, the Violetta as a low TSR of 8,256 }21, CC, CE, F1, F7, and F8 the Violetta , it Violetta normally 3,840 +. However, if the was less 3,840 +, the be 7,680 +. In either case the at the $of the be no 5to the @and in the DOS The in the Violetta "VIOLETTA" 4.00" It is if Violetta of Violetta are: Violetta-1024: Violetta-1024 is a smaller of the Violetta . Its TSR is 4,432 , and hooks ~21. Violetta- 1024 rof 1,024 at the $of the b. . were smaller 1,024 "2,048 Violetta-1024. The @and in the DOS the @and . The can be in the 7in Violetta-1024 "Greetings to Cracker Jack..." "Loving ts to Shirley..." "Marty McFly lives where in "Kill Eddie. Kill Diana. Kill Fredo." PZPAPN Violite : Violite ?seconds = 56; North America S: 988 7: PNCK - , NAV, {3.0+ The Violite , and is gNorth America, probably the . Violite is on the , and like , is a wof . the Violite Y, the Violite yone . in the yvery small . . If a sui cannot be ein the G, the search the path for a sui candi the Violite rof 988 at the end of the b. The @and in the DOS not to be the seconds field of the #set to "56". The can be in the 7in all Violite "Vio-Lite, TAA, Virulent Graffiti, (k) "PATH=*. The Violite maintains a counter in its is intended to be the generation number of the particular of the counter r Res a value of 10, the may Othe as a See: PZPAPN Viper : Viper Viper Dropper fail to Australia S: 840 7: ONAK - , NAV, The Viper was submitten in . It is gAustralia. Viper is a of . /and . . It Viper is Y, the Viper yup to four in the G. . be selected c, and mthe c840 the Viper . Unless the `pre- was less be no 5to the in the DOS were less 840 now be 840 aas Viper is all of the . /and . in the Viper, the [of the next in the N, and the ed to the DOS prompt: "-/\-] S.C.P. [-/\- Welcome, you mjust joined the SCP Wasted Victims club!, yep s right.. your've got the ViPER-I ! and Lord Venom wont even charge you for it!. NO CRIPPLE WAREZ HERE!!! Copyright by Lord Venom & S.C.P. Australia of Viper are: Viper Dropper: The sample of the Viper copy is completely un Wiggers: on the Viper , Wiggers is a 666 xfour . Xor . mthe c666 by the Wiggers 7. The Wiggers Oone of the usually ring hang: "We mNoticed Wiggers Seem To mTake Over The High School Scene. If You See One, Please Hit Him Your Car!" too big to fit in The gthe , along , is in the PZPAPN Viperize : Viperize S: 934 7: PNCK - , NAV, The Viperize . Its . Viperize is a .. It is on the Viperize is Y, the Viperize yone . in the 934 at the end of the The seconds in the stamp in the #set to 62. The can be the Viperize "PATH=" Viperize on a random basis, at Othe "THE VIPERIZE VIRUS STRAIN A (c) , STINGRAY / VIPER WITH AFFECTION TO BRENDA M.G. ONE OF THESE DAYS, YOU'LL BE MINE! AND -YOU- WILL FRY. FUCK YOU MCAFEEE." The corrupt the and hang the of Viperize are: Viperize-B: to the has two See: Generic PZPAPN VirDem : VirDem VirDem 2 Endangered I: 1986-1987 Germany S: 1,236 7: PNC - 1, NAV, ], or The VirDem was written in 1986-1987 by Ralf Burger of Germany. The distributed in Was a demonstration , to assist computer s in understanding how a computer operates. The VirDem is not , and aon the A: Q. It always skip the the root G, so normally it .. It apast the second sub Gon the were less 1,500 be 2,616 v. . greater 1,500 1,236 Y, VirDem ythe next candi ;the followed by the uthe . the play a "game" you, starting " VirDem Ver.: 1.06 (Generation #) aktive. Copyright by R.Burger 1986,1987 Phone.: D - is a demo computer es. Please put in a number now. If you're right, you'll be able to continue. The number is between 0 and # (Note: I mremoved the phone number here, but it s where x is . Where # is, the 's generation number , you must guess the correct number and enter it. If you put in the wrong number, you get the and your is not run: " Sorry, you're wrong More luck at next try If you guess the correct number, you receive the and your " Famous. You're right. You'll be able to continue. " Finally, all the candi aon the A: t, the " All your struck by VIRDEM. /now." VIRDEM. /was the distribution ;ing the and had a VIRDEM.DOC bincluded it. VirDem is not widespread, and is not destructive. of VirDem are: VirDem 2: to the , the major difference is #translated to German. VirDem-833: on the VirDem , VirDem-833 xone . bin the rof 833 at the $of the b. The and in the DOS not be . The in the VirDem-833 "\ * *. "\ IRUS S" VirDem-833 on any Monday starting in . At , a "bug" traverse the top of the gleft to right, and the be corrupted by the See: Burger Twin Peaks VirDem-792 VirDem-1542 Wonderful PZPAPN VirDem-792 : VirDem-792 S: 792 - 1,526 7: PNCK - p, NAV, The VirDem-792 . Its . VirDem-792 is a non- wof . .. It is on the VirDem and Burger VirDem-792 is Y, the VirDem-792 search the Qand Gto locate the b. If G, it may t. If an e, the VirDem-792 yit, and the VirDem-792 rof 792 +if the `pre- was at least 736 awhose pre- was less to 1,528 vof the VirDem-792 . The at the the b, and the @and in the DOS The can be in the VirDem-792 "*.com *" ?exe" ?com" "Generation" dthe word "Generation", a number can be seen. number is the generation number of the b. It is incremented by one and stored in the newly a. The Generation number Pn't to ever be reset, so it should be possible to trace to extent the order of See: Burger VirDem VirDem-1542 Wonderful PZPAPN VirDem-1542 : VirDem-1542 k; access to unexpected S: 1,542 - 3,028 7: PNCK - , NAV, The VirDem-1542 . VirDem-1542 is a wof . a. It not .in the C: Qroot G. VirDem-1542 on the VirDem VirDem-1542 is Y, the access the C: Q, searching the Gstructure to locate an .in the C: Qroot G, to t. If an , the yit. by 1,542 +, however if was less 3,028 "3,028 VirDem-1542 access the look for a VirDem-1542 may executing symptom is if an tcopy of the DOS Vreading FAT 88 Probable non-DOS Continue (Y/N)?" See: Burger VirDem VirDem-792 Wonderful PZPAPN Research A, 1989 j; TSR District of Columbia, S: 857 7: PRC - , NAV, ], or The distributed in A, 1989 by Patrick Toulme as an "educational tool", source for sale. In , the author contacted the sites where he had uploaded the requesting remove , his having decided a live was not a "good idea" for an educational tool %contacted by several authorities. The ddescription was by Patrick Toulme in for inclusion in educational, research was written by Patrick Toulme to aid developers in understanding and in creating -resistant software. is a simple Qand advises the bon a floppy Mis to be t. Of course, no damage the and all aadvise the of the upon [. The safeguards provided by the author prevent accidental vand the disassembly of the 7is extremely difficult. Upon request gthe community, -90 is now to approved anti- researchers." See: PZPAPN Research TSR; BSC; . j(floppy District of Columbia, S: 2,560 7: PRAFK - ], NAV, The -101 is the "big br " of -90, written by Patrick Toulme as an "educational tool" in , and employs an encryption scheme to avoid detection on a. It ., and all execu it has tall the aon a L, it ythe . It xfloppy Kin its The ddescription was by Patrick Toulme for inclusion in -101 is a sophisticated, continually encrypting, research written by Patrick Toulme, author of -90. xboth /and aand evade most anti- software and continually encrypt to prevent non-algorithmic search is not to the general public and is presently used by government agencies and corporate security departments to test anti- software and lware devices." See: PZPAPN Vivaldi : Vivaldi j; TSR S: 4,102 - 4,112 7: PRsE - , NAV, The Vivaldi . Its , are . Vivaldi is a wof . The the Vivaldi Y, the Vivaldi a low TSR of 4,160 }21 and CC nby Vivaldi in the Vivaldi , it rof 4,102 to 4,112 at the end of the b. The @and in the DOS not be . One can be ein the 7in Vivaldi "VIVALDI" It is what Vivaldi PZPAPN Vivat : Vivat S: 9,382 7: PRhAK - ]2.10+, 2.1.7+, The Vivat it is gthe . Vivat is a fast wof primarily . cVivat at the top of the ), hooking }9, 21, and 28. , as sby the DOS gDOS 5.0, Bby 82,912 +while not be the Vivat , it and . It Pnot are copied. rof 9,382 at the end of the b. The @and in the DOS not be . The in the 7in all "VIVAT EGOR LETOV !!! -989" "NEVOR FREE," "NEVOR ME." "SO I DUB THEE" "UNFORGIVON" The s near the $of all a, but not a. The remaining four lines may be Nby the as a in the 7, but Mutilities and are not repeated here. PZPAPN VLamix : VLamix VLamix-1 Belgium S: 1,091 - 1,106 7: PRhE - ]2.17+, NAV 3.05+, 12.2 9503+, 7.00+, 2.0+, 2.17+, 1.05 9503+ The VLamix in Belgium in , where it is reported to be "in the wild". It is a wof . cVLamix at the top of the ), not moving ~12's , as sby the DOS Bby 1,136 }10 and 21 nby the are , or copied. rof 1,091 to 1,106 at the end of the b. The @and in the DOS not be . The are in the "smartc*.cps chklist.*" "-=* DIE_LAMER *=-" "CHKLIST ???" "CHKLIST.CPS" "VLamiX-1" is unable to determine it has b, so it vof an add an 1,104 +to the PZPAPN : VMem I: May, j; VMEM.SYS hidden bcreated; CONFIG.SYS Israel S: 3,291 7: PRsAK - 2.17+ The VMem in Israel in May, . VMem is a employs technology to avoid detection by utilities. cVMem Y, the VMem create a hidden b, VMEM.SYS, in the root hidden be 3,275 and mits @and set to either all blanks or the @and , the VMem @the CONFIG.SYS bin the root Gto add the dline: "device=\vmem.sys" If CONFIG.SYS Pnot exist in the Q's root the create one ;ing the line. has completed process, the run. The is not yet The next (s the had the VMEM.SYS created and its CONFIG.SYS the VMem as a device , as sby the DOS 3,696 nby VMem in the VMem , it rof 3,291 at the end of the b. The @in the DOS mhad its day set to "00". The VMem hides the rand the 5in the @'s day it is . The can be ein VMem "DOS50VMS" or "DOS33VMS" "LLP" The in the VMem are not "TERMINATOR" /SPEC" "VMEM" the VMem crashes . The DOS not indicate PZPAPN Voice-1495 : Voice-1495 j; TSR; S: 1,495 7: PRsA - , NAV, 12.2 9503+, {3.0+ The Voice-1495 . Its . Voice-1495 is a wof . /and . , but not cVoice-1495 as a low nby the . The be accessed at , and the may notice a scraping sound coming gthe the Voice-1495 , it and . in the C: Qroot 1,495 at the end of the is unable to determine it has b, so it vadds an 1,495 +to the b. The @and in the DOS to the @and the last vof the . The can be in the 7in all Voice-1495 "VOICE V1.01" The in the 7, and is thus not "C:\*. /C:\*. kfrequently PZPAPN Voodoo : Voodoo may not function S: 4,745 7: PNA - p, NAV 3.05+, 12.2 9503+, {3.0+ The Voodoo . Its . Voodoo is a wof . /and . , but not a Voodoo one . /or . in the rof 4,745 at the $of the b. The @and in the DOS to the @and The in the Voodoo "*.com" "*.exe" "Do ya know it's Vesselin Bontchev's birthday 2day?" "He studies how 2 kill virii like "Yar probably happy r people like him.. so.." "why not write him a birthday "the adress is :*BONTCHEV@BIHH.INFORMATIK.UNI-HAMBURG.DE..." "Just remember 2 say we put ya up 2 it... :-)" "Bontchev's Birthday (c) [VooDoo]" "temp.com" PZPAPN Voronezh : Voronezh S: 1,600 7: PRhA - ], NAV, The Voronezh . It is gthe . Voronezh is a wof . /and . a, and Pnot The Voronezh is at the top of &the ). While the reserves 3,744 , it Pnot move the nby the reserve 24 on the Oadapter card. Voronezh is /and . by 1,600 +, the at the end of ;the "Voronezh, 2.01". It is of Voronezh are: Voronezh B: to the Voronezh , the major difference Voronezh B is Voronezh B any reason. The did not open. The sfor Voronezh is See: Voronezh-370 Voronezh-Chemist PZPAPN Voronezh-370 : Voronezh-370 370-B j; TSR; S: 370 7: PRsCK - 1, NAV, The Voronezh-370 Its . Voronezh-370 is a of . . It Pnot The Voronezh-370 is as a low TSR of 1,712 +. It Voronezh-370 is , it rof 370 at the $of the b. The @and in the DOS to the @and It is if Voronezh-370 See: Voronezh Voronezh-Chemist PZPAPN Voronezh-Chemist : Voronezh-Chemist Chemist, Video Mode, Voronezh-650 S: 650 7: PRhCK - , NAV, The Voronezh-Chemist, or Chemist, . Its it is related to the Voronezh and Voronezh-370 es. Voronezh-Chemist is a wof . The the Voronezh-Chemist at the top of &the and Bby 2,048 ~12's #moved. }21 and nby the Voronezh-Chemist is , it rof 650 the $of the b. The @and the DOS The can be in the all Voronezh-Chemist "Video mode 80x25 not supported" "16.01.91, v1.00" It is if Voronezh-Chemist of Voronezh-Chemist are: Voronezh-650: to the Voronezh-Chemist has three differ. See: Voronezh Voronezh-370 PZPAPN : Vote S: 1,004 7: PNCK - 1, NAV, The Vote . It is *. Vote is a wof . the Vote Y, the Vote ythe in the G. If Vote, the yit. The run. , .BAT b, or DOS 8, a hang usually the Vote rof 1,004 +for vof Vote in the The Vote at the end of the b. The @and in the DOS not be of Vote are: Vote-1000: A later of the Vote not re . It xone of the cfour ain the rof 1,000 the end of the b. The @and in the DOS not be . Vote-1000 attempt to the may be in cyrillic and is thus unreadable on most PZPAPN : VP I: May slowdown England S: 913 7: PNCK - ], NAV, ], or The VP in May, . It is a generic . w, and is run, the attempt to locate and b. In cases, such as ., the Othe contents of the t. In cases, the may attempt to Zthe by 913 +, and can be identified as the dhex near both the $and the end of an : '4503EB1808655650'. PZPAPN Vriest : Vriest j; TSR S: 1,280 7: PRsCK - , NAV, The Vriest and is believed to be where in W. Vriest is a The Vriest is Y, Vriest as a low TSR of 1,584 }20, 21, and 27 nby the Unlike most , Vriest . It copied, at the target Vriest by 1,280 The at the $of the The @and in the DOS Vriest t, adding an 1,280 +to the . Re is again copied. Vriest Pnot to do PZPAPN VS-2790 : VS-2790 j; DOS S: 2,790 7: PRhAK - ], NAV, {3.0+, 2.17+, 1.05 9503+ The VS-2790 . It's . VS-2790 is a of . /and . , but not cVS-2790 at the top of the ), not moving ~12's and , as sby the DOS Bby 2,832 }1C and 21 nby the VS-2790 is , it /and . , but not copied. rof 2,790 at the end of the r, however, not be in the DOS . The @and in the DOS not be . The can be in the in all VS-2790 'VS-061-"STEALTHIE".(C) , Viru inc.$VS' VS-2790 is , the DOS Uon all a. It is VS-2790 PZPAPN VVF 3.4 : VVF 3.4 S: 1,614 - 1,628 7: PRhA - , NAV, p2.10+, 12.2 9503+, The VVF 3.4 . It is reported to gthe . VVF 3.4 is a /and . , but not The VVF 3.4 is at the top of &the , as measured by the DOS by 3,488 ~12's #moved. }1C and 21 nby VVF 3.4. VVF 3.4 is , it /and . rof 1,614 at the $of the rof 1,614 to 1,628 at the end of the b. The @and in the DOS not be . One can be in the 7in VVF 3.4 "VVF3.4" It is what VVF 3.4 PZPAPN VX-163 : VX-163 S: 163 7: PNCK - {3.0+, 2.17+ The VX-163 . Its . VX-163 is a wof . the VX-163 Y, the VX-163 yone . in the 163 at the $of the b. The @and in the DOS not be . The the 7in all VX-163 "*.com" VX-163 Pnot in the the cfive . in the VX-163 Pn't do frequently PZPAPN : W13 Toothless Endangered A, 1989 Poland S: 534 7: PNCK - , NAV, ], NAV, or The W13 is a . Pn't do much except for a. The A1989 in Poland. While W13 is on the , it Pnot damage of the side effects of the . It :a number of bugs prevent it %a good replicator. of W13 are: Dushanbe: The Dushanbe is a 458 of the W13 . It yone . rof 458 at the end of the mhad the month in the @in the 3to "13". the "DUSHANBE M&A!" W13-B: The several bugs fixed. is 507 +instead of 534 W13-B2: A minor of W13-B, to avoid detection by a particular utility. It is not believed to be in the public domain. W13-B3: A minor of W13-B, to avoid detection by a particular utility. It is not believed to be in the public domain. W13-361: The W13-361 is a 361 of the W13 . It yone . by 361 the end of the mhad the month in the @in the 3to "13". frequently W13-361 are ;the "ctivated!" : Poland W13-377: The W13-377 is a 377 of the W13 . Like W13-361, it xone . be 371 +. It 4the month in the @to "13". The W13-361 do not . The can be : Poland W13-534B: The W13-534B is a 534 of the W13 . It yone . Y. The month in the @in the DOS 3to "13", is how the determines the is a minor of the W13. Like the , it :several rences of the "Microsoftyright" in the May, W13-534C: A minor of W13-534, to avoid detection by a particular utility. It is not believed to be in the public domain. W13-534D: A minor of W13-534, to avoid detection by a particular utility. It is not believed to be in the public domain. W13-534E: A minor of W13-534, to avoid detection by a particular utility. It is not believed to be in the public domain. W13-537: A minor of the W13 to avoid detection by a particular utility. It is not believed to be in the public domain, and adds 537 +to the . W13-Req: The W13-Req is a 494 of the W13 . It xone . Y. It :the ?.com" "REQ ! Ltd (c) 18:41:22 3-I- : Poland See: Gipsy-304 Plumbum PZPAPN Walker : Walker ; man walks across intermittenly Turkey S: 3,846 - 3,861 7: PRhAK - 1, NAV, The Walker . It is gTurkey. Walker is a wof . /and . cWalker Y, the Walker at the top of &the , as sby the DOS by 12,304 }16 and 21 nby the , it /and . rof 3,846 to 3,861 at the end of the b. The @and in the DOS not be . The in the Walker "WALKER V1.00 - absolutely harmless and self destructive is written by UJHPTTLZ in the city of Istanbul, The Walker it has a few minutes, at a colorful ASCII block graphic man 20 lines tall walk gright to left across the O. The graphic man walks across the every few seconds. the graphic man walks across the input be suspended until he goes off the PZPAPN Wally : Wally S: 1,029 7: PNCK - ]2.17+, 7.00+, p2.10+, 2.71+, 7.00+, 2.71+ The Wally . Its . Wally is a wof . the Wally yone . in the plus the copy of in the C: Qroot if it was not tby the the Wally rof 1,029 at the end of the b. The @and in the DOS to the @and . The in the Wally 7, and are thus not Wally versao a.Tente me encontrar." It is what the Wally PZPAPN Wanderer : Wanderer ?seconds = 62; S: 400 7: PRhCK - NAV 3.05 9503+, 12.2 9503+, {3.0+ The Wanderer . Its . Wanderer is a wof . cWanderer at the top of &the , as sby the DOS by 416 nby the , it rof 400 at the end of the b. The @and in the DOS to be the seconds field #set to "62". The in the Wanderer "As wolfs among sheep we mwandered" PZPAPN Warez-1341 : Warez-1341 MFAT corrupted S: 1,341 7: PNC - NAV, {3.0+ The Warez-1341 . Its . Warez-1341 is a wof . , but not the Warez-1341 yall of the . in the are larger 2K in rof 1,341 at the end of the b. The @and in the DOS not be . The in the 7in all Warez-1341 "*.com" "- W A R E Z D 0 0 D -" The Warez-1341 corrupt the on the See: PZPAPN Warning : Warning I: May, & warm S: 3,072 7: PNCK - The Warning in May, . Its . Warning is a yof . the Warning Y, the warning yone . in the the Warning rof 3,072 +. The both the $and end of a. The in the DOS the @and If the Warning is unable to in the G, it Othe "WARNING: computer self-destruct in 5 seconds" A pause s, and 5 seconds later a warm . The is not aas it is PZPAPN Warrior : Warrior I: May, j; unexpected access to S: 1,024 7: PRfE - NAV, The Warrior in May, . It is Warrior is a wof . The Warrior is Y, the at the top of , but &the ). The hooks }21 and 22. At , the Warrior access the C: uall . in the root G. It yone . in the Qand Warrior is , it by 1,024 at the end of the b. The @and in the DOS not be Warrior ;the "... and justice for all!" "Dream Over ... And the alone warrior is warrior. The powerfull WARRIOR!" It is if Warrior of Warrior are: Warrior 2: , Warrior 2 is a non- of the Warrior xfour . in the C: G, and one . in the Y. Like the , it adds 1,024 at the end of the . The in the DOS not be The in the 7in all "*.txt" "... and justice for all! (US constitution)" "Dream Over ..." See: Brainy PZPAPN Warsaw-850 : Warsaw-850 Warsaw unexpected Poland S: 850 7: PONCK - The Warsaw-850 . It is gPoland. Warsaw-850 is a of . .. It ain both manner. the Warsaw-850 yone . in the If the , the newly rof 850 at the end of the b. If the , the c850 +of the host by the , and no . In both cases, the @and in the DOS . The can be in the 7in all Warsaw-850 "Warsaw - "\QBASIC S\GAMES\STELLAR7" tin an manner function , and frequently in the PZPAPN : Wasp SSI 1.0, Wasp.629 S: 629 - 637 7: PRhCK - , NAV 3.05+, 12.2 9503+, 2.0+, {3.0+, 1.05 9503+ The Wasp, Wasp.629 or SSI 1.0, . Its . Wasp is a wof . cWasp at the top of the ), not moving ~12's and , as sby the DOS Bby 592 nby the , the Wasp of 629 to 637 at the end of the b. The @and in the DOS not be . The in the 7in all Wasp "SSI v. 1.00" It is what Wasp may do of Wasp are: Wasp.909: as SSI 2.01, Wasp 909 is a later the Wasp . Its is 928 hooking ~21. It /and . by 946 to 958 +, while . by 909 to 919 +. In both cases, the at the end of the b. The can be in the 7in all "SSI v. 2.01" PZPAPN : Wave I: March, acreated S: 454 7: PRaCK - , NAV 3.05 9503+, 2.17+ The Wave in March, . Its . Wave is a wof . .. It Pnot on the A: cWave Y, the Wave hooking ~21. sby the DOS not be the Wave , it rof 454 at the end of the b. The @and in the DOS not be . No in the The Wave create a companion . Zs. companion ;a copy of the . , and are not to simply take Mspace. PZPAPN : Weak Vulner S: 1,253 7: PRfCK - , NAV, The Weak, or Vulner, . Its . Weak is a wof . cWeak Y, the Weak , hooking ~21. , as by the DOS not be the Weak , it are copied or providing the in a sub in the root the Weak rof 1,253 at the $of the b. The @and in the DOS . The in the "Et tu vulneratus es sicut et nos, nostri similis effectus es..." kfrequently PZPAPN Were Here : Were Here Here S: 838 - 851 7: PNCK - , NAV, The Were Here . It is a wof . Were Here is Y, the yone . in the G. If .resides in G, it may Were Here of 838 to 851 at the end of the b. The @and in the DOS The Were Here Othe "We're Here" Ystarting in is not, however, always PZPAPN Western Ukraine : Western Ukraine ?seconds = "62" S: 274 7: PNCK - ]2.17+, 12.2 9503+, 2.0+, 2.17+ The Western Ukraine . Its . It is a wof . the Western Ukraine yone . in the rof 274 the at the end of the b. The and in the DOS to be , but the seconds field #set to "62". The in the 7in all "Western Ukraine" PZPAPN Westwood : Westwood j; TSR; slowdown; black window; bdeletion on Friday the 13th Westwood, California, S: 1,819 - 1,829 7: PRsA - , NAV, : CleanUp, NAV, or The Westwood in Westwood, California. is a substantially of the , enough so s tested could detect were unable to identify it. Like , it X, and overlay a, but not The the Westwood Y, the as a low TSR of 1,808 }8 and 21 n. If the @happens to be a Friday the 13th, , any the Westwood rby 1,829 at the $of the aand overlay are to the end of the . . by between 1,819 and 1,829 +. Unlike most of the , Westwood not re slowdown for 30 minutes. At , the "black window" or "black box" 9to the on the lower left hand side of the ;around the area of the "box" may be corrupted if writes happened to be ring the box On Friday the 13th, the Westwood Dany See: PZPAPN Whale : Whale Fish, , Z The Whale Research slowdown; video flicker; slow writes; U; simulated Hamburg, West Germany S: 9,216 7: PRhA - p, NAV, 12.2 9503+, : CleanUp, or The Whale in early had #rumored to exist since the of the Fish 6 . It has #referred to by several Whale, Fish and Z The Whale. The is subject to speculation, it is probably Hamburg, West Germany due to a reference in the it is decrypted. The the Whale the Whale in high but &the ). On the author's XT clone, the always starts at address 9D90. Bby 9,984 +. Most utilities usage indicate a value for 9,984 +less what is actually The can be the Whale "Z THE WHALE". Immediately upon becoming , the \the slowing down. Noticeable effects of the slowdown include video flicker to extremely slow writes. to "hang", eventually in most cases since the "hang" is due to the slowing of the the Whale , the ythe , the actual is usually 9,216 +. Note the "usually": Poccasionally "mutant" be a different . If the ris exactly 9,216 +, the Whale hide the Y. If the of the to the 9,216 +, the either the actual , or the actual minus 9,216 Executing the DOS %reported. If -/F is bdamage The Whale alters the ?in the the it is not set to the v. Occasionally, Whale alter the Gentry for the it is ing in the Gentry becoming invalid. invalid Gentries Gis listed, but Mutilities not allow access to the . In cases, the Gentry can be fixed Norton Utilities FD 8to reset the The Whale occasionally 5its behavior while it is . While most of the are periods of yany for any reason. It , at s, dis are copied the DOS COPY 8, at not "dis yon the fly". Occasionally, the Whale simulate what s to be a (. While Pn't always the Break key is disabled so cannot exit unexpectedly gthe [of the 's autoexec.bat b. If the autoexec.bat ;ed any software bopens of execu , those execu were not Typically, manner rby 9,216 not be shown in a A hidden bmay be ein the root QC: on bis not always present, the s remove it, to recreate it again at a later . The hidden bis FISH-#9.TBL, it :an image of the ), along the "Fish A Whale is no Fish! Mind her Mutant Fish and the hidden Fish Eggs for are damaging. The sixth Fish mutates if the Whale is in her Cave." hidden b, the author of document made several attempt to mthe Fish 6 mutate by introducing it and Whale into a . Under no circumstances did a mutation of either , the awere both an identifiable Fish 6 vand a Whale Whale is hostile to debuggers and :many traps to prevent successful decryption of the . One of its "traps" is to lock out the if it determines a debugger is in use. PZPAPN Wharps : Wharps ; buzzing on speaker; seconds set to "62" S: 572 7: PNCK - {3.0+ The Wharps . Its . Wharps is a wof . the Wharps Y, the Wharps yone . in the 572 at the end of the The @and in the DOS to be un , but actually the seconds field in the #set to "62". The in the Wharps "[wHaRpS]" "wHaRpS! It is 3:00 a.m. > ETERNAL" The second Nby the Yat 3:00 AM. frequently PZPAPN Wild Thing 2 : Wild Thing 2 Oswitched to 40 column mode & North America S: 567 7: PNCK - , NAV 3.05+, {3.0+, 1.05 9503+ The Wild Thing 2 and is North America. It is a the Wild Thing 2 yall of the . in the rof 567 at the end of the b. The @and in the DOS not be . The in the "Wild Thing ][" "It's Friday... Enjoy the weekend "your computer! [YAM '92]" "By: Admiral Bailey [YAM]*.com \ 8.com" The Wild Thing 2 on Fridays, at of an in the monitor switched to 40 column mode and the "It's Friday... Enjoy the weekend your computer! [YAM '92]" of Wild Thing 2 are: Wild Thing: An earlier of the Wild Thing 2 Wild Thing was . The sample Pnot , and is not used for 2purposes. It :the is a Wild Thing" "LEGALIZE MARIJUANA!" "ACiD RULEZ!!! hahaha" ed by Magic" "*.com" : North America, Wild Thing-289: A later of the non-functional Wild Thing , Wild Thing-289 xthree . the rof 289 the end of the b. The @and in the DOS to the @and . It :the is a Wild Thing" med By Admiral Bailey [YAM]" "(C) YAM Inc." "*.com" The cthree : North America, PZPAPN istrover III istrover III j; unexpected "Not ready Vreading Bolivia S: 965 - 979 7: PRhAK - 12.2 9503+, {3.0+ The istrover III , and is gBolivia. It is a wof . /and . istrover III at the top of &the ), not moving ~12's , as sby the DOS Bby 1,040 istrover III in istrover III , it /and . rof 965 rof 965 to 979 +. In both cases the at the end of the b. The and in the DOS not be . No in the istrover III all of the . /and . in the [of the next in the uthe copy of ed to by the /SPEC en ment parameter. At , or the may be Nrequiring an appropriate by the "Not read Vreading Insert and strike any key ready" The X in the be the Qletter. t, unexpected (s may PZPAPN Dd; TSR S: 1,870 - 1,884 7: PRsE - , NAV, 12.2 9503+, {3.0+ The . Its ow is a Y, the as a low TSR of 2.1K in the , it rof 1,870 to 1,884 at the end of the b. The @and in the DOS not be . The in the 7in all /SPEC=" The is disruptive, deleting . Zthem . It Dthe copy of ed to by the /SPEC mental variable. ow are: ow 2: A 2,013 of the TSR is 2,304 +, hooking }13,20, 21, and 22. It rof 2,013 to 2,027 at the end of the b. The @and in the DOS . The the 7in all ow 2 "WILLOW come in." ow 2 Pnot kill . as like the PZPAPN Windmill : Windmill Windmill Dropper BSC; "windmill" on accessing write protected Philipines S: N/A 7: BRtF - , NAV, : DOS SYS on The Windmill Iin the Philipines in Windmill is a , and is a . It Pnot Ms in its present form. the Windmill , Windmill at the top of &the , as sby the DOS Bby 1,024 ~12's moved, and Windmill is , it ynon-write protected are accessed. Upon accessing the L, the be moved to an location on the L, and If the to access a write-protected L, such as git, a spinning slash character ("/") may in the center of the while the ythe M. A flickering box may slightly to the left of center. Eventually the give up trying to the write protected L, and the be able to the or access the bon the write-protected Windmill is a . If Windmill is and the to view or access the , the Windmill present the instead of the real . Thus, utilities unaware of Windmill in not be able to detect any 5in the Windmill is not , the can be in the "WINDMILL Strain 2" "Windmills in your mind.." "LLCPHPU" of Windmill are: Windmill Dropper: A small . :the Windmill in the by the Windmill PZPAPN WinVir : WinVir WVir Windows . j; Windows . Windows intermittenly fail to Sweden S: 854 7: PNE - 12.2 9503+, : Replace The WinVir or WVir gSweden in is a in a Windows en nment. It are in Microsoft's New Execu (Windows execu format. It Pnot are not Windows specific WinVir is Yunder Windows, search the Gto locate Windows execu relocating a portion of the host to the end of the b, and uthe middle of the host . The by 854 the @and in the DOS not be . WinVir remove gthe the is not always ed to its condition before it was The terminates, and the Pnot run. If the again the , it function Two can be ein all tby WinVir: _for_Windows v1.4" "MK92" Either of WinVir has is rather buggy, and in testing was function it was copied into the Windows gany G, unexpected would rather bizarre PZPAPN Wisconsin : Wisconsin Death To Pascal ; write protect U; .PAS Wisconsin, S: 825 7: PNC - ], NAV, The Wisconsin . The the sample was Wisconsin, is where its came g. It is reported to at about same California. Wisconsin is a wof . but it Pnot the Wisconsin Y, the alter the @and of the the @and . The Wisconsin yone bin the by 825 at the $of the If an attempt is made to Wisconsin ga write-protected L, a write protect Pnot intercept Othe "Death to Pascal." N, any .PAS in the Dd. cannot be seen in aas it is PZPAPN Witch : Witch j; unexpected access to accompanied by S: 1,140 7: PNE - The Witch . Its . Witch is a wof . the Witch Y, the Witch yone . of at least 5,000 in the G, and access the rof 1,140 at the end of the b. The @and in the DOS not be . The in the Witch 7in all "IT'S WITCHING HOUR... YOUR /PUTER IS BEING HAUNTED! HAHAHA..." "Bad luck... You've got a in your "*.eXe \dOs ChKdSk.eXe XcOPy.eXe MeM.ExE cHkLiS*.*" "Think about using a is more up-to- "Here lies a in its coffin, Yby a too often..." The Witch between midnight (00:01) and 1AM (01:00), at Nand a hang may "IT'S WITCHING HOUR... YOUR /PUTER IS BEING HAUNTED! HAHAHA..." The Witch interfer the functioning of the DOS 5.0 -, XCOPY, and MEM, and the Central Anti- PZPAPN : Wit (able Germany The S: 966 - 980 7: PRhE - , NAV, The Wit gthe . It is gGermany, and has #rumored to exist for over one year. Wit 7is a The the Wit the Wit at the top of &the , as sby the DOS Bby 1,520 nby the the Wit , it rof 966 to 980 the end of the b. The @and in the DOS not be . The in the 7in all Wit "Wit The Wit on several different criteria. If the @and match more one criteria, any or all of the effects for those s may be noted. On any day of the week g22:00 to 06:00, the the 1 out of every 16 "Gee, I wanna sleep now!" On any Sunday, the Othe 1 out of every 32 "You really shouldn't work on Sundays..." On any Monday, as well as on any Friday The 13th, the ctwo +of the C: , rendering the (able. The trojan has a 1 in 64 chance of triggering A24th through A31st of any year, the Othe "Merry Christmas" Lastly, the very infrequently Othe "You got a fine machine!" All of the in the 7, and are not See: Stasi PZPAPN Wizard 3.0 : Wizard 3.0 & beeping Poland S: 268 7: PRCK - , NAV, {3.0+ The Wizard 3.0 . It is gPoland. Wizard 3.0 is a of . cWizard 3.0 Y, the Wizard 3.0 in a "hole" in low , hooking ~21. , as sby the DOS not be the Wizard 3.0 , it rof 268 at the end of the b. The in the DOS not be . The in the 7in all Wizard 3.0 "I'm WIZARd 3.0" The Wizard Othe the monitor N, it is slowly d character by character accompanying beeps on the speaker. of Wizard 3.0 are: Wizard.312: , Wizard.312 is a 312 of the Wizard . It adds 312 +to the . x. The @in the DOS not be , but the #set to "10:00:00 AM". The can be in the 7in all "Microbi is here!" "4991 uheyzrk" The may be Nas a on the monitor PZPAPN Wolfman : Wolfman Wolf TSR; . Taiwan S: 2,064 7: PRsA - ], NAV, The Wolfman Iin Taiwan in . It is a generic wof . /and . a, but not The the Wolfman Y, the as a TSR 2 blocks of reserved. The cblock of reserved is 68,032 , the second block of reserved is 4,544 . The 72,640 is in low , and a corresponding amount. The hooks }09, 10, 16, 21, 2F, ED, and F5. , the yany . or . Yif the pre- greater or equal to 2,064 by 2,064 +. . at the $of the . mthe at the end. @and in the to the @and It is Wolfman , or if it is destructive. of Wolfman are: Wolfman 2: is fairly to the Wolfman Its TSR is 67,984 +, and it hooks }09, 10, 16, 21, CF, D1, D3, and several asmaller 5,120 not be tby the the "WOlf_mAN", cannot be as it PZPAPN Wonder : Wonder fail to S: 7,424 7: ONE - NAV, The Wonder . Its . Wonder is a , over- writing Wonder is Y, the Wonder yall . in the G. The c7,424 the Wonder . Unless the `pre- less 7,424 be no 5in the whose pre- was smaller 7,424 "7,424 . The @and in the DOS to the @and Wonder frequently hang the Y. If the is larger 64K in may instead in an " and the ed to the DOS prompt. of Wonder are: Wonder-2: The Wonder-2 is a minor of the Wonder . It has Pn't aover 64K in . As a , the " no longer PZPAPN Wonderful : Wonderful j; unexpected access to C: S: 1,338 - 2,602 7: PNC - p, NAV, The Wonderful . Its . Wonderful is a non- yof . It is a member of the Burger es, and is specifically on the VirDem Wonderful is Y, the search the C: Gstructure to locate the is not e, the Wonderful normally rof 1,336 +. However, if the . was less 1,280 +, the "2,616 fore, rs can be anywhere g1,336 +to 2,614 +. In any case, the at the $of the be no 5to the @and in the DOS The can be in the Wonderful "*.com *" ?exe" ?com" "*.*" "\V 4V2 A" "KILLER" "SOMETHING WONDERFUL" "HAS HAPPENED !!!" It is if Wonderful See: Burger VirDem VirDem-1542 PZPAPN WordSwap : WordSwap WordSwap-1069, WordSwap-1085, WordSwap-1387, WordSwap-1503 j; TSR; S: 1,069, 1,085, 1,387, or 1,503 +(depends on 7: PRsAK - , NAV, The WordSwap es were gthe . WordSwap is actually a ^of initially four share many characteristics. All of are ws of . /and . a, and damage qdata are written to The a WordSwap Y, WordSwap as a low TSR. The of the TSR vary, depending on of the is present, and is documented In all cases, nby the WordSwap WordSwap is , it /and . kmay rs of 1,069, 1,085, 1,387 or 1,503 +, depending on the . The at the end of ain all cases. WordSwap es are very destructive. aare written to M, the randomly swap words in the corrupting the data. In one case, the a portion of the data of WordSwap are: WordSwap-1069: WordSwap-1069 is a 1,069 ,member of the WordSwap ^. It adds 1,069 mhad @and in the DOS the @and ' TSR is 1,072 kdo not . WordSwap-1069 swap words in awritten to M, corrupting the b. WordSwap-1069 to be a bug-fixed of WordSwap-1085. WordSwap-1085: WordSwap-1085 is a 1,085 ,member of the WordSwap es. It adds 1,085 a, and no in the DOS G. WordSwap-1085's TSR is 1,072 Unlike WordSwap-1069, hang the the next . The tby WordSwap-1085. Damage to awritten to Mis the same as the WordSwap-1069 , words occassionaly be swapped, ing in WordSwap-1387: WordSwap-1387 is a 1,387 ,member of the WordSwap es. It adds 1,387 a, and unlike the members of be no a. Its TSR is 2,784 differs in the of damage it awritten to swapping words, it shift the data 18 +to the left so +of data records are missing. WordSwap-1503: WordSwap-1503 is a 1,503 ,member of the WordSwap es. It adds 1,503 be no 5in the DOS G. It a. The s on Mwrites %partially written data , in addition to the swapping of words. The swapping of words if the bisn't . WordSwap-1503's TSR is 3,008 PZPAPN World Peace : World Peace I: May, BSC; Malaysia S: N/A 7: BRtF - : DOS SYS on The World Peace gMalaysia in May, World Peace is a and is a . It Pnot Ms in its present form. the World Peace, the World Peace the top of &the , as sby the DOS Bby 1,024 ~12's #moved and nby the World Peace is , it ynon-write protected are accessed. Upon accessing the L, the be moved to an location on the L, and 7. In the case of 360K 5.25" K, the 11, the last of the root World Peace Pnot y1.2Meg 5.25" if the , it Hany attempt to read the may trigger anti- utilities into thinking the gthe root Gof the L, and not a copy of the If the to access a write-protected L, such as git, a " Vreading Vmay World Peace is a . If World Peace is and the to view or access the , the World Peace present the instead of the real, . Thus, utilities unaware of World Peace in not be able to detect any 5in the World Peace is not , the can be in the "World Peace" PZPAPN Worm-16850 : Worm-16850 Hidden Read- created S: 16,850 7: SNA - Spawning The Worm-16850 . Its is a spawning or companion by creating corresponding hidden . the Worm-16850 search the Gfor an . Pnot ma matching . such a e, the xit by creating a 16,850 the same base newly created . not be to the as the battributes are set to hidden and read- . The host . is not any way. The can be in the hidden, read- ;the "Turbo-C - Copyright (c) 1988 Borland Intl..Divide "Abnormal termination" .rb.PATH." Worm-16850 can be easily dis deleting all of the hidden, read- of 16,850 correspond to . in the PZPAPN Worm-17690 : Worm-17690 17690 I: May, "17,690 & .SYS, .PRG, .FIL, and .DAT acreated S: 17,690 7: SNE - Spawning F: NAV, aand re The Worm-17690 in May, . Its is a wof . and can be difficult to dis the Worm-17690 yone . on the A:, B:, or C: Q. The decides to be re base man extension of either .SYS, .PRG, .FIL, or .DAT. The write a copy of . The new copy of be 17,690 and of the @and . The host continue Worm-17690 is difficult to dis ysince the . ;ing the 7are eand Dd, the must be and re d back to the correct PZPAPN Wrzod : Wrzod ?seconds = "22"; beeping S: 1,043 7: PNCK - ]2.17+, 7.00+, 2.1.7+, 2.71+, 7.00+, 2.71+, 2.17+ The Wrzod . Its . Wrzod is a wof . .. It can t he Wrzod yone . in the The Othe accompanied by beeping for about 15 seconds: "Hello !!! My is Wrzod, I'm fucking your PC now !!!" the Wrzod rof 1,043 at the end of the b. The @and in the DOS to be 's seconds field #set to "22". The in the "\ .. * *.com" "Hello !!! My is Wrzod, I'm fucking your PC now !!!" "By Shadow Man ..." are not PZPAPN WW-658 : WW-658 S: 658 7: PRaAK - 12.2 9503+, The WW-658, or 658, . Its . WW-658 is a wof . /and . cWW-658 in a "hole" in low al , hooking ~21. , as sby the DOS not be , WW-658 /and . rof 658 at the end of the b. The @and in the DOS not be . The can be at the very end of all WW-658 "WW" PZPAPN : WWT WWT 01, WWT 02, WWT 02B I: May, S: 67 or 125 7: ONCK - p, NAV, The WWT es were Win May, . As of May, are two es in ^. One , WWT 01, is a . The , WWT 02, is a 125 Both es are a WWT Y, the yall . in the G. If resides in the G, it mthe $portion of 7. The number of depends on of the WWT es are present. The @and in the Gmay to the @and a WWT since #permanently corrupted due to the 7having WWT Pnot do of WWT are: WWT 01: The WWT 01 is 67 mthe by the . If the was less +, the are 67 or greater before r. WWT 01 in the @and in the Ghaving to the @and WWT 02: The WWT 02 is 125 mthe c125 by the . If the was less +, the "125 are 125 +or greater before r. WWT 02 5to the @and in the WWT 02B: WWT 02B is very to the WWT 02 . Its difference is has one has at offset 2C. PZPAPN : WXYC BSC; Lroot Gdamage S: N/A 7: BRtX - 1, NAV, : M- M, or DOS SYS on The WXYC . WXYC is a and the ). It s to be related to the The ga WXYC the WXYC at the top of &the ), moving ~12's , as sby the DOS Bby 2,048 , the ythe if it was not t. The WXYC saves the at Side 0, Cylinder 0, the WXYC , it ythe of any non-write protected Kaccessed on the On 360K 5.25" K, the save the 11. On 1.2M 5.25" K, the saves the 28. In both cases, is the last the root G, and any Gentries be lost. The can be in the Ms and "JAM WXYC" "WXYC rules roost" See: PZPAPN : WZ WZ.495 S: 495 - 499 7: PRhAK - 12.2 9503+, The WZ or WZ.495 . Its . WZ is a /and . at the top of the ), not moving ~12's and , as sby the DOS Bby 4,608 the the WZ , it /and . by 499 +while by 495 +. In both cases, the at the end of the b. The @and in the DOS not be . The in the "I'm WIZARd 4.0" The may be Nas a on the monitor PZPAPN : X-2 J: ?seconds set to "60" England S: 795 7: PRhE - p, NAV 3.05, 1.05+ The X-2 gManchester, England, in . X-2 is a wof . employs techniques to avoid detection. The the X-2 at the top of &the , as measured by the DOS Bby 3,008 nby X-2 in the X-2 , it rof 795 hidden X-2 is . The the end of the b. The seconds field in the in the DOS #set to "60". The in the "[X-2] ICE-9, -<ARCV>- Made in England." "Hi I'am called X-2, get my right!" "Look out for the X-3 twins." \the DOS finding Uon all X-2 is in a hang. of X-2 are: X-1: An earlier of the X-2 , X-1 is a wof . . It xone . in the Y. A hang rof 568 to 578 at the end of the b. The and in the DOS not be X-1 on March 5th of any year, at of an in the Oof the and a hang: ICE-9 Presents In Association The ARcV [X-1] Michelangelo -< TOMORROW >-" in the 7, and is not X-1B: A minor of the X-1 adds 572 to 586 +to the . :the same as the X-1 and its effect and the same as X-1. : England March, X-3B: A later of the X-2 , X-3B is a wof . /and . .. Its is 2,048 +, hooking ~21. , X-3B adding 1,060 +to the . The however, be hidden . The @and in the DOS not be . X-3B is unable to distinquish it has , so , adding an 1,060 The the X-3B "[X-3b] ICE-9 (c) ICE-9 Written Out "Look out 4 future releases" "THE TWINS" "[X-3a] & [X-3b]" "ARE ON YOUR PC" "ICE-9" X-3B may \frequent . The DOS detect X-3B is : England March, PZPAPN : X77 J: S: 574 7: PRtAK - , NAV, The X77 . Its . X77 is a wof . and . .. It is one of the generated Phalcon/Skism's G generator. cX77 Y, the X77 at the top of the ), moving ~12's and , as sby the DOS Bby 16,384 X77 in the X77 , it /and . rof 574 at the end of the b. The @and the DOS not be . The in the X77 7, and thus aren't "[PS/G "[x77]" It is what X77 PZPAPN : Xak J: S: 3,132 7: PRhCK - 12.2 9503+, 2.17+ The Xak . Its . Xak is a wof . cXak at the top of the ), not moving ~12's and , as sby the DOS Bby 6,496 }1C and 21 nby the the Xak , it rof 3,132 at the end of the b. The @and in the DOS not be . The in the 7, called Xak 0012, is the # generation "the 7of the same number and was created by a" "predecessor 7on the ## day of the month of ## of the year" # at ## hours, ## minutes, and ## seconds." "<ILove&wantUnow>" in the , the pound or number signs (#) be numeric values in the depend on the generation number of the and the @and the replication PZPAPN Xandu : Xandu J: S: 2,385 7: PRhE - 7.00+ The Xandu . Its . Xandu is a Pn't ymost . a, or aunder s of DOS &5.0. cXandu at the top of the ), not moving ~12's , as sby the DOS gDOS 5.0, Bby 5,264 the the Xandu , it may rof 2,385 at the end of the b. The @and in the DOS not be . The in the Xandu "XANDU ! (C) By MTZ - Italy !" "<Hit any key to continue>" It is wnat Xandu may do PZPAPN : Xpeh J: May, S: 4,016 7: PRhA - , NAV, The Xpeh, or 4-B, in May, . Its . Xpeh is a of . /and . , but not The the Xpeh at the top of &the ). It Pnot move 12's , as by the DOS Bby 4,032 +. The }1C and 21. the Xpeh , it for any reason. rof 4,016 at the end of the b. The @and in the DOS not be . No in the 7of Xpeh the Xpeh \frequent It is if Xpeh :any damage potential. of Xpeh are: Xpeh-3600: on the Xpeh is 3,600 +. Like Xpeh, it hooks }1C and 21. Xpeh-3600 adds 3,600 to 3,615 +to the . /and . be no 5to the @and in the DOS . No in the : Eastern Xpeh-3840: A 3,840 of the Xpeh , Xpeh-3840's is 4,080 +. Like members of the Xpeh group, hooks }1C and 21. /and . rof 3,840 at the end of the b. The @and in the DOS not be Two in the "execombak" "lextxt" : Eastern Xpeh-4048: A 4,048 of the Xpeh , Xpeh-4048's at the top of , using 4K. Like members of the Xpeh group, hooks }1C and 21. /and . rof 4,048 at the end of the b. The @and in the DOS not be in the kmay are : Eastern Xpeh-B: hequivalent to the Xpeh has one differs. May, PZPAPN : XPH XPH-1100 J: May, S: 1,100 - 1,114 7: PRhAK - , NAV, 12.2 9503+, {3.0+ The XPH, or XPH-1100, in May, . Its . XPH is a of . /and . cXPH at the top of &the ), not moving ~12's , as sby the DOS Bby 1,168 nby XPH, but be mapped to low , the .if it was not the XPH , it /and . for any reason. rof 1,100 +. . rof 1,100 to 1,114 In both cases the at the end of the b, and the @and in the DOS not be . The in the 7in all XPH "XPH" "ASCECLHVSRVINWI" The second s very close to the end of the XPH the . It is what capabilities are of XPH are: XPH-1029: A later of the XPH is 1,088 +, hooking 21. by 1,029 while by 1,029 to 1,043 +. The at the end of a, and the @and in the DOS not be . The gthe as do May, XPH.DR&ET: , XPH.DR&ET is a 1,710 of the XPH . Its is 1,776 +, hooking ~21. It /and . , but not copied. by 1,710 +, while by 1,710 to 1,724 +. The at the end of a, and the @and in the DOS not be . The is usually in the may be "(c) 23.5.3945 / DR & ETASCECLHVSPF-ACPRVINWI " kmay PZPAPN : Xuxa J: March, j; TSR; order of music Argentina S: 1,413 7: PRsC - , NAV, The Xuxa in March, . It was in Argentina. Xuxa is a wof . . It Pnot The Xuxa is as a low TSR of 1,728 }1C and 21 nby Xuxa in the Xuxa , it rof 1,413 +. The at the $of the . The @and in the DOS not be . Two the 7in all /MAND "$$TMP. the Xuxa may notice no longer be in position in the DOS towards the end of the G, or in the position where the entry for a the has recently The Xuxa play music between 5:00PM and 6:00PM. The tune is the theme song gthe children's TV show "El show de Xuxa" is broadcast in Argentina during period. of Xuxa are: Xuxa-1405: Iin Argentina in , Xuxa-1405 is a slightly smaller of the Xuxa . It adds 1,405 +to the end of . x. The at the a. Its TSR is 1,712 , and hooks }1C and 21. : Argentina Xuxa-B: to the Xuxa is a very minor : Argentina See: Anti-D PZPAPN : Yafo Mog, Macabi I: May, 3to 2-15-91 12:00a; S: 328 7: PNCK - , NAV, The Yafo, or Mog, in May, . Its . Yafo is a wof . the Yafo Y, the Yafo yall . in the G, it tall of the . ain the Othe the host continue to "Maccabi Yafo Alufa !!!" the Yafo rof 328 at the end of the b. The @and in the DOS to 2-15-91 12:00a. The the is not in the as it is in the PZPAPN YAM-3599 : YAM-3599 Peni ; graphic ?seconds = 02 S: 3,599 7: PRhCK - , NAV, {3.0+ The YAM-3599 or Peni . Its . YAM-3599 is a wof . cYAM-3599 Y, the YAM-3599 at the top of &the ), hooking }09 and 21. , as sby the DOS Bby 3,616 ~12's #moved. the YAM-3599 , it rof 3,599 hide the it is The YAM-3599 at the end of a. The @and in the DOS to be un , or may not be listed, the having set the seconds field in the to "02". The in the 7in YAM-3599 "FUCK YOU ASSHOLE!" "[ Y A M ] 9 2" The third actually has closed ascii heart ) between the 6, instead of spaces. YAM-3599 Oan indiscriminate graphic on the monitor. PZPAPN Yankee Doodle : Yankee Doodle TP44VIR, Five O'clock , 1989 , Austria j; melody @ 5 p.m. S: 2,885 or 2,899 7: PRsA - , NAV, : CleanUp, ], NAV, or The Yankee Doodle by Alexander Holy of the North Atlantic Project in , Austria, on 30, 1989. It was *shortly , where it is TP44VIR. is a xboth . /and . a, and , it play Yankee Doodle on the speaker at 17:00. rd in 2,899 %disruptive by playing Yankee Doodle, Pnothing else harmful As a side note, of the Yankee Doodle out and modify Ping Pong es, changing them so self- destruct of Yankee Doodle are: TP33VIR: disables }1 and 3, thus interfering using debuggers to isolate it. The behavior of the play Yankee Doodle at 5PM. The second to the last ais the number", in the case of TP33VIR, it is 21h (decimal 33). TP34VIR: to TP33VIR, except , and Y. The second to the last ais 22h. TP38VIR: to TP34VIR, except /and . handled in a different way, and if it is loaded 7View active in . The second to the last 26h. TP38VIR was 1988, and is the oldest TP41VIR: to TP38VIR, except the second to the last ais 29h. TP42VIR: of Vacsina tests to determine if the the Ping Pong , and if it is, attempt to disable the Ping Pong by modifying it. The second to the last ais now 2Ah. TP44VIR: to TP42VIR, the second to the last ais 2Ch. TP45VIR: to TP44VIR, the second to the last ais 2Dh. TP46VIR: to TP45VIR, except can detect and kill the Cascade (1701) . The second to the last ais now 2Eh. Yankee Doodle-1905: on the TP44VIR listed by 30,464 it is . It hooks }1C and 21. , it and . rof 1,905 to 1,924 at the end of the b. The "Zak!" can enear the end of all Yankee Doodle-2189: on the TP44VIR listed by 2,192 it is . It hooks }1C and 21. , it and . for any reason. rof 2,189 to 2,204 at the end of the b. The and in the DOS @month and year are set to "4-31". Yankee Doodle-2505: on the TP44VIR listed by 5,408 it is . It hooks }1C and 21. , it and . rof 2,505 to 2,524 at the end of the b. The @and in the DOS not be Yankee Doodle-2973: on the TP44VIR listed by 3,232 it is . It hooks }09, 13, and 21. , it /and . rof 2,973 to 2,986 at the end of the b. The @and in the DOS not be Yankee Doodle-B: Very to the Yankee Doodle , except the of the 7is 2,772 Yankee Doodle.Warlock: A of the Yankee Doodle may corrupt .DBF them. Its is 3,648 Hly hooking be mapped to the , it X, .DBF, and overlay a, but not for any reason. rof 1,817 to 1,832 at the end of the b. The and in the DOS not be . The the "Revenge of WARLOCK!" XOVL DBF" May, YD Logon-D: , YD Logon-D is a 3,045 to 3,060 of the TP44VIR Its is 3,312 +, hooking }1C and 21. It /and . ;the "LOGON. X" and "bbuG". May, YD Logon-E: on YD Logon-D, is a minor adding 3,045 to 3,060 +to the . are "LOGIN. and "bb". May, YD Logon-X: An TP44VIR , YD Logon-X is a 2,968 to 2,987 /and . Y. It may corrupt overlay aas well. Its is 3,232 hooking }09, 1C, 21, and 28. YD Logon-2967: An TP44VIR , YD Logon-2967 is a 2,967 to 2,986 /and . by 2,973 to 2,986 +while . by 2,967 to 2,981 +. Its is 3,232 +, hooking }09, 1C, 21, and 28. It the "LOGIN. See: Vacsina PZPAPN Yankee 2 : Yankee 2 Yankee , Yankee-go-Home, 1961, Old Yankee Endangered , 1989 j; Yankee Doodle melody S: 1,961 7: PNE - , NAV, The Yankee 2, or Yankee , was *in 1989. Unlike the Yankee Doodle , the Yankee 2 is not . It a, adding 1,961 . The attempt to yan . bin the ever an Y. If it is successful in locating an b, and Yankee Doodle be played on the speaker. mthe hex '6D6F746865726675636B6572' at the end. The Yankee 2 7View. of Yankee 2 are: 1624: to Yankee 2 in function, the major its effective is 1,624 See: Enigma PZPAPN : Yap I: March, j; TSR; "Bugs" may S: 6,258 7: PRsCK - , NAV, The Yap Iin March, , in the Yap is a w. It The the Yap the as a low TSR of 11,344 }09 and 21 the Yap is , it are Y. If Y, it by 6,258 +. The at the end of The @and in the not be the Yap , if the holds down the ALT key, or presses the ALT key and an key in combination, numerous graphic "bugs" on the the contents of the O. Pressing the ALT key, or ALT key combination, again in the restored. Yap is an , using encryption very employed by the Cascade and its PZPAPN YB.Old Scribe : YB.Old Scribe fail to function cleared on mono ; write protect Sweden S: 8,588 7: PNCK - NAV 3.05 9503+, 12.2 9503+, The YB.Old Scribe . It to be gSweden. is a wof . the YB.Old Scribe yall of the . in the G. The ed to the DOS prompt. the YB.Old Scribe rof 8,588 at the end of the b. The @and in the DOS not be . The are in the 7in all "(c) MicroSoft "Old Scribe by Nostradamus [NuKE''94]*.?OM" ?OM?" Needless to say, Microsoft Corporation is not connected creation of of YB.Old Scribe are: YB.316: Like the YB , YB.316 xall of the . in the rof 316 the end of the b. The @and in the DOS not be . The in the "Silent Runner by Nostradamus [NuKE'94]*.?OM" ?OM?" YB.466: Like the YB , YB.466 xall of the . in the rof 466 the end of the b. The @and in the DOS not be . The in the "YB-1 & Hand Dick Manitoba / K hntark*. : Sweden YB.647: Like the YB , YB.647 xall of the . in the rof 647 the end of the b. The @and in the DOS not be . The in the "YB-2 / K hntark*. : Sweden PZPAPN Year : Year S: 1,731 - 1,746 7: PRhA - , NAV, The Year . Year wof . /and . . It is destructive The Year Y, the at the top of &the , as sby the DOS by 2,016 ~12's #moved. Year Year , it /and . rof 1,731 to 1,746 at the end of the . The and in the DOS . Year is an , and no in the Year if the year of the . Upon , it the M, starting at side 0, cylinder 0, The Rtrack ;the $of the . The be able to ein the Rtrack: "-- E.U.P.M. The be unrecoverable if the is not powered down immediately as the , root G, and quickly PZPAPN Youth : Youth Sweden S: 640 7: PRhCK - , NAV, The Youth . It is gSweden, of the is in German and French. Youth is a wof . The the Youth Youth at the top of &the , as sby the DOS Bby 1,792 }21 and 22 the the Youth , it rof 640 at the $of the b. The @and in the DOS not be . The can be in the 7in all "McAfee, geht nach Hause! Wir sind un berwindlich" "DemoralizedYouth vous a eu" The roughly translates gGerman and French to: "McAfee, go back Home! We are in control" "DemoralizedYouth got you" of Youth are: Futhark: on the Youth is 2,432 +, hooking ~21. It Y, adding 968 to 1,479 to the x. The the $of the b. The @and the DOS not be . The can be ein all "[Futhark] by -:\) DEMORALIZED YOUTH (/:-" "Ni S Solu Sot Uk Ni Sakse Stain Skorin" : Sweden Hannibal: on the Youth is 2,512 +, hooking ~21. It Y, adding 970 +to the x. The ris hidden by the . The at the $of the b. The @and in the DOS not be . The can be ein all "* DeMoRaLiZeD YoUtH *" "(c) Hannibal Lechter" "Ni S Sakse Stain Skorin" : Sweden Youth.580: on the Youth is 1,664 +, hooking }21 and 22. Y, adding 580 . The at the $of all a. The @and in the DOS to be the seconds field #set to "58". The can be ein all "Demoralized Youth" : Sweden See: Silence PZPAPN Yukon : Yukon Divide Overflow Canada S: 151 7: ONCK - , NAV, The Yukon Canada. is a the Yukon Y, the yall . in the mthe c151 +of the @and in the not be in the process of uall of the . ain the G, the fail a Divide Overflow can be easily identified because the Divide Overflow$ $at offset 87h in the the Yukon cannot be tas the portion by the is not stored. must be Dd and replaced copies. PZPAPN Zaphod : Zaphod England S: 399 7: PNCK - {3.0+ The Zaphod . Zaphod is a wof . .. It is gEngland. the Zaphod Y, the Zaphod ythe in the G. It Pnot further down the the Zaphod rof 399 at the end of the b. The and in the DOS to the @and The Zaphod _28th of any year. On [of an in the "Greetings gZAPHOD." 'the , the in the "Lu*. Zaphod Pn't do Oits PZPAPN Zaragosa : Zaragosa Caz-1159 S: 1,159 7: PRhAK - can, , NAV, The Zaragosa . Its . Zaragosa is a wof . /and . .. It employs techniques. The the Zaragosa Yon a , the Zaragosa ythe copy of in the C: Qroot G. A hang (s the M, or a tcopy of the Zaragosa at the top of &the ~12's #moved. sby the DOS 2,048 }21 and 2F the Zaragosa , it and . rof 1,159 the not be if the Zaragosa . The Zaragosa at the end of the . The @and in the DOS The can be in the Zaragosa "CLEAN." [of the DOS Zaragosa in the utility indicating all Zaragosa It is if Zaragosa of Zaragosa are: Caz-1159: hequivalent to the Zaragosa has three differ. See: Caz PZPAPN Zero Bug : Zero Bug Palette, 1536, Zero Endangered , 1989 j(see ); TSR; graphics S: 1,536 7: PRsC - can, , NAV, : CleanUp, ], or The Zero Bug in the by Jan Terpstra in , 1989. is a by 1,536 +, however the not show up the The 's main objective is to ythe copy of sby the en ment variable /SPEC. If /SPEC , the Zero Bug using INT 21h. has either , it yall . are accessed, qthose accessed by s such as COPY or XCOPY. Any bcreated on an If the =ly loaded t, the hook into the ~1Ch, and a certain amount of has past, a smiley face character ( eat all the zeros it can find on the . The aor format Ms in its present form. of Zero Bug are: Zero Bug B: to Zero Bug, the copy of ed to by the /SPEC ment variable Y. Zero Bug B are copied. The Zero Bug B ' TSR is 1,840 and hooks }21 and 60. PZPAPN ZeroHunt : ZeroHunt Minnow, , Zero-Hunt, Hunt Research Internal 4to . S: 416 7: PRCK - can, ], NAV, The ZeroHunt, or Minnow, Paul Ferguson of Washington, DC. ZeroHunt is a is classified as a the ZeroHunt Y, the in the ment area. It occupies and hooks a number of 21 by remapping. ZeroHunt is , it waits for a . bto be :416 or more +of 00h 6usually are stack space in the and most #converted to a. If the candi :enough 00h 6, ZeroHunt ythe bby writing its over the c416 +of the 00h 6. ZeroHunt alters the cfour +of the newly [its Like class es, ZeroHunt ythe on the fly, so cannot be detected in aif it is . Since internally by stack space, be no ZeroHunt carries no criteria at the present just of ZeroHunt are: ZeroHunt B: on the ZeroHunt in 1,408 +of reserved low . It hooks }21, 25, 26, and several s. It Yprovided a block of at least 411 binary zeros can be in the candi . If the block is the last 411 +of binary zeros in the block, and alter the cfour 6of the PZPAPN Zherkov : Zherkov Zherkov-1882, ZRK ; graphic (larger S: 1,882 - 1,896 7: PRtAK - , NAV, The Zherkov, or Zherkov-1882, , at its , are gthe . It is on the earlier Lozinsky . Zherkov is a /and . The the Zherkov at the top of &the ), moving ~12's , as sby the DOS Bby 4,096 and 21 nby Zherkov. If not the Zherkov , it rof 1,882 by 1,882 to 1,896 +. In both cases, the at the end of the . The @and in the DOS It is if Zherkov of Zherkov are: Zherkov-1940: Zherkov-1940 is a 1,940 of Zherkov. It adds 1,940 +to the . and 1,940 to 1,956 +to . it is , as sby the DOS Bby 5,360 ~12's #moved. }01, and 21 are nby Zherkov-1940 in . The in the .AIDSTEST. Zherkov-1958: Zherkov-1958 is a 1,958 of Zherkov. It adds 1,958 +to the . and 1,958 to 1,970 +to . it is , as sby the DOS Bby 5,360 ~12's #moved. }01, 1C, and 21 are nby Zherkov-1958 in Zherkov-2435: Zherkov-2435 is a 2,435 of Zherkov. It adds 2,435 +to the . and 2,435 to 2,449 +to . it is , as sby the DOS Bby 4,880 ~12's #moved to 9ECF. }01, 08, and 21 are nby Zherkov-2435 in Zherkov-2968: on Zherkov, adds 2,968 to the . x, and 2,968 to 2,982 +to . , as sby the DOS Bby 10,000 }01, 09, 1C, and 21 n, and ~12's #moved. Zherkov-2968 notice a graphic saying "Aidstest topaywka" Non the monitor every few minutes while the hitting a key on the refresh the Oto its contents. Zherkov-2970: Very to Zherkov-2968, is two +larger. It adds 2,970 +to the . x, and 2,970 to 2,984 +to . Its usage of is the same as Zherkov-2968, and like Zherkov-2968, it Othe graphic "Aidstest topaywka" every few minutes. See: Lozinsky PZPAPN ZigZag : ZigZag I: May, fail to function Ooutput shown diagonally down S: 127 7: ONCK - NAV 3.05+, 12.2 9503+, {3.0+, 1.05+ The ZigZag in May, . Its . ZigZag is a corrupts the . the ZigZag Y, the ZigZag yone . in the G. The ed to the DOS prompt. mthe c127 +of the host by the ZigZag 7. The @and in the DOS not be . The in the 7in all ZigZag /*ZZ* v 1.0 DOS" The ZigZag all of the . in the t. At , the alter the video characteristics so any output sent to the be scrolled diagonally down the effect continues until the is reset or re of ZigZag are: ZigZag.232: , ZigZag.232 is a 232 of the ZigZag . It the ctwo . in the Y. The [of the "Bad mthe c232 by the 7. The @and in the DOS not be . The in the "The Tricky Dicky /[TrickyDicky] Created in the city of Toronto" "Bad "Fail on INT 24 .. NOT!!" PZPAPN ZK900 : ZK900 Pray, 900 ; music S: 900 7: PRhAK - ], NAV, The ZK900 gDavid Chess of IBM. ZK900 is a /and . w, and The ZK900 is Y, the at the top of &the sby the DOS Bby 960 }1C and 21 n by the becoming , ZK900 /and . Y. If Y, it by 900 at the end of the b. The @and in the not be by the "zx". ZK900 may \a tune %played every three to five minutes on the speaker. The tune is the children's rhyme "Pray for the dead, and the dead pray for you". of ZK900 are: ZK900-B: on the ZK900 Pn't play music three to five minutes becoming Interference the lower portion of the may 10 minutes . Seven +differ gthe PZPAPN : ZMT S: 262 7: PRCK - , NAV, The ZMT, ZMT-262, or 262, . Its . ZMT is a wof . The the ZMT the ZMT , hooking the ZMT , it rof 262 at the of the b. The @and in the DOS to the and . One can be ein ZMT "ZMt93" the ZMT \frequent Y, as well as , data be written to the (failures if the (the tcopy of of ZMT are: ZMT-252: to ZMT, adds 252 +to the x. The @and in the DOS not be as a low TSR of 880 +, hooking }21 and F8. It allocates an block of 3,552 . One : "ZMt5". ZMT-365: to ZMT, adds 365 +to the x. The @and in the DOS The one is: "ZMt8". PZPAPN : Zoid S: 1,751 - 1,773 7: PRhE - , NAV, 12.2 9503+, {3.0+ The Zoid . Zoid is a wof . cZoid Y, the Zoid at the top of but &the , as sby the DOS Bby 2,048 +. No be mapped to the Zoid the Zoid , it Ytwice in a row. rof 1,751 to 1,773 at the end of the b. The @and in the DOS not be . The in the 7in all Zoid "ZOID. It is what Zoid PZPAPN Zombie : Zombie j; possible Denmark S: 747 7: PRhC - NAV 3.05 9503+, 12.2 9503+, The Zombie . It is Denmark. Zombie is a wof . , but not .. In advanced cZombie at the top of the ), not moving ~12's , as sby the DOS Bby 768 nby the the Zombie , it those an "M" as the 3rd or 4th character of the rof 747 at the end of the . The @and in the DOS not be . The in the 7in all Zombie "Zombie - Danish woodoo hackers (14AUG91)" the 16th generation of the Zombie write to the M, possibly ing in <. The are Side 0, Cylinder 0, 2 through 4. PZPAPN : Zu1 Hungary S: 473 7: PRhCK - , NAV, The Zu1 . It is Hungary. is a wof . .. It Pn't to do The the Zu1 the Zu1 at the top of &the ~12's #moved. , as sby the DOS by 3,008 nby the Zu1 the Zu1 , it over Y. If Y, it the Zu1 of 473 +. The at the end of the . The @and in the DOS The "Zu1" can be in the 7in all Zu1 See: Hungarian 482 PZPAPN : ZY Austria S: 463 - 924 7: PNCK - , NAV, The ZY in Austria in . ZY is a non- wof . the ZY yone the usually by 463 at the of the b. The exception is if the was smaller +, the be 926 +. The @and in the DOS not be . The can be in the 7in ZY "*.com * \ \ XSYS" ZY may kusually t, or if the Ya very small PZPAPN : ZZ I: May, S: 429 7: PNCK - , NAV, The ZZ . Its . ZZ is a of . ZZ is Y, the ZZ yall of the . in the G, it the ZZ of 429 +. The at the $of the b. The @and in the DOS to the @and are no in the It is Pn't ;any destructive Othe "ZZ Top the best !!!" PZPAPN A word gPatricia... The zSummary List in Hyper Copyright (C) by Patricia M. Hoffman. All Rights Reserved. The zSummary List, , represents the cumulative knowledge produced by an ongoing research effort in the detection, identification, and removal of MS-DOS It help you understand what a specific P, how it , how it affects your , and more important, how to get rid of it! The is accurate on the day of release; however, its accuracy degrades rapidly by an amount proportional to the elapsed since release. Due to the extensive number of researchers and because a often end up s, a release might short-lived flaws. a new of a documented not necessarily characteristics identical to those of the sample was analyzed. products mentioned in Hyper shareware or commercial by the vendor or an party for ning Product a "no attached" evaluation. Products 2by the 10th of the month are guaranteed of inclusion in the =month's release of Hyper Products the 10th of the month may be included in the =month's release, but due to timing, may not until the dmonth's release. As of the release of Hyper certified products mdetection and/or removal zincluded. zon the ning Product can be ein the 2s sub-menu off of the main menu. menu includes selections for s for Rmonth's Hyper release, as well as vendor contact zfor those vendors whose products participated in the ning Product All product testing is conducted most recent of the software provided. All testing is performed against actual live es non- . My observed s might differ gthose s obtained a different set of es and s of all s of Central Anti- (DOS, Windows, and NLM), as well as Microsoft Anti- gDOS 6.0, should be aware software the 27 or false alarm on the VALIDATE. included s of Hyper . The VALIDATE. included #verified by both the NCSA and Fridrik Skulason of Frisk Software as not or a trojan. The VALIDATE. , however, gyour 6, 2000. No Dd by the and no damage s. VALIDATE. /as distributed Hyper , is perfectly safe to use, assuming the distribution archive has not s of products ;"Heuristic" ning capabilities, such as Thunder ,Anti- should be aware may indicate VALIDATE false positives due to the ;ed in the to self- your 6, 2000. Again, is not a or a trojan, but 7as a security mechanism. In the state it is distributed in un distribution Hyper , it not harm your A special ks goes to the numerous individuals who offered invaluable support, comments, and suggestions all, enhance the quality of Patricia M. Hoffman Telephone: 1-408-988-3773 3 Bowers Ave Suite 130 Fax: 1-408-988-2438 Santa Clara, CA 95054 Data: 1-408-244-0813 (HST) USA PZPAPN Hyper Viewer Help Function Keys instructions Go To Main Menu Index Search for Shifted: Repeat Print =Topic Credits Color settings Last 20 Topics Open Exit Cursor Motion Keys Arrow keys move the cursor hyperlink to hyperlink. On long topics, scroll the SPEED KEY Press any alphabetic character key to move the cursor to the c(or next) hyperlink begins letter. Home PgUp Home and End go to top and bottom. PageUp and PageDown move through Enter the PgDn the link at the cursor. To retrace your steps, press Using a Mouse LEFT button SELECTS RIGHT button GOES BACK hyperlink or option. or CANCELS operation. Click for up one line F1:Help F2:Home Esc:GoBack Click for up one You may click the button bar or press the associated key. Drag up and down Click for down one Click for down one line Dragging the mouse in the area scrolls the End of Instructions Press Esc to to the Previous Topic PZPAPN Using 8Key Summary Frequently Used Keys: + : Next Topic/Page in Database Sequence - : Previous Topic/Page in Database Sequence ESC : Goback to last viewed Topic/Page : Move to next hyperlink to the right : Move to next hyperlink to the left : Move up one hyperlink : Move down one hyperlink TAB : Move to next hyperlink (moves across page, down) Function Keys: F1 - Hyper Viewer Help F6 - Credits F2 - Go To Main Menu F7 - Color Settings F3 - Index by F8 - Last 20 Topics Viewed F4 - Perform ASCII Search F9 - Open b/Database Shift+F4 - Repeat Last Search F10 - Exit Hyper F5 - Print =Topic General Menu Bar Keys: ALT+F - bMenu ALT+C - Configuration Menu ALT+F,P - Print =topic ALT+C,C - Set Colors ALT+F,X - Exit Hyper ALT+C,W - Set Window ( ALT+C,O - Set Options ALT+G - Goto Menu ALT+C,S - Save Setup ALT+G,B - Backtrack or GoBack ALT+G,H - Last 20 topics viewed ALT+H,U - Viewer Help ALT+G,M - Bookmarks ALT+H,A - Credits / ALT+G,N - ONext Topic Author ALT+G,P - OPrevious Topic ALT+G,S - Perform Topic Search ALT+G,F - Perform Search ALT+G,S - Repeat Last Search Sections Menu Bar Keys: ALT+V,W - A Word gPatricia... ALT+V,I - Index / ALT+V,U - Licensing ALT+V,N - ALT+V,A - Authorized Agents ALT+V,T - ALT+V,C - 2Data & Info ALT+V,L - ALT+V,R - Revision History ALT+V,O - ALT+V,S - ALT+V,P - Relationship Charts ALT+V,E - Entry Fields ALT+V,D - ALT+V,M - McAfee PZPAPN Cross-Reference PZPAPN Appendices Appendices Cross-Reference Entry Fields Cross-Reference Cross-Reference PZPAPN -XRef Select Effective Range: 0 thru 499 500 thru 999 1000 thru 1999 2000 thru 3999 4000 and over PZPAPN The #determined to be " vreports by various organizations track 1024 SBC FORM- Possessed 1575 Haifa Print 4096 Internal R-11 5120 Invader Scream 2-696 AirCop Slayer Alameda Invol Slow Anti-Tel StarDot 600 Anti Joshi Sticky Azusa Junkie Bloody! Keypress Sunday Brain Lehigh SVC 6.0 Butterflies Liberty SVC 6.0 Little Red Cansu Loa Duong Swiss Phoenix Cascade Maltese Amoeba Tai-Pan Curse Michelangelo Taiwan 3 Mummy 2.1 Taiwan 4 DataLock MusicBug Telecom Den Zuk Natas Dir-2 NoInt Tequila MKiller Nomenklatura Tremor Dutch 555 NPox V2000 V2100 Oi Dudley Evil Empire One Half Vacsina Exebug Ontario Fellowship Perfume Fich Ping Pong VLamix Flip Plastique Yankee Doodle PZPAPN ning Product Vendor NLM 2Info X9503 X9312 X9502 X9310 X9501 X9309 X9411 X9308 X9409 X9307 X9408 X9306 X9406 X9305 X9404 X9304 X9403 X9303 X9401 X9302 X9301 PZPAPN ning Product Companies, organizations, and individuals =ly using or evaluating detection software today face the problem is no standardized, documented test suite of es used by all vendors to determine the number of and are detected by products. While a few libraries of es exist today, are not generally for evaluation. Even a company or organization undertakes the task of evaluating detection software in- house, run the risk of the live es accidently released. The Library #researched and fully documented for the zSummary List (Hyper ) has be in existence for over three years. The count of es plus sat the top of the revision history section for the . All in the Library are true spread to execu components of the no trojans joke , or "wanna be" es included in the library. The Library is constantly es and Many of the es included in the Library are or research es. In order to prevent a possible leak of es into the public domain, the Library used for 2is not distributed to vendors or organizations, companies, or individuals. Any for the Library can be ear-marked as 2set" insure never be redistributed to vendors or individuals. Access to the library, either for a demonstration of the es or for vendors wishing to work on detecting a in the collection is on a scheduled, billed machine hourly basis in Santa Clara, California. All such access monitored and require a signed agreement indicating not be transfered to Kand removed gthe premises. The ning Product 2is an objective evaluation of how well a ning product detected the es included in the library as of a particular release of Hyper and the certified product release. Pnot consider product features cannot be objectively evaluated, such as the look and feel of the interface. library indicate the number of es and detected by the certified product. Since many es require multiple tsamples to determine if it is accurately detected, 2is not on the number of adetected, would be meaningless and skewed, but the actual number of es and detected. is given equal weight. A copy of the testing protocol used for the 2s is on request. A ning Product 2may be quoted by vendors who mrequested 2for a release of product. give product s a reliable indication of how well the product detected es included in the documented Library. Organizations and companies can use the to evaluate ning products. In the case of several products for evaluation at the same comparison be produced comparing the detection capabilities of the ning products by ning Product 2is priced at $500 US per product release and library . Dis 2for es is for an $500 US, and be performed on the companion product or dis vmodules of a product release =ly or ning Product 2. The client is expected to provide an evaluation copy of the product %certified. In order to be able to answer any follow-up questions, and to avoid any problems in the unlikely event the software t, the evaluation copy of the software not be ed at the end of the For further zon the ning Product , contact: Patricia M. Hoffman Tel: 1 (408) 988-3773 3 Bowers Avenue Suite 130 Fax: 1 (408) 988-2438 Santa Clara, CA 95054 PZPAPN 2Info ning NLM 2Service Info Companies, organizations, and individuals =ly using or evaluating detection software today face the problem is no standardized, documented test suite of es used by all vendors to determine the number of and are detected by products. While a few libraries of es exist today, are not generally for evaluation. Even a company or organization undertakes the task of evaluating detection software in- house, run the risk of the live es accidently released. NLM (Novell Load Module) products, exposure rs since the es typically be required to reside on one of the bserver's volumes. The Library #researched and fully documented for the zSummary List (Hyper ) has be in existence for over three years. The count of es plus sat the top of the revision history section for the . All in the Library are true spread to execu components of the no trojans, joke , or "wanna be" es included in the library. The Library is constantly as new es and , and the new #researched. Many of the es included in the Library are or research es. In order to prevent a possible leak of es into the public domain, the Library used for 2is not distributed to vendors or organizations, companies, or individuals. Any for the Library can be ear-marked as 2set" insure never be redistributed to vendors or individuals. Anyone may submit es for library. are tested and documented before actual addition to the library. Access to the library, either for a demonstration of the es or for vendors wishing to work on detecting a in the collection, is on a scheduled, billed machine hourly basis in Santa Clara, California. All such access monitored and require a signed agreement indicating not be transfered to Kand/or laptop computers be removed gthe premises. The ning NLM 2Service is an objective evaluation of how well a ning NLM detected the es included in the library as of a particular release of Hyper and the certified NLM release. The certificating party receives a 2form at completion of the testing. The s are included in the 2Section of Hyper library be the number of es and detected by the certified product. Note is not on the number of adetected, but rather the number of unique were detected. #excluded 2s as es do not ythe or of a Novell Netware386 server operating under normal conditions. A copy of the NLM testing protocol used for ning NLM 2s is on request. A ning NLM 2may be quoted by anti- vendors who mrequested 2for a release of product. give product reliable indication of how well the product detected included in the documented Library. Organizations and companies can use the to evaluate ning NLM products. In the case of several products for evaluation at the same comparison be produced on special request comparing the products certified by the client. ning NLM 2is priced at $1,000 US per product release. Dis 2, and custom testing services, on special arrangement, price depending on the client's requirements for the 2. The client is expected to provide an evaluation copy of the NLM product %evaluated. software not be ed in order to avoid any problem in the unlikely event it t, or is required to answer future questions relating to the software or its documentation. For further zon the ning NLM , or for a copy of the testing protocol, please contact: Patricia M. Hoffman Tel: 1 (408) 988-3773 3 Bowers Avenue Suite 130 Fax: 1 (408) 988-2438 Santa Clara, CA 95054 PZPAPN Vendor Anti- Vendor Central Software Tel: 1 (503) 690-8080 15229 NW Greenbrier Pkwy, Ste 200 Fax: 1 (503) 690-7133 Beaverton, OR 97006 BBS: 1 (503) 690-6650 $ Product: 1NLM Certus International See: Symantec ( 6896 W. Snowville Road Product: Novi Brecksville, OH 44141 8Software Tel: 1 (800) 423-9147 1061 E. Indiantown Rd. Ste 500 or: 1 (407) 575-3200 Jupiter, FL 33477 Fax: 1 (407) 575-3026 $ Product: Net-Prot, ]Professional Commcrypt, Inc. Tel: 1 (301) 470-2500 0 Virginia Manor Dr. Ste 300 Product: Detect Plus Beltsville, MD 20705 Comrac ! Tel: +31 2503-21388 Postbus 710 Fax: +31 2503-21102 2130 AS Hoofddorp BBS: +31 3200-48835 The Product: Gobbler II Cybec Pty Ltd. Tel: +03 521-0655 3/350 Hampton St. Fax: +03 521-0727 Hampton. 3188 Victoria Product: VET Australia Datawatch Corporation Tel: 1 (919) 549-0711 Triangle Software Division Fax: 1 (919) 549-0065 P. O. Box 13984 Product: Research Triangle Park, NC 27709-3984 Fifth Generation Tel: 1 (504) 291-7221 P. O. Box 83560 Fax: 1 (504) 295-3268 Baton Rouge, LA 70884-3560 Product: Untouchable, Frisk Software International Fax: +354-1-28801 Postholf 7180 Product: IS-127 Reykjavik Iceland I. B. M. Product: IBM Anti- [Contact your local marketting branch] (DOS, NLM, OS2) Intel PCED Tel: 1 (800) 538-3373 5200 N.E. Elam Young Pkwy or: 1 (801) 379-2200 Hillsboro, OR 97124 Fax: 1 (908) 530-0622 $ Product: La Iris Software Tel: +972-3-5715319 6 Hamavo St. Fax: +972-3-318731 Givataim 53303 Product: Anti- ISRAEL Leprechaun Software International Ltd. Tel: 1 (404) 971-8818 P. O. Box 669306 Fax: 1 (404) 971-8828 Marietta, GA 30066-0106 BBS: 1 (404) 971-8886 $ Product: Buster Logidisque Inc. Tel: 1 (514) 933-2225 C.P. 10, succ. D Fax: 1 (514) 933- Montreal Qc H3K 3B9 Product: Softech Dr CANADA McAfee Associates, Inc. Tel: 1 (408) 988-3832 2710 Walsh Ave, Suite 200 Fax: 1 (408) 970-9727 Santa Clara, CA 95051 BBS: 1 (408) 988-4004 $ Product: 5 NetShield Microcom Inc. Tel: 1 (919) 490-1277 P. O. Box 51489 Product: Durham, NC 27717 Panda Tel: 1 (302) 764-4722 801 Wilson Road Product: Panda Pro Wilmington, DE 19803 RG Software Tel: 1 (602) 423-8000 6900 East Camelback Rd, Suite 630 Product: Scottsdale, AZ 85251 S&S International Tel: +44 (0442) 877877 Berkley Court Fax: +44 (0442) 877882 Mill Street Product: Dr. Solomon's Berkhamsted, Hertfordshire HP4 2HB Anti- Toolkit England % (DOS & NLM) Safetynet, Inc. Tel: 1 (201) 467-1024 55 Bleeker St. or: 1 (800) 851-0188 Millburn, NJ 07041 Fax: 1 (201) 467-1611 $ BBS: 1 (201) 467-1581 , Product: Net Professional Sophos Ltd. Tel: +44 (0235) 559933 21 The Quadrant Fax: +44 (0235) 559935 Abingdon, OX14 3YS Product: England For Netware Symantec Peter Norton Group Tel: 1 (310) 449-4900 2500 Broadway #200 Fax: 1 (310) 453-0636 Santa Monica, CA 90404 Product: NAV Trend Micro Devices Inc. Tel: 1 (310) 782-8190 2421 W. 205th Street Ste D-100 Fax: 1 (310) 328-5892 Torrance, CA 90501-9812 BBS: 1 (320) 320-2523 $ Product: XTree Company Tel: 1 (805) 541-0604 4330 Santa Fe Road Fax: 1 (805) 541-8053 San Luis Obispo, CA 93401 BBS: 1 (805) 546-9150 $ Product: AllSafe, 5 ViruSafe PZPAPN X9503 Library : X503 @: Mar 31, es: 2,905 es: 2,811 es: 94 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central 12.2 9503 X503 2,399 86 2,313 82.6 8Software's Professional 2.17 X503 2,830 93 2,737 97.4 Dr. Solomon's 7.00 X503 2,805 92 2,713 96.6 IBM Anti- /DOS 2.10 X503 2,757 94 2,663 94.9 McAfee Assoc 2.1.7 X503 2,835 94 2,741 97.6 Microsoft AV DOS 6.22 X502 1,125 64 1,061 38.7 Norton Anti- 3.05 9503 X503 2,341 88 2,253 80.6 Sophos' X503 2,800 91 2,709 96.4 NLM Anti- Products: Central 1NLM 2.5 X503 1,650 N/A 1,650 58.7 Cheyenne's Inoculan 3.0 X501 2,093 N/A 2,093 74.5 8Soft. Net-Prot 2.17 X503 2,402 N/A 2,402 85.5 IBM Anti- NLM 2.10 X503 2,663 N/A 2,663 94.7 Dr. Solomon's NLM 7.00 X503 2,702 N/A 2,702 96.1 McAfee NetShield 2.0 X503 2,736 N/A 2,736 97.3 Norton AV NLM 1.05 9503 X503 2,070 N/A 2,070 73.6 Sophos' NLM 2.71 X503 2,726 N/A 2,726 97.0 The s for ]Professional apply to Frisk Software's ]of the same number. Note: The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified Note: Products are certified less a 65% detection rate are not recommended by the author of Hyper for general usage as an ner. As such, not be included in the individual entries' detection zin Hyper products may employ technologies ning technology for detection was not tested process. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. PZPAPN X9502 Library : X501 @: Mar 10, es: 2,831 es: 2,739 es: 92 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central X502 1,981 84 1,897 70.0 Frisk Software's Shareware X502 2,746 90 2,656 97.0 Dr. Solomon's 6.71 X502 2,732 90 2,642 96.5 IBM Anti- /DOS 1.07E X411 2,596 91 2,505 91.7 McAfee Assoc 2.1.5 X502 2,775 92 2,683 98.0 Microsoft Anti- DOS 6.22 X502 1,124 64 1,060 39.7 Norton Anti- X501 2,147 86 2,061 75.8 Sophos' X502 2,726 89 2,637 96.3 NLM Anti- Products: Cheyenne's Inoculan 3.0 X501 2,092 N/A 2,092 76.4 8Soft. Net-Prot 1.25 X406 2,207 N/A 2,207 80.6 Dr. Solomon's NLM 6.66 X411 2,534 N/A 2,534 92.5 McAfee NetShield(3.11)1.6V117 X408 2,477 N/A 2,477 90.4 Norton Anti- NLM 1.05 X502 2,061 N/A 2,061 75.3 Sophos' NLM 2.67 X411 2,643 N/A 2,643 96.5 The s for ](Shareware) apply to 8Software's ]Professional 2.16. Note: The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. PZPAPN X9501 Library : X501 @: Jan 31, es: 2,831 es: 2,739 es: 92 Certified 1st es Detected - Tot Product Cert DOS ning Products: 8Software's Professional 2.13 X406 2,701 90 2,611 95.4 Dr. Solomon's 6.69 X411 2,721 90 2,631 96.1 IBM Anti- /DOS 1.07E X411 2,596 91 2,505 91.7 McAfee Assoc 2.1.4 X501 2,719 92 2,627 96.0 Norton Anti- X501 2,147 86 2,061 75.8 Sophos' X411 2,711 87 2,624 95.8 NLM Anti- Products: Cheyenne's Inoculan 3.0 X501 2,092 N/A 2,092 76.4 8Soft. Net-Prot 1.25 X406 2,207 N/A 2,207 80.6 Dr. Solomon's NLM 6.66 X411 2,534 N/A 2,534 92.5 McAfee NetShield(3.11)1.6V117 X408 2,477 N/A 2,477 90.4 Sophos' NLM 2.67 X411 2,643 N/A 2,643 96.5 The s for ]Profes- sional apply to Frisk Software's 2.13. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9411 Library : X411 @: Nov 30, es: 2,806 es: 2,715 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: 8Software's Professional 2.13 X406 2,688 89 2,599 95.8 Dr. Solomon's 6.69 X411 2,704 89 2,615 96.4 IBM Anti- /DOS 1.07E X411 2,586 90 2,496 92.2 McAfee Assoc 2.1.3 X411 2,737 91 2,646 97.5 Norton Anti- 3.0 9411 Upd X411 2,144 85 2,059 76.4 Sophos' X411 2,694 86 2,608 96.0 NLM Anti- Products: 8Soft. Net-Prot 1.25 X406 2,199 N/A 2,199 81.0 Dr. Solomon's NLM 6.66 X411 2,521 N/A 2,521 92.9 McAfee NetShield(3.11)1.6V117 X408 2,473 N/A 2,473 91.1 Sophos' NLM 2.67 X411 2,627 N/A 2,627 96.8 The s for ]Profes- sional apply to Frisk Software's 2.13. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9409 Library : X409 @: Sep 27, es: 2,697 es: 2,606 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,808 83 1,725 67.0 8Software's Professional 2.13 X406 2,608 89 2,519 96.7 Dr. Solomon's 6.64 X406 2,505 88 2,417 92.9 IBM Anti- /DOS 1.05 X406 2,306 85 2,221 85.5 McAfee Assoc 9.30V117 X408 2,563 91 2,472 95.0 Microsoft AV/DOS 6.0 or 6.2 X312 1,203 67 1,136 44.6 8/93 Norton Anti- 3.0 A06 Upd X406 2,057 84 1,973 76.3 NLM Anti- Products: Central AV/NLM 2.0 X403 1,556 N/A 1,556 59.7 8Soft. Net-Prot 1.25 X406 2,150 N/A 2,150 82.5 Dr. Solomon's NLM 6.64 X406 2,404 N/A 2,404 92.3 McAfee NetShield(3.11)1.6V117 X408 2,447 N/A 2,447 93.9 Norton Anti- NLM 1.0A06 X406 1,955 N/A 1,955 75.0 The s for ]Profes- sional apply to Frisk Software's 2.13. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9408 Library : X408 @: Aug 15, es: 2,632 es: 2,541 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,787 83 1,704 67.9 8Software's Professional 2.13 X406 2,556 89 2,467 97.1 Dr. Solomon's 6.64 X406 2,472 88 2,384 93.9 IBM Anti- /DOS 1.05 X406 2,284 85 2,199 86.8 McAfee Assoc 9.30V117 X408 2,536 91 2,445 96.4 Microsoft AV/DOS 6.0 or 6.2 X312 1,196 67 1,129 45.4 8/93 Norton Anti- 3.0 A06 Upd X406 2,045 84 1,961 77.7 NLM Anti- Products: Central AV/NLM 2.0 X403 1,534 N/A 1,534 60.4 8Soft. Net-Prot 1.25 X406 2,115 N/A 2,115 83.2 Dr. Solomon's NLM 6.64 X406 2,374 N/A 2,374 93.4 McAfee NetShield(3.11)1.6V117 X408 2,420 N/A 2,420 95.2 Norton Anti- NLM 1.0A06 X406 1,941 N/A 1,941 76.4 The s for ]Profes- sional apply to Frisk Software's 2.10g. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9406 00) 3 0PT) Library : X406 @: Jun 30, es: 2,586 es: 2,495 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,780 83 1,697 68.8 8Software's Professional 2.13 X406 2,512 89 2,423 97.1 Dr. Solomon's 6.64 X406 2,436 88 2,348 94.2 IBM Anti- /DOS 1.05 X406 2,268 85 2,183 87.7 McAfee Assoc. V116 X406 2,509 91 2,418 97.0 Microsoft AV/DOS 6.0 or 6.2 X312 1,196 67 1,129 46.3 8/93 Norton Anti- 3.0 A06 Upd X406 2,042 84 1,958 79.0 Sophos' DOS 2.58 X403 2,387 84 2,303 92.3 NLM Anti- Products: Central AV/NLM 2.0 X403 1,527 N/A 1,527 61.2 8Soft. Net-Prot 1.25 X406 2,095 N/A 2,095 84.0 Dr. Solomon's NLM 6.64 X406 2,338 N/A 2,338 93.7 McAfee NetShield(3.11)1.6V116 X406 2,390 N/A 2,390 95.8 Norton Anti- NLM 1.0A06 X406 1,938 N/A 1,938 77.7 Sophos' NLM 2.58 X403 2,301 N/A 2,301 92.2 The s for ]Profes- sional apply to Frisk Software's 2.10g. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9404 Library : X404 @: May 02, es: 2,545 es: 2,454 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,767 83 1,684 69.4 8Software's Professional 2.10g X401 2,446 89 2,357 96.1 Datawatch's Virex PC 2.92 X312 1,927 83 1,844 75.7 Dr. Solomon's 6.60 X403 2,304 88 2,216 90.5 IBM Anti- /DOS 1.04 X312 2,175 85 2,090 85.5 McAfee Assoc. V114 X404 2,488 91 2,397 97.8 Microsoft AV/DOS 6.0 or 6.2 X312 1,192 67 1,125 46.8 8/93 Norton Anti- 3.0 A02 Upd X401 1,985 84 1,901 78.0 Safetynet's Net Pro 2.11a X403 2,447 89 2,358 96.2 Sophos' DOS 2.58 X403 2,366 84 2,282 93.0 Trend Micro Devices 2.65 X401 1,728 68 1,660 68.0 NLM Anti- Products: Central AV/NLM 2.0 X403 1,518 N/A 1,518 61.9 8Soft. Net-Prot 1.22 X401 1,908 N/A 1,908 77.8 Dr. Solomon's NLM 6.54 X309 2,029 N/A 2,029 82.7 Intel's La ect 1.53+8/93S X309 1,416 N/A 1,416 57.7 McAfee NetShield(3.11)1.6V113 X404 2,350 N/A 2,350 95.8 Norton Anti- NLM 1.0 X403 1,883 N/A 1,883 76.7 Sophos' NLM 2.58 X403 2,280 N/A 2,280 92.9 The s for ]Profes- sional apply to Frisk Software's 2.10g. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9403 Library : X403 @: Mar 23, es: 2,510 es: 2,419 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,760 83 1,677 70.1 8Software's Professional 2.10g X401 2,426 89 2,337 96.7 Datawatch's Virex PC 2.92 X312 1,923 83 1,840 76.6 Dr. Solomon's 6.60 X403 2,293 88 2,205 91.4 IBM Anti- /DOS 1.04 X312 2,168 85 2,083 86.4 McAfee Assoc. V112 X403 2,456 91 2,365 97.9 Microsoft AV/DOS 6.0 or 6.2 X312 1,190 67 1,123 47.4 8/93 Norton Anti- 3.0 A02 Upd X401 1,980 84 1,896 78.9 Safetynet's Net Pro 2.11a X403 2,419 89 2,330 96.4 Sophos' DOS 2.58 X403 2,357 84 2,273 93.9 Trend Micro Devices 2.65 X401 1,724 68 1,656 68.7 NLM Anti- Products: Central AV/NLM 2.0 X403 1,511 N/A 1,511 62.5 8Soft. Net-Prot 1.22 X401 1,900 N/A 1,900 78.5 Dr. Solomon's NLM 6.54 X309 2,021 N/A 2,021 83.6 Intel's La ect 1.53+8/93S X309 1,415 N/A 1,415 58.5 McAfee NetShield(3.11)1.56V111 X401 2,298 N/A 2,298 95.0 Norton Anti- NLM 1.0 X403 1,878 N/A 1,878 77.6 Sophos' NLM 2.58 X403 2,271 N/A 2,271 93.9 The s for ]Profes- sional apply to Frisk Software's 2.10g. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9401 Library : X401 @: Jan 31, es: 2,477 es: 2,386 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.1 X401 1,742 83 1,659 70.3 8Software's Professional 2.10g X401 2,402 89 2,313 97.0 Datawatch's Virex PC 2.92 X312 1,912 83 1,829 77.2 Dr. Solomon's 6.55 X309 2,200 87 2,113 88.8 IBM Anti- /DOS 1.04 X312 2,154 85 2,069 87.0 McAfee Assoc. V111 X401 2,344 90 2,254 94.6 Microsoft AV/DOS 6.0 or 6.2 X312 1,180 67 1,113 47.6 8/93 Norton Anti- 3.0 A02 Upd X401 1,975 84 1,891 79.7 Safetynet's Net Pro 2.10 X312 2,359 89 2,270 95.2 Trend Micro Devices 2.65 X401 1,720 68 1,652 69.4 NLM Anti- Products: Central AV/NLM 1.0 X211 1,128 N/A 1,128 47.3 Cheyenne's {ulan 2.0/2.18g X305 1,492 N/A 1,492 62.5 8Soft. Net-Prot 1.22 X401 1,884 N/A 1,884 79.0 Dr. Solomon's NLM 6.54 X309 2,009 N/A 2,009 84.2 Intel's La ect 1.53+8/93S X309 1,411 N/A 1,411 59.1 McAfee NetShield(3.11)1.56V111 X401 2,279 N/A 2,279 95.5 The s for ]Profes- sional apply to Frisk Software's 2.10g. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9312 Library : X312 @: Dec 16, es: 2,426 es: 2,335 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,520 82 1,438 62.7 8Software's Professional 2.09f X309 2,308 89 2,219 95.1 Datawatch's Virex PC 2.92 X312 1,898 83 1,815 78.2 Dr. Solomon's 6.55 X309 2,179 87 2,092 89.8 IBM Anti- /DOS 1.04 X312 2,136 85 2,051 88.1 Leprechaun Buster 3.96 X308 1,839 69 1,770 75.8 McAfee Assoc. V109 X312 2,347 90 2,257 96.7 Microsoft AV/DOS 6.0 or 6.2 X312 1,176 67 1,109 48.5 8/93 Norton Anti- X310 1,960 84 1,876 80.8 Safetynet's Net Pro 2.10 X312 2,328 89 2,239 96.0 Sophos' X309 2,202 80 2,122 90.8 NLM Anti- Products: Central AV/NLM 1.0 X211 1,124 N/A 1,124 48.1 Cheyenne's {ulan 2.0/2.18g X305 1,485 N/A 1,485 63.6 8Soft. Net-Prot 1.00s X307 1,604 N/A 1,604 68.7 Dr. Solomon's NLM 6.54 X309 1,994 N/A 1,994 85.4 Intel's La ect 1.53+8/93S X309 1,405 N/A 1,405 60.2 McAfee NetShield(3.11)1.55V109 X312 2,233 N/A 2,233 95.6 Sophos' NLM 2.53 X309 2,122 N/A 2,122 90.9 The s for ]Profes- sional apply to Frisk Software's 2.09f. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. Note: Where an NLM product has both a Netware 3.11 & 4.0 the Netware 3.11 is certified. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9310 Library : X310 @: Oct 31, es: 2,375 es: 2,284 es: 91 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,495 82 1,413 63.0 8Software's Professional 2.09f X309 2,268 89 2,179 95.5 Dr. Solomon's 6.55 X309 2,148 87 2,061 90.4 Fifth Generation 30.00 X309 2,085 86 1,999 87.8 IBM Anti- /DOS 1.03 X309 1,981 83 1,898 83.4 Leprechaun Buster 3.96 X308 1,815 69 1,746 76.4 McAfee Assoc. V108 X309 2,256 90 2,166 95.0 Microsoft AV/DOS 6.0+8/93S X308 1,156 67 1,089 48.7 Norton Anti- X310 1,939 84 1,855 81.6 Safetynet's Net 2.08a X305 2,126 86 2,040 89.5 Sophos' X309 2,172 80 2,092 91.5 NLM Anti- Products: Central AV/NLM 1.0 X211 1,103 N/A 1,103 48.3 Cheyenne's {ulan 2.0/2.18g X305 1,471 N/A 1,471 64.4 8Soft. Net-Prot 1.00s X307 1,581 N/A 1,581 69.2 Dr. Solomon's NLM 6.54 X309 1,973 N/A 1,973 86.4 Intel's La ect 1.53+8/93S X309 1,386 N/A 1,386 60.7 McAfee NetShield 1.52aV108 X309 2,141 N/A 2,141 93.7 Sophos' NLM 2.53 X309 2,092 N/A 2,092 91.6 The s for ]Profes- sional apply to Frisk Software's 2.09f. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9309 Library : X309 @: Sep 30, es: 2,317 es: 2,227 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,480 82 1,398 63.9 8Software's Professional 2.09f X309 2,223 89 2,134 95.9 Dr. Solomon's 6.55 X309 2,124 87 2,037 91.7 Fifth Generation 30.00 X309 2,066 86 1,980 89.2 IBM Anti- /DOS 1.03 X309 1,963 83 1,880 84.7 Leprechaun Buster 3.96 X308 1,802 69 1,733 77.8 McAfee Assoc. V108 X309 2,234 90 2,144 96.4 Microsoft AV/DOS 6.0+8/93S X308 1,151 67 1,084 49.7 Norton Anti- 2.1.10 X308 1,363 74 1,289 58.8 Safetynet's Net 2.08a X305 2,103 86 2,017 90.8 Sophos' X309 2,149 80 2,069 92.8 NLM Anti- Products: Central AV/NLM 1.0 X211 1,099 N/A 1,099 49.4 Cheyenne's {ulan 2.0/2.18g X305 1,466 N/A 1,466 65.8 8Soft. Net-Prot 1.00s X307 1,557 N/A 1,557 69.9 Dr. Solomon's NLM 6.54 X309 1,959 N/A 1,959 88.0 Intel's La ect 1.53+8/93S X309 1,377 N/A 1,377 61.8 McAfee NetShield 1.52aV108 X309 2,119 N/A 2,119 95.2 Sophos' NLM 2.53 X309 2,069 N/A 2,069 92.9 The s for ]Profes- sional apply to Frisk Software's 2.09f. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9308 Library : X308 @: Aug 28, es: 2,253 es: 2,163 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,472 82 1,390 65.3 8Software's Professional 2.09 X307 2,154 87 2,067 95.6 Dr. Solomon's 6.53 X307 2,004 86 1,918 89.0 Fifth Generation 28.02S X306 1,869 84 1,785 83.0 IBM Anti- /DOS 1.02 X306 1,742 82 1,660 77.3 Leprechaun Buster 3.96 X308 1,780 69 1,711 79.0 McAfee Assoc. V106 X307 2,139 90 2,049 94.9 Microsoft AV/DOS 6.0+8/93S X308 1,150 67 1,083 51.0 Norton Anti- 2.1.10 X308 1,360 74 1,286 60.4 Safetynet's Net 2.08a X305 2,066 86 1,980 91.7 NLM Anti- Products: Central AV/NLM 1.0 X211 1,099 N/A 1,099 50.8 Cheyenne's {ulan 2.0/2.18g X305 1,464 N/A 1,464 67.7 8Soft. Net-Prot 1.00s X307 1,535 N/A 1,535 71.0 Intel's La ect 1.53+1/93S X302 1,169 N/A 1,169 54.1 McAfee NetShield 1.52aV106 X308 2,017 N/A 2,017 93.3 The s for ]Profes- sional apply to Frisk Software's 2.09. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9307 Library : X307 @: Jul 28, es: 2,191 es: 2,101 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,457 82 1,375 66.5 8Software's Professional 2.09 X307 2,111 87 2,024 96.4 Dr. Solomon's 6.53 X307 1,970 86 1,884 89.9 Fifth Generation 28.02S X306 1,839 84 1,755 83.9 IBM Anti- /DOS 1.02 X306 1,726 82 1,644 78.8 Leprechaun Buster 3.95 X305 1,402 68 1,334 64.0 McAfee Assoc. V106 X307 2,100 90 2,010 95.9 Microsoft Anti- /DOS 6.0 X303 1,074 64 1,010 49.0 Norton Anti- 2.1.7 X305 1,338 73 1,265 61.1 Safetynet's Net 2.08a X305 2,027 86 1,941 92.5 Softech's Dr 1.10 (Engl) X305 1,065 62 1,003 48.6 Sophos' X304 1,886 71 1,815 86.1 NLM Anti- Products: Central AV/NLM 1.0 X211 1,093 N/A 1,093 52.0 Cheyenne's {ulan 2.0/2.18g X305 1,457 N/A 1,457 69.4 8Soft. Net-Prot 1.00s X307 1,508 N/A 1,508 71.8 Intel's La ect 1.53+1/93S X302 1,159 N/A 1,159 55.2 McAfee NetShield 1.5V104 X305 1,901 N/A 1,901 90.5 Sophos' NLM 2.48a X304 1,815 N/A 1,815 86.4 The s for ]Profes- sional apply to Frisk Software's 2.09. 8Software's Net-Prot NLM is a last minute performed month. The detection zfor be included on the entries next month. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9306 Library : X306 @: Jun 30, es: 2,129 es: 2,039 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 2.0 X306 1,441 82 1,359 67.7 Dr. Solomon's 6.51 X305 1,914 86 1,828 89.9 Fifth Generation 28.02S X306 1,804 84 1,720 84.7 Frisk Software's ]2.08 X305 1,980 86 1,894 93.0 IBM Anti- /DOS 1.02 X306 1,695 82 1,613 79.6 Leprechaun Buster 3.95 X305 1,386 68 1,318 65.1 McAfee Assoc. V105 X306 2,074 90 1,984 97.4 Microsoft Anti- /DOS 6.0 X303 1,073 64 1,009 50.4 Norton Anti- 2.1.7 X305 1,321 73 1,248 62.1 Safetynet's Net 2.08a X305 1,980 86 1,894 93.0 Softech's Dr 1.10 (Engl) X305 1,061 62 999 49.8 Sophos' X304 1,856 71 1,785 87.2 NLM Anti- Products: Central AV/NLM 1.0 X211 1,091 N/A 1,091 53.5 Cheyenne's {ulan 2.0/2.18g X305 1,447 N/A 1,447 71.0 Intel's La ect 1.53+1/93S X302 1,144 N/A 1,144 56.1 McAfee NetShield 1.5V104 X305 1,880 N/A 1,880 92.2 Sophos' NLM 2.48a X304 1,785 N/A 1,785 87.5 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9305 Library : X305 @: May 28, es: 2,062 es: 1,972 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 1.4 X211 1,202 68 1,134 58.3 Dr. Solomon's 6.51 X305 1,887 86 1,801 91.5 Frisk Software's ]2.08 X305 1,944 86 1,858 94.3 IBM Anti- /DOS 1.0 X211 1,473 72 1,401 71.4 Leprechaun Buster 3.95 X305 1,381 68 1,313 67.0 McAfee Assoc. V104 X305 1,981 89 1,892 96.1 Microsoft Anti- /DOS 6.0 X303 1,072 64 1,008 52.0 Norton Anti- 2.1.7 X305 1,313 73 1,240 63.7 RG Software's X302 1,359 68 1,291 65.9 Safetynet's Net 2.08a X305 1,944 86 1,858 94.3 Softech's Dr 1.10 (Engl) X305 1,060 62 998 51.4 Sophos' X304 1,842 71 1,771 89.3 NLM Anti- Products: Central AV/NLM 1.0 X211 1,089 N/A 1,089 55.2 Cheyenne's {ulan 2.0/2.18g X305 1,445 N/A 1,445 73.3 Intel's La ect 1.53+1/93S X302 1,141 N/A 1,141 57.9 McAfee NetShield 1.5V104 X305 1,856 N/A 1,856 94.1 Sophos' NLM 2.48a X304 1,771 N/A 1,771 89.8 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. " before the product indicates the was performed against the Library as of X305, but the publication of the Hyper release @. Hence, it is not shown in the actual X305 release of Hyper The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9304 Library : X304 @: Apr 28, es: 2,015 es: 1,925 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 1.4 X211 1,197 68 1,129 59.4 Dr. Solomon's 6.04 X302 1,740 85 1,655 86.4 Fifth Gen Sys. UnTouch 25.10 X212 1,298 66 1,232 64.4 Frisk Software's ]2.07 X302 1,797 86 1,711 89.2 IBM Anti- /DOS 1.0 X211 1,462 72 1,390 72.6 McAfee Assoc. V102 X303 1,877 89 1,788 93.2 Microsoft Anti- /DOS 6.0 X303 1,069 64 1,005 53.1 Norton Anti- 2.1.4 X302 1,277 71 1,206 63.4 RG Software's X302 1,351 68 1,283 67.1 Sophos' X304 1,827 71 1,756 90.7 NLM Anti- Products: Central AV/NLM 1.0 X211 1,086 N/A 1,086 56.4 Intel's La ect 1.53+1/93S X302 1,135 N/A 1,135 59.0 McAfee NetShield 1.11V102 X303 1,720 N/A 1,720 89.4 Sophos' NLM 2.48a X304 1,756 N/A 1,756 91.2 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9303 00R 3 0PTR Library : X303 @: Mar 23, es: 1,956 es: 1,866 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 1.4 X211 1,195 68 1,127 61.1 Dr. Solomon's 6.04 X302 1,729 85 1,644 88.4 Fifth Gen Sys. Untouch 25.10 X212 1,297 66 1,231 66.3 Frisk Software's ]2.07 X302 1,774 86 1,688 90.7 IBM Anti- /DOS 1.0 X211 1,456 72 1,384 74.4 McAfee Assoc. V102 X303 1,870 89 1,781 95.6 Microsoft Anti- /DOS 6.0 X303 1,067 64 1,003 54.6 Norton Anti- 2.1.4 X302 1,272 71 1,201 65.0 RG Software's X302 1,349 68 1,281 69.0 Sophos' X302 1,630 67 1,563 83.3 NLM Anti- Products: Central AV/NLM 1.0 X211 1,084 N/A 1,084 58.1 Intel's La ect 1.53+1/93S X302 1,131 N/A 1,131 60.6 McAfee NetShield 1.11V102 X303 1,713 N/A 1,713 91.8 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified Note: " " before a product , in case Microsoft Anti- gMS-DOS 6.0, indicates the product was certified against the Library as of the March of Hyper , but Hyper X303 was released. The 2for Microsoft Anti- performed on , using the copy of Microsoft Anti- shipped MS-DOS 6.0, in general release on March 31, PZPAPN X9302 Library : X302 @: Feb 23, es: 1,894 es: 1,804 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 1.4 X211 1,189 68 1,121 62.8 Certus Int'l Novi 1.15a X210 1,204 72 1,132 63.6 Dr. Solomon's 6.04 X302 1,713 85 1,628 90.4 Fifth Gen Sys. Untouch 25.10 X212 1,295 66 1,229 68.4 Frisk Software's ]2.07 X302 1,750 86 1,664 92.4 IBM Anti- /DOS 1.0 X211 1,452 72 1,380 76.7 McAfee Assoc. V100 X302 1,820 89 1,731 96.1 Norton Anti- 2.1.4 X302 1,266 71 1,195 66.8 RG Software's X302 1,343 68 1,275 70.9 Sophos' X302 1,617 67 1,550 85.4 Trend Micro Devices PC X208 1,027 57 970 54.2 NLM Anti- Products: Central AV/NLM 1.0 X211 1,079 N/A 1,079 59.8 Intel's La ect 1.53+1/93S X302 1,129 N/A 1,129 62.6 McAfee NetShield 1.10V100 X302 1,665 N/A 1,665 92.3 Sophos' NLM 2.44 X212 1,474 N/A 1,474 81.7 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9301 00; 0 0PT; Library : X301 @: Jan 20, es: 1,836 es: 1,746 es: 90 Certified 1st es Detected - Tot Product Cert DOS ning Products: Central Anti- 1.4 X211 1,184 68 1,116 64.5 Certus Int'l Novi 1.15a X210 1,198 72 1,126 65.3 Commcrypt's Detect Plus 3.1B X210 907 64 843 49.4 Cybec's VET 7.04 X209 1,183 68 1,115 64.4 Dr. Solomon's 6.00 X211 1,532 83 1,449 83.4 Fifth Gen Sys. Untouch 25.10 X212 1,290 66 1,224 70.3 Frisk Software's ]2.05 X209 1,515 76 1,439 82.5 IBM Anti- /DOS 1.0 X211 1,444 72 1,372 78.7 Iris Anti- + 4.20.01 X208 1,117 60 1,057 60.8 Leprechaun's Buster 3.93 X211 1,340 69 1,271 73.0 McAfee Assoc. X211 1,653 89 1,564 90.0 Norton Anti- 2.1.2 X212 1,221 62 1,159 66.5 Safetynet's Net 2.04c X208 1,449 76 1,373 78.9 Sophos' 2.43a X211 1,538 66 1,472 83.8 Trend Micro Devices PC X208 1,024 57 967 55.8 NLM Anti- Products: Central AV/NLM 1.0 X211 1,074 N/A 1,074 61.5 Intel's La ect 1.5 X209 935 N/A 935 53.6 McAfee NetShield 1.03V99 X211 1,520 N/A 1,520 87.1 Sophos' NLM 2.44 X212 1,465 N/A 1,465 83.9 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. The "1st Cert" column indicates the Number the Anti- Product ccertified. It is sto show the age of the certified PZPAPN X9212 Library : X212 @: Dec 20, es: 1,725 es: 1,635 es: 90 Certified es Detected Product DOS ning Products: Central Anti- 1.4 1,172 68 1,104 67.9 Certus Int'l Novi 1.15a 1,185 72 1,113 68.7 Commcrypt's Detect Plus 3.1B 896 64 832 51.9 Cybec's VET 7.04 1,169 68 1,101 67.8 Dr. Solomon's 6.00 1,465 83 1,382 84.9 Fifth Gen Sys. Untouch 25.10 1,271 66 1,205 73.7 Frisk Software's ]2.05 1,471 76 1,395 85.3 IBM Anti- /DOS 1.0 1,391 72 1,319 80.6 Iris Anti- + 4.20.01 1,106 60 1,046 64.1 Leprechaun's Buster 3.93 1,318 69 1,249 76.4 McAfee Assoc. 1,625 89 1,536 94.2 Norton Anti- 2.1.2 1,208 62 1,146 70.0 Panda PandaPro 4.05 1,227 72 1,155 71.1 Safetynet's Net 2.04c 1,412 76 1,336 81.9 Softech's Dr 245 58 187 14.2 Sophos' 2.43a 1,468 66 1,402 85.1 Trend Micro Devices PC 1,014 57 957 58.8 XTree's AllSafe 1.01 982 58 924 56.9 XTree's ViruSafe 4.55 982 58 924 56.9 NLM Anti- Products: Central AV/NLM 1.0 1,061 N/A 1,061 64.9 Intel's La ect 1.5 925 N/A 925 56.6 McAfee NetShield 1.03V99 1,493 N/A 1,493 91.3 Sophos' NLM 2.44 1,395 N/A 1,395 85.3 = Dr was certified the release of the release of , using the Library. The documentation for product is in French. options and 8s were translated to English equivalents in order to perform the documentation was not translated, and was not reviewed. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. PZPAPN X9211 Library : X211 @: Nov 23, es: 1,640 es: 1,550 es: 90 Certified es Detected Product DOS ning Products: Central Anti- 1.4 1,153 68 1,085 70.3 Certus Int'l Novi 1.15a 1,175 72 1,103 71.7 Commcrypt's Detect Plus 3.1B 879 64 815 53.6 Cybec's VET 7.04 1,143 68 1,075 69.7 Dr. Solomon's 6.00 1,433 83 1,350 87.4 Fifth Gen Sys. Untouchable 24 1,187 69 1,118 72.4 Frisk Software's ]2.05 1,428 76 1,352 87.1 IBM Anti- /DOS 1.0 1,361 72 1,289 83.0 Iris Anti- + 4.20.01 1,094 60 1,034 66.7 Leprechaun's Buster 3.93 1,293 69 1,224 78.8 McAfee Assoc. 1,591 89 1,502 97.0 Norton Anti- 1,161 62 1,099 70.8 Panda PandaPro 4.05 1,211 72 1,139 73.8 Safetynet's Net 2.04c 1,377 76 1,301 84.0 Sophos' 2.43a 1,433 66 1,367 87.4 Trend Micro Devices PC 994 57 937 60.6 XTree's AllSafe 1.01 960 58 902 58.5 XTree's ViruSafe 4.55 960 58 902 58.5 NLM Anti- Products: Central AV/NLM 1.0 1,041 N/A 1,041 67.2 Intel's La ect 1.5 905 N/A 905 60.0 McAfee NetShield 1.03V99 1,460 N/A 1,460 94.2 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. PZPAPN X9210 00N 2 0PTN Library : X210 @: Oct 23, es: 1,509 es: 1,426 es: 83 Certified es Detected Product DOS ning Products: Central Anti- 1.3 1,014 63 951 67.2 Certus Int'l Novi 1.15a 1,131 69 1,062 75.0 Commcrypt's Detect Plus 3.1B 842 63 779 55.8 Cybec's VET 7.04 1,105 66 1,039 73.2 Dr. Solomon's 5.61 1,228 76 1,152 81.4 Fifth Gen Sys. Untouchable 24 1,153 67 1,086 76.4 Frisk Software's ]2.05 1,362 72 1,290 90.3 Iris Anti- + 4.20.01 1,074 59 1,015 71.2 Leprechaun's Buster 3.92 1,168 65 1,103 77.4 McAfee Assoc. 1,455 82 1,373 96.4 MicroCom's 885 59 826 58.7 Norton Anti- 1,134 60 1,074 75.2 Panda PandaPro 4.05 1,185 71 1,114 78.5 Safetynet's Net 2.04c 1,320 72 1,248 87.5 Sophos' 1,268 61 1,207 84.0 Trend Micro Devices PC 967 56 911 64.1 XTree's AllSafe 1.01 931 57 874 61.7 XTree's ViruSafe 4.55 931 57 874 61.7 NLM Anti- Products: Intel's La ect 1.5 905 N/A 905 63.5 McAfee NetShield 1.03V95 1,267 N/A 1,267 88.9 McAfee NetShield 1.03V97 1,333 N/A 1,332 93.5 2performed the release of the release of , but using the library. Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. PZPAPN X9209 Library : X209 @: Sep 25, es: 1,405 es: 1,324 es: 81 Certified es Detected Product DOS ning Products: Central Anti- 1.3 996 62 934 70.9 Certus Int'l Novi 1.1d 1,060 68 992 75.4 Cybec's VET 7.04 1,074 65 1,009 76.4 Dr. Solomon's 5.60 1,213 74 1,139 86.3 Fifth Gen Sys. Untouchable 24 1,127 66 1,061 80.2 Frisk Software's ]2.05 1,312 72 1,240 93.4 IBM's ner 2.1.9 893 59 834 63.6 Iris Anti- + 4.20.01 1,059 58 1,001 75.4 Leprechaun's Buster 3.92 1,140 64 1,076 81.1 McAfee Assoc. 1,354 79 1,275 96.4 MicroCom's 868 59 809 61.8 Norton Anti- 634 55 579 45.1 06/01/92 upd. 753 55 698 53.6 Panda PandaPro 4.05 1,168 69 1,099 83.1 Safetynet's Net 2.04c 1,278 72 1,206 91.0 Sophos' 1,225 61 1,164 87.2 Trend Micro Devices PC 961 56 905 68.4 XTree's AllSafe 1.01 915 57 858 65.1 XTree's ViruSafe 4.55 915 57 858 65.1 NLM Anti- Products: Intel's La ect 1.5 898 N/A 898 67.8 McAfee NetShield 1.03V95 1,240 N/A 1,240 93.7 Note: NLM Anti- Products are not certified for not normally setup Novell Netware386 server. The es Detected , and the calculated using the number of es included in the Library as of the release. PZPAPN X9208 Library : X208 @: Aug 24, es: 1,342 es: 1,261 es: 81 Certified es Detected Product Central Anti- 1.3 986 62 924 73.5 Certus Int'l Novi 1.1d 1,049 68 981 78.2 Comrac's Gobbler 2 3.00(b) 720 47 673 53.7 Dr. Solomon's 5.60 1,201 74 1,127 89.6 Fifth Gen Sys. Untouchable 22 873 57 816 65.1 Frisk Software's ]2.03B 1,179 70 1,109 87.9 IBM's ner 2.1.9 884 59 825 65.9 Iris Anti- + 4.20.01 1,051 58 993 78.3 Leprechaun's Buster 3.92 1,134 64 1,070 84.5 McAfee Assoc. 1,317 79 1,238 98.1 MicroCom's 862 59 803 64.2 Norton Anti- 631 55 576 47.0 06/01/92 upd. 750 55 695 55.9 Panda PandaPro 4.05 1,157 69 1,088 86.2 Safetynet's Net 2.04c 1,236 72 1,164 92.1 Sophos' 1,170 60 1,110 87.2 Trend Micro Devices PC 950 56 894 70.8 XTree's AllSafe 1.01 904 57 847 67.4 XTree's ViruSafe 4.55 904 57 847 67.4 PZPAPN X9207 Library : X207 @: Jul 22, es: 1,273 es: 1,197 es: 76 Certified es Detected Product Central Anti- 1.3 971 60 911 76.3 Certus Int'l Novi 1.1d 1,037 67 970 81.5 Comrac's Gobbler 2 3.00(b) 713 46 667 56.0 Dr. Solomon's 5.58 1,094 65 1,029 85.9 Fifth Gen Sys. Untouchable 22 863 56 807 67.8 Frisk Software's ]2.03B 1,150 69 1,081 90.3 IBM's ner 2.1.9 868 58 810 68.2 Leprechaun's Buster 3.86 860 60 800 67.6 McAfee Assoc. 1,172 74 1,098 92.1 MicroCom's 854 58 796 67.1 Norton Anti- 627 54 573 49.3 06/01/92 upd. 745 54 691 58.5 Sophos' 1,016 57 959 79.8 XTree's AllSafe 1.01 888 56 832 69.8 XTree's ViruSafe 4.55 888 56 832 69.8 PZPAPN X9206 Library : X206 @: Jun 16, es: 1,212 es: 1,140 es: 72 Certified es Detected Product Central Anti- 1.2 750 57 693 61.9 Certus Int'l Novi 1.1d 1,024 65 959 84.5 Comrac's Gobbler 2.20 643 43 600 53.1 Dr. Solomon's 5.58 1,084 64 1,020 89.4 Fifth Gen Sys. Untouchable 22 856 55 801 70.6 Frisk Software's ]2.03B 1,123 67 1,056 92.7 IBM's ner 2.1.9 857 57 800 70.7 Leprechaun's Buster 3.86 854 59 795 70.5 McAfee Assoc. 1,158 71 1,087 95.5 MicroCom's 847 57 790 70.0 Norton Anti- 624 54 570 51.5 Sophos' 1,008 56 952 83.2 XTree's AllSafe 1.01 883 55 828 72.9 XTree's ViruSafe 4.55 883 55 828 72.9 PZPAPN X9205 Library : X205 @: May 22, es: 1,145 es: 1,078 es: 67 Certified es Detected Product Central Anti- 1.2 742 56 686 64.8 Certus Int'l Novi 1.1d 1,007 63 944 88.0 Comrac's Gobbler 2.20 639 42 597 55.8 Dr. Solomon's 5.54 891 58 833 77.8 Fifth Gen Sys. Untouchable 22 846 54 792 73.9 Frisk Software's ]2.03 1,014 60 954 88.6 IBM's ner 2.1.9 841 55 786 73.5 Leprechaun's Buster 3.86 845 58 787 73.8 McAfee Assoc. 1,049 67 982 91.6 MicroCom's 837 56 781 73.1 Norton Anti- 620 53 567 54.2 Sophos' 994 55 939 86.8 XTree's AllSafe 1.01 872 53 819 76.2 XTree's ViruSafe 4.55 872 53 819 76.2 PZPAPN X9204 Library : X204 @: Apr 24, es: 1,080 es: 1,019 es: 61 Certified es Detected Product Central Anti- 1.2 725 51 674 67.1 Certus Int'l Novi 1.1c 905 52 853 83.8 Comrac's Gobbler 2.20 627 37 590 58.1 Dr. Solomon's 5.54 870 52 818 80.6 Fifth Gen Sys. Untouchable 485 44 441 44.9 Frisk Software's ]2.03 986 54 932 91.3 IBM's ner 2.1.9 818 50 768 75.7 Leprechaun's Buster 3.86 825 52 773 76.4 McAfee Assoc. 1,027 61 966 95.1 MicroCom's 822 53 769 76.1 Norton Anti- 609 49 560 56.4 Sophos' 964 52 912 89.3 XTree's AllSafe 1.01 852 49 803 78.9 XTree's ViruSafe 4.55 852 49 803 78.9 PZPAPN X9203 Library : X203 @: Mar 27, es: 1,021 es: 960 es: 61 Certified es Detected Product Central Anti- 1.2 713 51 662 69.8 Certus Int'l Novi 1.1 835 47 788 81.8 Comrac's Gobbler 2.20 619 37 582 60.6 Dr. Solomon's 5.54 855 52 803 83.7 Fifth Gen Sys. Untouchable 474 44 430 46.4 IBM's ner 2.1.9 800 50 750 78.4 Leprechaun's Buster 3.86 810 52 758 79.3 McAfee Assoc. V86B 917 59 858 89.8 McAfee Assoc. 1,002 61 941 98.1 MicroCom's 810 53 757 79.3 Norton Anti- 601 49 552 58.9 Sophos' 880 52 828 86.2 XTree's AllSafe 1.01 838 49 789 82.1 XTree's ViruSafe 4.55 838 49 789 82.1 PZPAPN X9202 Library : X202 @: Feb 22, es: 971 es: 912 es: 59 Certified es Detected Product Central Anti- 626 50 576 64.5 Certus Int'l Novi 1.0.1 700 47 653 72.1 Dr. Solomon's , 5.52A 776 52 724 79.9 Fifth Gen Sys. Untouchable 472 44 428 48.6 McAfee Assoc. V86B 914 59 855 94.1 MicroCom's 805 53 752 82.9 Norton Anti- 598 49 549 61.6 Sophos' 2.3.1 765 52 713 78.8 PZPAPN X9201 Library : X201 @: Jan 22, es: 880 es: 821 es: 59 Certified es Detected Product Central Anti- 432 42 390 49.1 Certus Int'l Novi 1.0.1 684 47 637 77.7 Dr. Solomon's , 5.52A 750 52 698 85.2 Fifth Gen Sys. Untouchable 458 44 414 52.1 McAfee Assoc. V85 812 59 753 92.3 Norton Anti- 462 44 418 52.5 Sophos' 2.3.1 739 52 687 84.0 PZPAPN X9112 Library : X112 @: Dec 22, es: 817 es: 759 es: 58 Certified es Detected Product Central Anti- 427 42 385 52.3 Certus Int'l Novi 1.0.1 665 46 619 81.4 McAfee Assoc. V85 786 58 728 96.2 Norton Anti- 449 44 405 55.0 Sophos' 2.3.1 704 51 653 86.2 PZPAPN @/Day of Week Sundays (any) Mindless + Sunday + Sunday-2 + Wit Sundays 9th (Apr - Dec) Doctor Qumak 2 Mondays (any) Carfield + I-B (BadGuy) + I-B (BadGuy 2) + I-B (Exterminator) + Immolation + Kalah (Kalah-499) + Wit Mondays (starting in VirDem (VirDem-833) Monday cof Month Beware Mondays The 28ths Crazy Eddie Tuesdays (any) + Emo-899 + I-B (Demon) + I-B (Demon-B) + Murphy (Kamasya) Tuesday The 1st (JVT1) Tuesday The 13th (Anarkia) Wednesdays (any) (No Wednesday) + VCL (Red Team) + Victor Thursdays (any) TPE (Girafe) Thursday The 12ths Fridays (any) Bryansk + Immolation + Frere Jacques (Mimic-Den Zuk) (Mimic- + Murphy (Smack) + NaziPhobia + TalkingHeads + VCL (Diarrhea) + Wild Thing 2 Friday Not The 13ths (Payday) Friday The 11ths VCL (Kinison) Friday The 13ths 1720 + Friday 13th + RAM + Suriv 3.00 + Westwood + Wit Friday The 13ths (starting in ) Hybryd Fridays 15th of Month (Skism) (Skism-1) Fridays Last of Month (Sub-Zero B) Saturdays (any) Murphy (Finger) (Phenome) + Murphy (Migram) Saturday The 14ths Saturday The 14TH 1st day of any month 10 Past 3 + Pinworm 2nd day of any month Flip + Tormentor (Nuke) 3rd day of any month VCL (Miles) 5th day of any month Frogs 8th day of any month Taiwan 10th day of any month Day10 + Leprosy (Leprosy-664A) 13th day of any month NPox (NPox 2.1) + Monxla + Rocko 16th day of any month 10 Past 3 18th day of any month NPox + FORM- (Form-18) 20th day of any month Day10 22nd day of any month 10 Past 3 + VCL (Beva 32) 24th day of any month FORM- + Rocko (Mutating Rocko) 29th day of any month 10 Past 3 + Geek + Highlander 30th day of any month Day10 31st day of any month Tormentor (Lixo Nuke) + VCL (Diogenes) Big Bang + VCL (Beva 33) Plastique (COBOL) Barrotes + Joshi Casino 25TH) _1st - _29th (Beta Boys) > (Amilia) + Marauder _23rd Swedish Boys (Why Windows) _24th Swedish Boys (Why Windows) _25th Swedish Boys (Why Windows) _28th Zaphod March 1st - March 31st Fich + Micropox March 5th X-2 (X-1 & X-1B) March 6th Mich II + Michelangelo + RIP-699 March 14th Arale March 15th Maltese Amoeba March 25th March 25th March 31st Mordor.1110 Casper + Christmas Tree + Suriv 1.01 + Suriv 2.01 + Suriv 4.02 + Tchantches Akuku (Wilbur 3) + Death Dragon Month 4-6 A31st Italian Boy ARCV Friends Casino + Murphy (Swami) Arale May 1st - May 4th 1210 May 1st - May 31st Kthulhu May 5th (Cinco de Mayo) May 13th & May 17th Arale (Sub-Zero B) + Psychosis (Kennedy) Arale Gremlin A31st 17TH) DOSHunter Crazy Eddie ARCV 330 A31st Got-You -PLO) (Mendoza) VCL (Beva 96) Arale Casino Bomber 1st - AirCop (AirCop-B) + Cascade + Sad + Ten RIP-699 It (Viva Mexico) 20th - A31st Plastique + Plastique-B 22nd - A31st 4096 1st - A31st 4096 + Cascade + Ten 12th Akuku (Columbus) (Anarkia-B) 13th - A31st Datacrime 15th Dark End 23rd Karin 28th Aragorn 30th Gotcha (Gotcha-Mut4) 31st Halloween cTuesday of Little Br (LB-349) 1st Maltese Amoeba 4th 11th Flower 12th Timor 17th 17th - A31st 17th (Nov 17-880) 18th (Kennedy) 22nd (Kennedy) 24th (Love Bink) 30th 11-30 A 1st - A31st 1253 A 1st A 4th A 7th VCL (Pearl Harbor) A 12th Arale A 19th - A31st Father Christmas A 20th - A25st ARCV Xmas A 21st Poem A 24th Icelandic (Icelandic-III) A 24th - A31st A 24th - Christmas Tree + Merry Xmas A 25th Black Hawk + Japanese Christmas A 28th Ash (Ash.546) + Spanish Fools A 31st 1, 1989 Fu Manchu Flash DataLock Fingers A31, Sicilian Mob A31, CyberTech + OMT Grunt-1 A31, CyberTech (CyberTech-B) Year is + Were Here + Year PZPAPN ID Cross-Reference Generic Specific PZPAPN Specific [007] Chang [100] Fish [104] [109] African 109 [144] AT144 [145] Small-145 [164] Maaike [17th] Pojer / Pojer-1935, Pojer-1941, Pojer-1949 [203] [205] Tormentor-205 [2300] AVV-2300 [233] Relzfu [250] Maaike [268P] V270x [2Kb] 2Kb [302] 302 [304] Gipsy-304 [334] 334 [337] 337 [344] Grunt-1 [351] V351 [370] Voronezh-370 [3Sht] Globe [408] 408 [411] Tack / Tack-411 [417] OMT [439] 439 [453] RPVS [472] ASP-472 [476] / Danish [477] Tack / Tack-477 [487] 4870 [4Res] 4Res [500] 500 [512] 512, Darth Vader, Legalize [529] Polish 529 [530] Bobo [557] 557 [578] Italian Boy [595] 595 [621] 621 [640] Spring [644] [658] thing, WW-658 [696] Enemy, Scream [7%] / 7% Solution [7%2] / 7% Solution 2.0 [7%3] / 7% Solution 3.0 [702] 702 [707] Surrender, [708] 708 [730] Ontario 730 [748] 10 Past 3 [768] Spring / Spring-768 [789] StarDot 789 [7S] Seventh Son [802] PC Flu [855] [880] Flower [90] [905] Badsec [910] Dir-2 [914] 914, [928] 923 [981] 981 [99B] 99% / 99%-B [1008] 1008 [1014] [1024] Diamond, V1024 [1024E] Axe-1024 [1030] Friends, Pisello [1067] 1067 [1182] Hellween [1186] Liberty-1172 [1193] Copyright [1210] 1210 [1241] 1241, Cossiga, Vriest [1244] 1244 [1253] 1253 [1279] Tiso.1279 [1308] 1308 [1339] Mummy [1381] Internal [1385] 1385, DAME, Gosia, Macedonia [1376] Hellween [1403] 1403 [1452] 1452, Antimon [1530] Alexander, CB-1530, CPSU-2535, CPW, Edcl, Father, Hymn, Protecto, QP3, R-10, R-11 [1554] [15xx] 1575 [1661] 1661 [1677] PCBB [1701] Cascade [170x] Cascade, Joker 2, Plumbum (Plumbum-F) [170xD] Cascade / Cascade-1704G [17XX] Cascade, JoJo / JoJo-C [1720] PCBB [1757] Malaise / Malaise-1743 [17690] Worm-17690 [1784] 1784 [1835] 1835 [1963] 1963 [1971] Eight Tunes [1984] Ignorant Year MindRiot, Pila, Skism [2062] DOSVer [2133] Scott's Valley [2136] Outland [2153] 2153 [2189] Yankee Doodle / Yankee Doodle-2189 [2480] Crew-2480 [2559] 2559 [2560] 2560, Magnitogorsk 2048 [2623] 2623 [3040] 3040 [3066] Spanish, Traceback, Traceback 3029, Traceback II [4096] 3445- , 4096 [4A] Tack [5856] [7808] 7808 [90210] Trident / Trident 90210 [903] Grog 3.1 / Grog.903 [A-403] Australian 403 [A2] Aids II [A11] Andromeda 1.1 [A16] [A-Vir] Anti-Tel [ABC] ABC [Abrx] [Acd] Acid [Ada] Ada, Kit [Agi] Month 4-6 [Agn] Agena [Aircop] AirCop [Alabama] Alabama [Alameda] Alameda [Alb] Albania, Albanian [Alf] 1840, Alfa, Damage, Diamond, Gremlin, Newcom, Penza, 1049, Yankee Doodle [And] Andre [Andr] Andromeda 1.0 [Anm] Animus [Anna] Anna [Ant] Ant, Anto [AP] [Arag] Aragon [Ar] [ARC] ARCV-n [AREG] w/ AReg-822 [Ark] MVF [Arma] Armagedon [Arsk] Arusiek [Ash] Ash [Ast] Astra [Astr] Astra [Ata] Atas [Ath] [Atx] Anthrax [Aust] Australian [Azusa] Azusa [B&B] B&B [B3] DOSHunter [Badcmdx] Roguey [Barc] Barcelona [BB] Bad Boy, Bad Brain, Hellraiser [BB3] Bad Boy / Immortal Riot [BCV] Sentinel [Bebe] Bebe [Beep] Beeper [Bel] Intruder [Bet] Beta, Elvis-1250, Ministry [BFD] BFD [Bfix1.1] Trident / Trident-611 [Bgh] Burghofer [BKil] (Killer [Blj] Bljec, Sad [Blood] Blood [Bloody] Bloody! [Blus] Blood Lust [BMon] Black Monday [Bmb] Bomber, 8er Bomber [Bob] Bob, fw-692 [Boo] Boojum [Boys] Boys [Brain] Ashar, Brain [Bro] Murphy [Bry] Brainy [BSR] Bad [Bst] Busted [BT] Back , Blinkers, Shaker [Bt] Beast-N-Black [Bubo] Bubonic [Bud] Budo [BUG] ButtUgly [Burger] 405, Burger, Dewdz, VirDem, VirDem-792, VirDem-1542, Wonderful [Burma] Burma.563 [BWish] Best Wishes, Dutch 555 [Bwr] Beware [C-2B] Datacrime [C-J] Japanese Christmas [C16] Worm-16850 [Caco] Cacophony [Caco2] Cacophony / Cacophony 2 [Can] Cansu [Cara] Cara [Carioca] Carioca, Null-178 [Carioca-B] Carioca / Carioca-B [Cas] Cascade [Casper] Casper [CB] Cannabis [Cdm] Collor de Mello [Cerb] Cerburus [Cf1] Coffeeshop-1568, DAME [Cha] Chang [Chad] Chad [Chaos3] Chaos Year [Che] Cheeba, Chemmy [Ches] [ChMe] Chile Mediera [Chris] Chris [Chs] Chaser [CKs] CheckSum [Clone2] Clonewar / Clonewar 2 [Coa] [Cobra] Cobra [Con] Immolation, IVP, (Mimic), VCL [Cor] Rasek [Cpt] Capitall [Crime] Datacrime [CRJ] Cracker Jack [Crazy] Crazy Eddie [Crf] CRF [Crk] , Tolbuhin / Tolbuhin-626 [Crm] Criminal, [Crp] Creeper [Crs] VCL / Crasher [Crsh] Crusher [Crt] Cartuja [CSL] CSL, Finnish 709 [Ctm] Catman [Cub] Attack [Curse] Curse [CV] Nowhere Man [CV4] CV4 [CWII] Civil War / Civil War II v1.0 [Cyb] CyberTech [Cybr] Cyber [D-T] Dutch [D2] Dir-2 [D10] Day10 [D28] Spanish Fools [DAME] DAME, Groove, Pogue [Dance] Devil's Dance [Darkray] Darkray [Data] DataLock [Data Lock] DataLock (DataLock-828) [Dav] >, M.I.R. [Davis] Davis [Dbase] dBASE [DC-2] Datacrime [DD] Dada [De] Deranged [Dead] Dead-790 [Def] Define [Dei] Casino, Deicide [Dem] I-B [Destr] Destructor V4.00 [DH2] Die [Dio] VCL [DLSU] DLSU [DM300] [DMB] 310, DM, Milena [Dm2] Doom II [Dmo] Demolition [DNR] DNR [DOD] DoDo [Doodle] Yankee Doodle [DOS-1] DOS-1 [Dot] Dot Killer [Dsbr] Dismember [Dst1] Dest [Dst3] Dest [Dth] [Dtr] Raubkopie [DWI] DWI [E92] [Ear] Ear, / Nirvana [Ed] [EDV] EDV [EEL] Loki [Egn] NPox [Ein] Einstein [El] Eliza [Em] Emmie [Emf] Emf [Emo] Emo-899 [Emp] Evil Empire [Eng] Bandit, Black Wizard, Enigma, Yankee 2 [Eno] Enola [Eof] End Of [Er] [Est] Estepa [ETC] ETC [Ext] MMIR [F458] Frodo Soft-458 [FayT] .2389 [Fbd] Fuse Box Dwarf [FCH] Fich, Fichv-896 [FDt] @11-537 [Fellow] Fellowship [Fil] Fil [Filler] Filler [Fish] Fish, Revelation [Flash] Flash [Flg] Flagyll [Flip] Flip [Flop] MSTU / MSTU-1536 [Flu] PC Flu-2 [Flue] Flue [Fly] Fly 1.1 [FN] Fungus [Fnz] Friday 13th [Foetus] Foetus 1.1 [For] Forger [Form] FORM- [Frg] Frogs [Fsh] Fish [Fst] Dark Lord, Feist, Lycee, No Frills [Fu] Fu Manchu [Fume] Perfume [Fune] Funeral [Futh] Youth [FW] Tula Perfume / G- [G3] Slow [G31] Grog 3.1 [Gcat] 1575 [Gerg] Gergana [Gip] Gippo / Gippo.JumpingJack [Gk] Geek [Globe3] Globe / Globe 3.0 [Gls] Gliss [Gol1] Golgi [Gol2] Golgi / Golgi 2.0 [Gol3] Golgi / Golgi 3.0 [Gomb] HH&H [Got1] Gotcha / Gotcha-Mut1 [Got2] Gotcha / Gotcha-Mut2 [Got3] Gotcha / Gotcha-Mut3 [Got4] Gotcha / Gotcha-Mut4 [Gr] Grapje [Gran] Granada [Grb] Growing Block [Gre] Green Joker [GreenCat] 1575 [Grnt] Grunt-1 [GS] / Grease [Gtc] Gotcha, Pogue [GTk] VCS [Guppy] Guppy [GY] Got-You [Hafn] Hafenstrass [Hal] Halloechen [Handi] Handi-215 [Happy] VFSI [Hary] Hary Anto [Hck2] Hacktic [Hf] Haifa, -Haifa [Hi] [Hip] Hiperion [Hit] Dreamer [Hitc] Hitchcock [Hitc-B] Hitchcock / Hitchcock-1238 [Hl] Holocaust [HNY] Happy New Year [Hng] Hungarian [Holiday] Holiday [Hon] Honey [Hpp] Happy [Hrb] Hero-394 [Hre] Were Here [Hrr] Horror [Hrs] [HS] Vivaldi [Hst] Hastings, Possum [HT] Hates-213 [Huge] Warning [Hunt] ZeroHunt [HW] Halloween [Hyb] Hybryd [I9] Ice 9, Joanna [I-F] Italian 803, StarDot 801 [IB] [Ice] Mix1 [Ice-3] Icelandic [Ice-9] Joanna [Idle] Close, Idle [Ier] Ieronim [IEvil] MMIR.In [Ill] Ill [IMF] [Imp] Crazy Imp [Inc] Incom [Inl] Invol [Ino] Malaga / Inofensivo [Intr] Intruder [Invader] Invader [IOU] All Sys 9 [Irish_3] Gnose [Irs] Maltese Amoeba [IT] [Ita] Itavir [Itt] Itti [IU] Iron Umbrella [J13] [J1530] SVC-2936 [J1663] [J26] [J4J] Sistor [Jab] JW2 [Jason] Jason [JB] James Bond [JD] [Jeff] Jeff [Jericho] Jericho [Jeru] 1605, 1720, Discom, Freddy, Frere Jacques, Fu Manchu, Groen Links, , Suriv 3.00, Timor, Tobacco, Westwood [Jeru-A] [JK] Big Joke [Joa] Joanna [JoJo] JoJo [Joshi] Joshi [Jrk] Jerk, Talentless [Jsh] Joshua Micropox [K1] WordSwap [K4] Kode4 [Kami] Kamikazi [Kbu] [Kem] Kemerovo [Keme] Kemerovo [Ker] [Key] Keypress [Khobar] Fairz [Kiev] Kiev 483 [Killer] MKiller [Kiri] Harakiri [Kla] Klaeren [Korea] Korea [Krem] Kremikovtzi [Krv] Krivmous [Ku] Kuku-448 [L1] AT144 [Label] Label [Lam] Mosquito [Lan] Lancs [Lar] Larry [Lazy] Lazy [LB] Little Br [Lckjz] Lokjaw [LCV] LowerCase [Leap] [Leech] Leech [Lehigh] Lehigh [Lep3] Leprosy [Les] Tormentor-205 [LG] Little Girl [LG3] Little Girl [Li] NCU Li [Liberty] Liberty, Liberty-2 [Lilred] Little Red [Lisbon] 646, Father Christmas, Ghostballs, Grither, Iraqui Warrior, NTKC, VHP, [Lix] Murphy, Tormentor [LK] LockUp [Loa] Loa Duong [Locks] Malaise / Malaise-524 [Loz] Lozinsky [LPC] Little Pieces [LZ] [LZ2] [M-123] Multi-123 [M128] Micro-128 [M11] MPS 1.1 [M45] Define, Mini-45, Small-38, [MA2] Lythyum [MacG] MacGyver [Man] Manola / Manuel.B [Mant] Manta, VCS [Mar] Marauder, Marl [March25] March 25th [Mardi] Mardi Bros [Math] (Math Test) [Mayk] Mayak [MBug] MusicBug [MCAF] [Mct] Moctezumas Revenge [Mds] Madismo [Merc] >/ Mercury [Mex] Mexican Mud [MFC] Multi-Face [MG] [Mgm] 2560 [MGTU] MGTU [Mich] Michelangelo [Micro] Microbes [Mim] (Mimic) [Mirror] Mirror [Ml] Milano [Ml2] Sticky [Mlg] Malaga [Mls] Malaise [Mn] Mannequin [Mnc] Munich [Mno] Manola, VCL [Mog] Yafo [Mon] Monkey [Mosq] Mosquito [MPC] MPS 4.01 [MPS] MPS 3.1, MPS 3.2 [Mshark] MShark [Msht] Mugshot [MSTU] MSTU [Mule] Mule [Mum] Mummy [Murphy] Murphy, Tormentor [Mut] DAME, Mutant ^, Rosen, [MV] [Mx2] Mix2 [mXs] Merry Xmas [Mys] Mystic-377 [Mys2] Mystic-377 / Mystic-379 [N1] AIDS, Number One [N6] Number 6 [NAV] Civil War / Navigator [Nbk] NoBock [NED] Meta-2048 [Ngs] Nygus [NGV] NGV [Nina] Nina [Nja] Ninja [Nl] Null Set [NM] NeverMind [Nns] Nines [Nom] Nomenklatura [Not] Do-Nothing [Npx] NPox [Nsft] Necrosoft Dementia [NWed] [NZ] Explosion [Ohio] Den Zuk, Ohio [Ont] Ontario, Ontario III [Oro] Oropax [Otto] Otto6 [OW] Argentina-102, Bad Brain 1.2, Banana, Blaze, Druid, Explode, FCB, Leprosy, Mini-45, Ondra, Shhs, Silver Dollar, Stanco, V-1n, VCL, Yukon , ZigZag [P1r] 1226, 1226D, Evil, Phoenix, PhoenixD, Proud [P45] Polish-45 [P5220] Pascal-5220 [P-2] Print [PA] [Par] Infinity, Parasite, Shadow [Paris] Paris [Pas] Belgium-320, Under 7 [Pat2] Paturuzu.931 [PB] / Page-B [PCB] PCBB [PCV] PCV [Pch] Keypress [Pe2] Lockup 3.0 [Peace] Peace Man [Ph] Pathhunt [Phalcon] Phalcon.894 [Pht] Phantom [Pi] [Pia] Piazzolla [Pif] Dir , Pif [Ping] Ping Pong [Pirate] Pirate 1344 [Pix] Amstrad, Hell, Hydra, Pixel, Pixie, Self, Silly-365 [Plg] Leprosy [Plov] Plovdiv 1.3 [Plq] Plastique [PlT] Polish (Polish -176) [Plu] Plutto [Pm] Poem [Pmn] Particle Man [Pnz] Penza [Poi] Poison [Poj] Pojer [Pol-2] Turbo 448, Turbo Kukac [Polimer] Polimer [Poor] Poor Man [Poss] Possessed [Pray] Praying [Pred] Predator [Prg] Pregnant [Prm] Prime [Prova] Distrust [PS10] 1024 Print [Psc] Psychogenius [PSV] Loki [Pt] Patient [Ptch] Pitch [Qk] Quake [QML] QMU [Qo] [QQ] / Quadratic-986 [Queen] Queens [Qt] Quiet [R715] [RA] Akuku [Rad] Radyum [Raub] Raubkopie [Rag] Rage [Rea] Reaper [RedSpi] Reverse.A [RedX] Ambulance Car, Hafenstrass 2 [Req] W13 [Rii] Riihi [Rkm] Reklama [RKO] Ah, Diamond, Lucifer, Rocko, V651, V2000, V2100 [RMIT] Leprosy [RNA] RNA [Roc] Rocko [RPKS] Den Zuk [Rst] Reset [Rttl] Rattle [Rvl] Revelation [S143] Swiss 143 [S3d] Silver Dollar [Sab] Sabbath [Sadt] Saddist [Sand] Sandwich [Sat14] Saturday The 14TH [SBC] 1024 SBC [Sck] Intruder, / Sucker [Sch] Schrunch-420 [Scl] Scroll [Scram] Scramble [SCT] Silly [Scy] Scythe [Sdm] Saddam, Stupid-1355 [Sdot] StarDot 600 [Sent] Sentinel [Set] Semtex [Sg] AT144 [Sh] Shhs [Shake] Shake [Shg] Shanghai [Shiny] Shiny Happy [Shl] Shirley, Violetta [Shld] Shield [ShT] Shock Therapy [Sil] Silence [Silent] / Silent Killer [Silw] Silly [Sim] Simulati [Sis] Sistor, PCBB [Sk] Tolbuhin [Sk1] Tolbuhin [Slay] 5120, Slayer, Urfydus [Slow] Slow [Slu] Sluknov [Slv] Slovak [Sma] [Small] Small-115 [Smaug] Smaug [Sonik] Sonik Youth [Sorl] Matura / Matura 92, Mercenary, / Birthday [Sorlec] Sorlec [Sorry] Sorry [Sov] Sov [Soy] [Span] -Feliz [Spar] Sparse [SPh] Swiss Phoenix [Spyer] Spyer [Spz] Spanz [Sqe] Squeaker [Sqk] Squawk [Sqr] Quirk [Squ] Squisher [Sr] Scream [Sta] Stahl [Staf] Staf [Sti] Stinkfoot [Sti2] Stinkfoot Horse (, NoInt, , Swedish Disaster [Su2] Sunday-2 [Sub] Fingers, Karlik, Solano 2000 [Sui] Ear [Sun] Sundevil [Sun] Gippo / Sunrise [Sunday] Carfield, , Miky, RAM , Sunday [SurivA] Suriv 1.01, Suriv 2.01 [Sv] Sverdlov [SVC50] SVC 3.1, SVC 4.0, SVC 5.0, SVC 6.0 [Svir] SVir [SW] Sayha Watpu [Swb] Exebug, WXYC [SX] Plovdiv 1.1 [Sylvia] Sylvia [Syslock] Syslock [SZ] / Sub-Zero C Skynet [T133] [T3] Taiwan 3 [T4] Taiwan 4 [T-12] [Tab] Tabulero [Tab2] Tabulero [Taiwan] Taiwan [Tamp] Tamper [Tasel] IVP.Taselhoff Typo [Tdr] Todor [Tec] Barrotes / Barrotes.1303 [Tele] Telecom [Teq] Tequila [Thrill] Green Caterpillar-1989 [Tim] [Timid] Timid Gidra-469, [TLM] Timid [Tmd] Timid [TMTM] TMTM [Tn] Tony [Tob] Tobacco [Tokyo] Tokyo [TOMY] Paturuzu [Topo] Mosquito [Tr2] s, Troi [Travel] Traveller / Traveller-C [Trek] Clonewar / TrekWar [TridenT] Graveyard-479, Kohntark, Poet 7, TPE, VCL [Trk] 1661 [Troi] Troi [Tsch] Tchantches [Tum] Tumen [TV] Tester [Twin] Twin-351 [Tzu] [U394] Attention! [U492] Tula, [U600] [U830] Red Diavolyata [U948] [U2144] [Une] UnExe [Unk] 572, Typo [V-5] Path [V-507] [V2P2] 1260, V2P2 [V2P6] Adolph, V2P6 [V82] Phoenix 2000, V82 [V101] [V800] V800 [V801] V801 [VA] Baobab [Vacs] Rybka, Vacsina [Vcomm] VComm [Vde] VirDem [VHP] Arf, Interceptor, Monxla, Parasite, Polish 583, Sicilian Mob, Stone`90, VHP, VHP2, , Violite, (Baby), Viperize [Victor] Victor [Vien827] [Vip] Leprosy, Viper [VM] VMem [Vol] Hellween.1684 [Vor] Voronezh [Vot] Vote [VP] [VTS] RSP-1876 [vvf] VVF 3.4 [Walk] [War] Warrior [Whale] Whale [Whis] Tai-Pan [Why] Swedish Boys [WIII] istrover III [WinVir] WinVir [Wisc] Wisconsin [Wlk] Walker [WM] Windmill [Wolf] Wolfman [Wond] Wonder [Wrz] Warez-1341 [Ws] WordSwap [WWT] WWT [X77] X77 [XA1] Christmas [Xab] Leprosy [XP] Xpeh [Yap] Yap [Yeah] IVP / Yeah [Yth] Youth [Z10] [Z900] ZK900 [Zak2] Hellween [Zar] Caz, Crash, Zaragosa [Zero] Zero Bug [Zmb] Zombie [ZMT] ZMT [Zpp] [Zrk] Zherkov [Zrt] Slow / Slow IV [Zu1] Hungarian 482, Zu1 [ZY] [ZZ] PZPAPN Generic [CM] Brazilian Bug, Friday 13th, Revenge Attacker, Thimble, Violetta [F1] Mono, Socha, Voronezh-Chemist [F2] 66A, IKV 528, Parity, Plumbum, Smiley, TSoft, [F3] Alex-368, II, Hero, Siskin, V-3n, V483 [FE] BackFont-896, Badsec, Mummy [FJ] Striker #1, Terminator [FM] CADKill, CCCP-510, Exunt, Hominy, Lisbon, Los-693, MShark, NR-481, P , Polish 217, Polish-376, Search-1000, 311, [FN] 1392, FGT, FN, Tankard [FQ] 382 Recovery, Burger, Pirate [FR] Anti-D, Argentina, Dad, Kalah, Kthulhu, Seventh Son, Suriv 4.02, Totoro, Traveller, Vindicator, Xuxa [FS] Cinderella [GenB]/[GenP] BFD, Bloody!, Changu Mangu, EkoT V, Fish FORM- , Guillon, HiDos, Keydrop, LZRQ, Malaga, Max (, Parity (, Quick, Sticky, , Tony PZPAPN Cross-Reference Multipartite Polymorphic & Sub- PZPAPN AirCop Alameda Anti-Tel Anti Aragon Ashar Azusa Bloody! (Killer Brain Cannabis Cansu Catman Changu Mangu Chaos Curse Den Zuk MKiller Evil Empire Exebug Filler Fish FORM- Guillon HiDos Horse Inky Joshi Keydrop Korea Loa Duong LZRQ Mardi Bros Michelangelo Microbes Monkey Mugshot MusicBug NoInt Ohio Parity Pentagon Ping Pong Print Queens Quick Swap Swedish Disaster Tony Windmill World Peace WXYC PZPAPN Multipartite Multipartite 1253 Anthrax Crazy Eddie Crusher Distrust EkoT Flip Gingerbread Man Invader Invol Kiev 2049 Malaga Marzia Max.347 Mayak Mordor.1110 Narcosis Natas One Half Plastique-B Rasek Shifter Sticky SVC 6.0 Telecom Tequila Tiso (Tiso.1279) VMem PZPAPN Polymorphic Polymorphic 1008 1024 SBC 1226 1260 Adolph Andre Bizarre Cansu Casper Cheeba DAME DM / DM-B DSME Evil Fish Flip (All Groove Haifa (All Holocaust Invol (All Maltese Amoeba Marauder Moctezumas Revenge Mutagen Oi Dudley Ontario Ontario III PC Flu-2 (All PCBB Phoenix Phoenix 2000 Pinworm Pogue Proud Python Rocko / Mutating Rocko Silly Slovak (All Scream (Scream 2-696 & 732) Simulati Telecom Tequila Tremor Trigger Uruguay V2P2 V2P6 (All Whale Wordswap / Wordswap-1485 Wordswap / Wordswap-1504 PZPAPN & Sub- & Sub- 1008 1024 SBC 1689 1963 2560 3040 3445- 4096 A-Bomb Anti-Tel Anti Aragon ARCV-n (ARCV-9 Atas II BackFont-896 Bad Basilisk Benoit Bios Bomber Brain Bubonic Career Of Evil Casino Chaos Year CMagic Crazy Imp Crusher Curse Cybercide Damage > (Mercury) Devils & Evangels Diamond Die Dir-2 DOSVer Dreamer Edcl EkoT Emmie Enemy Exebug Filler Finnish-709 Fish Fisher Foetus 1.1 Fungus Gingerbread Man Gnose Golgi Gremlin Grog 3.1 (Lor & Grog.2825) Hobbit Holocaust Ignorant Incest James Bond Joanna (Jo Joshi Keeper (Keeper.Acid) Leech Little Red LockUp LoveChild-2710 Lucifer Lurve Lycee MacGyver Magnitogorsk 2048 Malaga Marzia Mayak Mayberry (Mayberry.758 & .828) Meta-2048 Minsk Ghost Mirage MMIR (MMIR.In Evil) Monkey Multi 1.1 Murphy Mutagen (Mutagen.Agent III) Natas NoInt Necro Shadow (Necro Shadow-B) NPox Nympho 1.0 One Half Ontario III Parity Paturuzu (Paturuzu.931) PCBB Plovdiv 1.1 Plovdiv 1.3 Predator Pregnant Python R-11 Revelation Rocko Roguey Rubbit (Rubbit.3839) Quick Sandwich Scorpio Scramble Scroll Scythe Seat Sentinel Shield Shiny Happy Sistor (Sistor-J4J) Skid Row Slime Squisher Sunday-2 SVC 4.0 SVC 5.0 SVC 6.0 SVC-2936 SVC.3241 Swiss Phoenix Telecom Tequila Terminator-2294 Tremor Trident (Trident 90210) Twin-351 Uruguay (Uruguay 6) V651 V1024 V2000 V2100 Varicell VMem Veronika VS-2790 Whale Windmill World Peace YAM-3599 Youth (Hannibal) Zaragosa ZeroHunt Zero Bug PZPAPN es are ythe es, in most cases, ythe or the exists on Lformatted MS-DOS, regardless of whether the Lis a a data M. The DOS uses to start the (, before control is passed and the 8interpreter. The on a :a very small tells the L. The usually proceed to ythe of non-write protected are used on the ythe may do so the initial or later Mis accessed by the both Mand usually store the where else on the not always the case. If the writes the a critical area of the M, such as into a occupying part of the (FAT) or data on the Mmay be lost. A symptom characteristic of may be noted, even , is the amount of ed by the DOS usually be at least 1,024 +less what is actually |ed on the . Note: if you man IBM PS/2, computers use 1K off the top of , so 639K of instead of present. PZPAPN es are use special techniques in order to avoid detection by both computer s and anti- software products. Most researchers agree mthe dcharacteristics: (1) The hide any 5to execu components of the , such as rs in , or alteration of the (2) The "on the fly". For example, is read into the is dis technique keeps anti- software Pnot know about the particular gdetecting indicating (3) es, in most cases, , in addition to upon [. The purpose of uexecu allows the to quickly spread throughout a The ccharacteristic, the hiding any execu components, makes es very difficult for computer s to locate the . For reason, I mincluded exhibit particular characteristic as "sub- es in the Sub- es cross-reference. If you mreason to believe your computer has a or sub- , be sure to power off the (the ga non- t, write-protected, proceed to Za clean copy of your anti- software ga write-protected L. Since the no longer be in be no danger of further spreading the v. In addition, any gthe v, or alteration of execu components, should now be able to be noticed on the PZPAPN s Cross-Reference The s Cross-Reference section of Hyper allows the to select zfor on certain s or characteristics. The ws section lists all es, in most cases, may ythe yboth aand mnot #included in section. The Multipartite es section lists those ytwo or more s of components. Typically, /and/or . as well as and/or the . The Invol included as it and device Qrs (.SYS) The Polymorphic es section lists the employ complex encryption so are difficult to detect products making use of technology. The Whale #included due to its use of a complex encryption mechanism, but it is not truely polymorphic. The & Sub- es section lists those exhibit characteristics make them difficult for an average to detect hide not normally classified in the category, #included due to the rd complexity present to computer PZPAPN -XRef Country of Canada Germany Israel Italy Poland Taiwan All Countries PZPAPN Country of ated in *include: Happy New Year Shake 1226 Horse Junior 1835 Kamikazi Todor Albania Krivmous Tony Anthrax Leech Tony V651 Mini-45 V800 Boys Multi-123 V1024 Brainy Murphy V2000 Cmdr Bomber Mutant V2100 DAME Nina Vacsina Dark Lord Parity VFSI Darth Vader Phoenix Destructor V4.00 Phoenix 2000 VHP2 Dir-2 PhoenixD Vote Edcl Pogue Warrior Proud Yankee Doodle Evil Sentinel Yankee 2 PZPAPN CO_Canada Country of : Canada ated in Canada include: 1024 SBC NoInt Rocko NPox Scream Atomic 1 Ontario Sicilian Mob Atomic 2 Ontario 730 Small-38 Enemy Ontario III Sunday-2 Evil Empire Parasite Hellraiser R-10 Infinity R-11 Yukon Jericho Rage Malmsey Marauder PZPAPN CO_Germany Country of : Germany ated in Germany include: Flash Perfume 1804 Gliss RaubKopie 5120 GoldGeld RPVS Ambulance Car Groove Shirley Burger Hafenstrass Stahl Cascade Halloechen Tremor Hexametricx Violetta Christmas Tree Iron Umbrella VirDem Ebbelwoi Kalah Eight Tunes Karin Whale Ein Volk Munich Fingers Number One Fish Parity PZPAPN CO_Israel Country of : Israel ated in Israel include: 4096 -Haifa Suriv 2.01 Alabama JoJo Suriv 3.00 Do-Nothing Mix1 Swap Emmie Typo Emo-899 Saddam VMem Haifa Suriv 1.01 PZPAPN CO_Italy Country of : Italy ated in Italy include: Hero Little Pieces Aragorn Lucifer Aurea Interceptor Marzia Bandit Italian 803 Milano Bloody Warrior Itavir Casteggio Chris Italian Boy Como Pisello Cossiga Serena Cracker Jack Klaeren Tiso Damage ( Urfydus Dirty Enigma Grog 3.1 PZPAPN Country of ated in the include: Anti-DAF Dutch 555 LV 1.2 Dutch Bit Addict Flue Nazgul Breeze Gotcha Nomenklatura Cannabis Grapje Number 6 Civil War Groen Links Peace Man Cruncher Hacktic Quake Crusher James Bond RTL4 Darkray K-4B Sylvia Datacrime K-4C Terminator-3549 Deicide Kohntark Dodo 2456 Legalize Trident DOSHunter Little Br Zero Bug PZPAPN CO_Poland Country of : Poland ated in Poland include: Joker Polish Kthulhu Polish-45 Atas Mono Polish-376 Atas II MPS 1.1 Reklama MPS 3.1 Self Capitall MPS 3.2 Stone`90 CheckSum Mr. G SVir Cysta Nygus Tatou Doctor Qumak 2 PC Flu-2 Father Christmas Pascal-4260 TSoft Frajer-649 Plumbum VComm Frodo Soft Polish 217 Gosia Polish 529 Warsaw-850 Polish 583 Wizard 3.0 Hybryd PZPAPN CO_Taiwan Country of : Taiwan ated in Taiwan include: 382 Recovery MusicBug 1575 Plastique Bloody! Plastique-B Connie Spyer MKiller Taiwan Doom II Taiwan 3 Fish Taiwan 4 Invader Totoro MacGyver Wolfman Mummy PZPAPN CO_USA Country of ated in the include: 1260 JoJo 2 Skism AirCop Keypress Skull Alameda Lehigh Solano 2000 Beast-N-Black Leprosy Soupy Little Girl Striker #1 Black Hawk Lythyum Sunday Clonewar Mich II Tester DataLock Micropox Timid dBASE Mindless Traveller NaziPhobia Trigger Necro Fear Troi Frere Jacques Necro Shadow V2P2 Frogs Necrosoft Dementia V2P6 Geek Null Set V801 Green Peace Otto6 Grither Particle Man Violite Grunt-1 Patient Guppy Pixie Hastings Westwood Highlander Psychogenius Wild Thing 2 Intruder Quiet Wisconsin Invol Radyum Iraqui Warrior ZeroHunt Scott's Valley ZK900 Jeff Seneca-B PZPAPN Country of ated in the include: 2560 Ieronim Squisher SVC 3.1 Ionkin SVC 4.0 Akuku Kemerovo SVC 5.0 Alex-368 Kiev 483 SVC 6.0 Alfa Kiev 2049 Sverdlov Andre Kipa TechnoRat Angarsk Kiwi-550 Tu-482 Anti KLF-356 Tula Astra Label Tumen Attention! Leningrad II UFA-1201 Los-693 Uruk-hai Bebe Lozinsky LPT Off Beeper Lycee Beer Best Wishes Magnitogorsk 2048 Beware Malign Bryansk Metallica II Catman MGTU CCCP-510 MiniMax Commy Minsk Ghost Copyright CPSU-2535 Ninja Crash Not-586 Digger NTKC V388 Dima Oxana Dir Pascal-5220 Press Drop Problem End of Plutto Victor Enola Protecto Vivat Experiments Red Diavolyata Voronezh Experiments-416 Ryazan VVF 3.4 Harm-1082 Siskin WordSwap Skew-469 Zherkov Hymn Small-178 PZPAPN Countries Country of Countries Argentina: Avispa Paturuzu Anti-D Piazzolla Argentina Rael Argentina-102 Guillon Vinchuca Xuxa Australia: Aussie Dir Hominy Queens Aussie Parasite Incest Random Australian Liberty RIP-699 Australian 403 No Frills Skater Australian Oi Dudley Sleepwalker Clone 2.0 Slow Fungus Possessed Twin Peaks Gingerbread Man Puke-393 Viper Growing Block Austria: 1253 One Half Belgium: Belgium-320 Got-You Tchantches Bizarre ' VLamix Bolivia: Miky istrover III Brazil: Brazilian Bug Freddy Chile: Chile Mediera China: China Shanghai 5 Skynet Cuba: Attack Czechoslovakia: Blinker Semtex Slovak Pojer Shaker Denmark: Zombie England: Scroll Anna HiDos Scythe ARCV 330 Ice 9 Slime ARCV Friends Joanna Small ARCV ARCV Xmas Lancs Small ARCV-670 Lurve TMTM ARCV-n More-649 Toxic Baron Pay Rise Typo Benoit Reaper Chad Sandwich Chaos ) Zaphod Crazy Eddie Finland: 1008 Cinderella Finnish-709 Budo Crew-2480 Relzfu France: Malaise Paris Fich Mardi Bros Pitch Fichv-896 Greece: Armagedon Foetus 1.1 Pixel Hong Kong: Azusa Ming Hungary: Andromeda 1.0 Hungarian 482 Andromeda 1.1 Monxla Polimer Axe-1024 Monxla B Turbo Filler Phantom Hungarian Iceland: Ghostballs Icelandic India: Baobab Joshi Mugshot Changu Mangu Microbes Print Indonesia: 1392 Den Zuk Ohio Holiday Ireland: Gnose Suriv 4.02 Japan: Japanese Christmas Tokyo Korea: Korea Malaysia: Black Monday Davis World Peace Bomber Fellowship Malta: Casino Maltese Amoeba Mexico: Devil's Dance Poison Susan Morocco: Arusiek New Zealand: Shadow Norway: Graveyard-479 Rider Pakistan: Brain Philipines: Revenge Attacker Windmill Portugal: Amstrad Lisbon Pirate Republic of South Africa (RSA): African 109 Friday 13th Poem Blood Saturday The 14th Death Dragon Medical StinkFoot Die Pathhunt Romania: Alexander Saudi Arabia: Spain: 1210 Barrotes Rasek 1720 Cara Spanish Agena Spanish Fools Anti-Tel Holocaust Telecom Arale Barcelona Manola Sweden: Banana Mexican Mud Swedish Disaster Blood Lust Mithrandir Tormentor Coffeeshop-1568 MMIR Tormentor-205 Desperado PCBB Vicious Dismember Prime WinVir Harakiri Psychosis YB.Old Scribe Junkie Sistor Youth LockUp Swedish Boys Mayberry Switzerland: Burghofer FORM- Swiss Phoenix Exebug Swiss 143 Tequila Flip Thailand: Loa Duong Mule Turkey: 1661 Cansu Ugur Freak Walker Uruguay: Uruguay Venezuela: Tabulero PZPAPN Turbo Number One Chang 3Y.853 4-days 4-days Tack Xpeh 4Res 4Res 7% Solution 7% Solution 2.0 7% Solution 3.0 62-B 10 Past 3 10 Past 3 10 Past 3-B 10 Past 3 99%-B 99 Percent African 109 AT144 163 Silly Tormentor-205 Polish 217 Relzfu 248-Plus V270x Gipsy-304 ARCV 330 334-B 334-C Grunt-1 370-B Voronezh-370 382 Recovery 382 Recovery 382 Recovery 382 Recovery.1 382 Recovery FWord-383 Attention! Australian 403 Burger 405-EST Tula 422 422 VFSI 439-B NoBock RPVS Kiev 483 Burger Burger 512-A 512-B 512-C 512-D 512-E 512-F Polish 529 Burger Burger Burger Dutch 555 Burger 560-B Burger 572-COD Italian Boy VHP2 Icelandic (see: Saratoga) Vcomm Icelandic WW-658 Dir Finnish-709 Typo Ontario 730 10 Past 3 Perfume Revenge Attacker V801 834-B Typo Flower ZK900 Fich 903-B Fich 903-C Fich Badsec Dot Killer 1008 1008 1012 + 27 Grapje 1014 Interceptor 1022 Fellowship 1024 V1024 1024 Print 1024 Print 1024 SBC 1024 SBC 1024-B Nomenklatura 1024E Axe-1024 1024PSCR 1024 Print 1028 1030 Pisello 1039 Grapje 1049 1063 Mono 1067 1067 1075 Crash 1077 Jerk 1130 11-30 1193 Copyright 1210 1210 1226 1226 1226-B 1226 1226-B Dropper 1226 1226D 1226 1226M 1226 1241 1241 1244 1244 1244-B 1244 1253 1253 1260 1260 1308 1308 1339 Mummy (Mummy 2.1) 1374 Little Pieces 1376 Hellween 1381 Internal 1381-B Internal 1385 1385 1392 1392 1403 1403 1415 1452 1452 1530 CB-1530 1536 Zero Bug 1539 Christmas Tree 1554 1559 1575 1575 1575-B 1575 1575-C 1575 1575-D 1575 1575-E 1575 1575-Libin 1575 1577 1575 1590 Arriba 1591 1575 1600 1605 1600 Happy New Year 1605 1605 1605-B 1605 1621 Cascade 1624 Yankee 2 1661 1661 1661-B 1661 1661-C 1661 1677 PCBB 1689 1689 1701 Cascade 1701 Mutation Cascade 1701-Yap Cascade 1704 Cascade 1704 Format Cascade 1704-B Cascade 1720 1720 1720-B 1720 1720-C PCBB 1784 1784 17Y4 Cascade 1804 1804 1808 1813 1835 1835 1840 1840 1876 RSP-1876 1963 1963 1963 1963 1963-B 1963 1961 Yankee 2 1971 Eight Tunes Year Skism Todor 2062 DOSVer 2080 Fu Manchu 2086 Fu Manchu 2100 V2100 2131 Scott's Valley 2136 Outland 2144 2153 2153 2389 Seat 2480 Crew-2480 2559 2559 2560 2560 2560-B 2560 2560-C 2560 2576 Taiwan 4 2623 2623 2930 Traceback II 2930-B Traceback II 3012 Plastique 3040 3040 3040 3040 3066 Traceback 3066-B Traceback 3066-B2 Traceback 3445 3445- 3445- 3445- 3551 SysLock 3555 SysLock 3880 Itavir 4096 4096 4096-B 4096 4096-C 4096 4096-D 4096 4096-E 4096 4711 Perfume 4870 4870 4870 4870 4915 Ondra 5120 5120 5792 5856 7808 7808 7th Son Seventh Son 8290 Print 17690 Worm-17690 90210 BH Trident (see: Trident 90210) 909090h Burger 9800: PZPAPN PTn! A-204 A-Bomb A-Bomb Abacus (see: -Abacus) Abal Abal Abal.758 Abal ABC-2918 ABC-2918B Abraxas Abraxas 5 Abraxas 5 Abraxas.1508 Abraxas 5 Abraxas-1520 Accept.3619 Accept.3619 ACDC Poem Acid Acid Acid Trip Keeper (Keeper.Acid) AcidWarp AcidWarp Acme Clonewar Acvt Acvt Adolf Adolf Hitler Adolf Hitler Adolf Hitler Adolph Adolph Advent SysLock Advent-B SysLock African 109 African 109 Agena Agena Agi-plan Month 4-6 Ah-B AIDS AIDS AIDS II AIDS II AIDS- AIDS AirCop AirCop AirCop-B AirCop Akuku Akuku Akuku-3 Akuku Alabama Alabama Alabama Alameda Alameda Alameda 1.2M Alameda Albania Albania Albania-429 Albania Albania-506 Albania Albania-575 Albania Albania-606 Albania Albanian Albanian Alex-368 Alex-368 Alexander Alexander Alexander.2104 Alexander Alfa Alfa Alfa-1150 Alfa Alfa-1202 Alfa Alfa-1712 Alfa Alfa-Tired Alfa Alien-1 Alien-3 All Sys 9 All Sys 9 Alpha-743 Alpha-743 Ambulance Ambulance Car Ambulance Car Ambulance Car Ambulance Car-B Ambulance Car Amilia Amoeba 1392 Amse Amstrad Amstrad Amstrad-End Is Near Amstrad Amstrad-End Is Near B Amstrad Amstrad-Luz Amstrad Anarkia Anarkia-B Anathema Andr-634 TBug-634 Andre Andre Andre-0 Andre Andre-3568 Andre Andromeda 1.0 Andromeda 1.0 Andromeda 1.1 Andromeda 1.1 Andryushka Andre Angarsk Angarsk Angel Angel.436 Angel Dust 1.0 Skism Angel Of Death Leprosy Angry Samoans IVP (see: .Angry Samoans Animus Animus Animus-7360 Animus Animus-7392 Animus Anke Aussie Parasite (See: .440 Anna Anna Anthrax Anthrax AntiCad 1253 Plastique Plastique-B Anticad 1 Plastique-B Anticad 2 Taiwan 3 Anticad 3 Plastique Anticad 4 Invader Anticad 5 Taiwan 4 Anti Anti Antimon Antimon Anti 1605 Antiviru Anti-D Anti-D Anti-D B Anti-D Anti-DAF Anti-DAF Anti-Print Anti-Tel Anti-Tel AntiChrist Murphy Anto Anto AP-400 AP-440 AP-440B AP-480 AP-480B AP-529 AP-605 Apocalypse Apocalypse II V2000 Appelscha Appelscha Suriv 1.01 1st-B Suriv 2.01 Arab Arab Star Aragon Aragon Aragorn Aragorn Arale Arale Arara Arara Arara.1057 Arara ARCV 330 ARCV 330 ARCV Friends ARCV Friends ARCV Xmas ARCV Xmas ARCV-1 ARCV-n ARCV-10 ARCV-n ARCV-10B ARCV-n ARCV-1060 X-2 (see X-3B) ARCV-2 ARCV-n ARCV-3 ARCV-n ARCV-4 ARCV-n ARCV-5 ARCV-n ARCV-570 X-2 (see X-1B) ARCV-6 ARCV-n ARCV-670 ARCV-670 ARCV-7 ARCV-n ARCV-718 Lurve ARCV-773 Slime ARCV-8 ARCV-n ARCV-9 ARCV-n ARCV-n ARCV-n ARCV93 Ice 9 AReg-822 Arf-B Argentina Argentina Argentina 1.0 Argentina Argentina-102 Argentina-102 Arka Arkanoid Arma Armagedon Armagedon Armagedon Armagedon #911 Armagedon Armagedon-1074 Armagedon Armagedon-1077 Armagedon Armana-564 Arriba Arriba Arusiek Arusiek Arusiek.692 Arusiek Arwen3 Ash.270 Ash.441 Ash.449 Ash.451 Ash.546 Ash.546.B Ash.737 Ash.Megabug Ash (see: Ash.546) Ashar Ashar ASP-472 ASP-472 Astra Astra Astra.1556 Astra Astra-498 Astra Astra-510 Astra Astra-521 Astra Astra-976 Astra Astra-1010 Astra AT108 AT144 AT114 AT144 AT118 AT144 AT122 AT144 AT140 AT144 AT144 AT144 AT149 AT144 Atas Atas Atas II Atas II Atas-384 Atas Atas-400 Atas Atas-3321 Atas II AtomAnt 1.0 AtomAnt 3.0 AtomAnt 3.0 AtomAnt 3.0 Atomic 1 Atomic 1 Atomic 1A Atomic 1 Atomic 1B Atomic 1 Atomic 2 Atomic 2 Atomic 2A Atomic 2 Atomic 2B Atomic 2 Atomic.166 Atomic 2 Atomic.967 Atomic 2 Attack Attack Attack-918 Attack Attack-1501 Attack Attention! Attention! Attention-629 Attention-629 Aurea Aurea Aussie Dir Aussie Dir Aussie Parasite Aussie Parasite Aussie Parasite.272 Aussie Parasite Aussie Parasite.292 Aussie Parasite Aussie Parasite.292.B Aussie Parasite Aussie Parasite.306 Aussie Parasite Aussie Parasite.440 Aussie Parasite Aussie Parasite.482 Aussie Parasite Aussie Parasite.491 Aussie Parasite Aussie Parasite.588 Aussie Parasite Aussie Parasite.591 Aussie Parasite Aussie Parasite.635 Aussie Parasite Aussie Parasite.726 Aussie Parasite Aussie Parasite.762 Aussie Parasite Aussie Parasite.784 Aussie Parasite Aussie Parasite.1041 Aussie Parasite Aussie Parasite.1050 Aussie Parasite Aussie Parasite.1169 Aussie Parasite Aussie Parasite.1179 Aussie Parasite Aussie Parasite.Comic Aussie Parasite Aussie Parasite.Gotter Aussie Parasite Aussie Parasite.Kuang Kuang Aussie Parasite.Lipo Aussie Parasite Australian Australian Australian 403 Australian 403 Australian Parasite Aussie Parasite Australian Australian Australian Australian Australian -142B Australian Australian Australian Australian Australian Australian Australian Australian Australian Australian Australian Austrian Aver_Torto Grog 3.1 (See: Grog.324) Avispa Avispa AVV 1.12 AVV-2300 AVV-2300 AVV-2300 Axe-1024 Axe-1024 Azusa Azusa Azusa 2 Azusa PZPAPN B-52 DOSHunter Baba Baba Baba.353 Baba Baby Backfont Badsec BackFont-896 BackFont-896 Back Back Bad Boy Bad Boy Bad Boy 2 Bad Boy Bad Boy 3 Bad Boy (see Immortal Riot) Bad Boy-D Bad Boy Bad Brain Bad Brain Bad Brain 1.2 Bad Brain Bad Bad Bad Seed Gingerbread Man Bad-389 Bad-389 BadCmdx Roguey BadGuy BadGuy 2 Badsec Badsec Bamestra 1 Bamestra 2 Bamestra 3 Bamestra 4 Bamestra 5 Bamestra 6 Bamestra 7 Bamestra 8 Bamestra 9 Bamestra 10 Banana Banana Bandit Bandit Baobab Baobab Baobab-731 Baobab Barcelona Barcelona Baron Baron Barrotes Barrotes Barrotes.840 Barrotes Barrotes.849 Barrotes Barrotes.1303 Barrotes Slovak (Slovak-4B) Basic 5120 Basilisk Basilisk Bad Brain Sentinel Beast Beast-N-Black Beast-N-Black Beast-N-Black Beast-N-Black B Beast-N-Black Beavis & Butthead Bebe Bebe Beech Beeper Beeper Beer Beer Beer.645 Beer Beer-2794 Beer Beer-2850 Beer Beer-3164 Beer Beer.3399 Beer Beethoven Beggar Poor Man Beijing Bloody! Belgium-320 Belgium-320 Bell Intruder Benoit Benoit Berlusca Berlusca Best Wish Best Wishes Best Wishes Best Wishes Best Wishes B Best Wishes Best Wishes C Best Wishes Beta Beta Beta Boys Beta Boys-730 Betrayal Leprosy (see: Leprosy-664A) Better World Fellowship Beva 32 Beva 33 Beva 96 Beware Beware BFD-451 BFD-452 Big Bang Big Bang Big Joke Big Joke Big-2000 Big-2000 Billboard 1.0 Billboard 1.0 Bios Bios Birdie DoDo Birthday Bit Addict Bit Addict Bit Addict-496 Bit Addict Bizarre Bizarre Black Avenger Black Friday Black Hawk Black Hawk Black Monday Black Monday Black Monday-B Black Monday Black Monday-C Black Monday Black Wizard Black Wizard Blackjack Cascade Blaze Blaze Blinker Blinker Blinker-496 Blinker Blinky Blinky Blinky Ghost Blinky Bljec Bljec Bljec-XYZ Bljec Bljec-235 Bljec Bljec-284 Bljec Bljec3 Bljec Bljec3B Bljec Bljec4 Bljec Bljec4B Bljec Bljec5 Bljec Bljec5B Bljec Bljec6 Bljec Bljec6B Bljec Bljec7 Bljec Bljec7B Bljec Bljec7C Bljec Bljec8 Bljec Bljec8B Bljec Bljec9 Bljec Bljec9B Bljec Blood Blood Blood 2 Blood Blood Lust Blood Lust Blood Rage Blood Rage Bloody Warrior Bloody Warrior Bloody! Bloody! Bloody!-B Bloody! Bloomington NoInt Blue Moon VCL (see: .Blue Moon) Bobo Bobo Bobo.530 Bobo Bogota Bomb Bomber Bomber Bomber Boojum Boojum Ping Pong (Killer (Killer X.205 Borderline Black Monday Boroda Bosnia Bouncing Ball Ping Pong Bouncing Dot Ping Pong Boys Boys Boys 2 Boys Brain Brain Brain Slayer Slayer Brainy Brainy Brazil Quick Brazilian Bug Brazilian Bug Breaking Breaking Breaking.1000 Breaking Breeze Breeze Brenda Brenda-B Deicide Murphy s In Arm Murphy (see Br Bryansk Bryansk Bubbles Bubonic Bubonic Budo Budo Budo.1000 Budo Bugfix 1.1 Trident (see: Trident-611) *n 123 Multi-123 Bumpy Gippo (see: Gippo.Bumpy) Bupt Traveller Bupt-B Traveller Burger Burger Burger 404 Burger Burger 509 Burger Burger 537 Burger Burger 540 Burger Burger 542 Burger Burger 560-B Burger Burger 792 VirDem-792 Burger-Pascal AIDS Burghofer Burghofer Burma Burma.563 Burma.563 Burma.563 Busted Busted Butterflies Butterflies Butterflies-302 Butterflies Butt Stink Butt Stink ButtUgly ButtUgly PZPAPN C-605 C-23963 Cacophony Cacophony Cacophony 1 Cacophony Cacophony 2 Cacophony Cadkill Cadkill Cannabis Cannabis Cannabis Dropper Cannabis Cannabis 2 Cannabis Cannabis 2 Dropper Cannabis Cannabis 3 Cannabis Cannabis 3 Dropper Cannabis Cansu Cansu Capicua Capicua Capitall Capitall Captain Trips Captain Trips 2 Cara Cara Career Of Evil Career Of Evil Career Of Evil-446 Career Of Evil Career Of Evil-697 Career Of Evil Carfield Carfield Carioca Carioca Carioca-B Carioca Cartuja Cartuja Cascade Cascade Cascade 1701.E Cascade Cascade.1661 1661 Cascade.1702 Cascade Cascade-1621 Cascade Cascade-1704G Cascade Cascade-1706 Cascade Cascade-B Cascade Casino Casino Casino 2 Casino Casino-C Casino Casper Casper Casper Dropper Casper Casteggio Casteggio Catman Catman Caz-1159 Zaragosa Caz-B CB-1530 CB-1530 CCCP-510 CCCP-510 CD Player CD10 Dir-2 CD11 Dir-2 CD12 Dir-2 Cemetery Murphy Cerburus Cerburus Chad Chad Chameleon 1260 Casper V2P2 Chang Chang Chang 007 Chang Chang-B Chang Changu Mangu Changu Mangu Chaos Chaos Chaos Year Chaos Year Chaos Year.1837 Chaos Year Chaser Chaser CHCC CHCC CheckSum CheckSum CheckSum 1.00 CheckSum CheckSum 1.01 CheckSum CheckSum 1.01B CheckSum CheckSum-1569 CheckSum Cheeba Cheeba Cheeba-1691 Cheeba Cheeba-1691B Cheeba Cheeba-B Cheeba Chemist Voronezh-Chemist Chemmy Chemmy Chemmy-B Chemmy Chemnitz Chemnitz Cheesy Chicken Pox Chile Mediera Chile Mediera Chill Chill China China Chinese Fish Fish Chinese Invader Invader Choinka Father Christmas CHR-869 CHR-869 Chris Chris Christmas In Japan Japanese Christmas Christmas Christmas Christmas Tree Chromo 1.0 Chromo 1.0 Chromo 2.0 Chromo 1.0 Chromo 3.0 Chromo 1.0 Chuang Tzu CHV 2.1 Fich Burger CIA-2 Burger Cinco de Mayo Cinco Cinderella Cinderella Cinderella-B Cinderella Cinderella.C Cinderella Ciudado Moctezumas Revenge Civil War Civil War Civil War II v1.0 Civil War Civil War II v1.1 Civil War Civil War III v1.0 Civil War Civil War IV v1.1 Civil War V v1.0 TPE Civil War.158 Civil War Civil War-282 Civil War Civil War-Lockjaw Civil War CkSum CheckSum Clint Clipper Australian Clone 2.0 Clone 2.0 Clonewar Clonewar Clonewar 2 Clonewar Close Close Clyde Pinky (See: Pinky.Clyde) CLS-853 CLS-853 CLS-853 CMagic CMagic CMagic.2015 CMagic CMagic.2246 CMagic Cmdr Cmdr Bomber Cmdr Bomber Cmdr Bomber CMOS4 Anti Coahuila Cobra Cobra Cocaine Cocaine 7Zero 7Zero-652 Coffeeshop DAME Coffeeshop 1 Coffeeshop-1568 Coffeeshop 2 DAME Coffeeshop 4 Coffeeshop-1568 Coffeeshop-1568 Collor de Mello Collor de Mello Columbus Akuku Twin-351 Com2Con 9wealth 9wealth Commy Commy Como Como Como-Lake Como Computer Ogre MKiller Connie Connie Connie 2.0 Connie Connie.1761 Connie Connie.1761.B Connie Connie.2799 Connie Cookie SysLock Cookie-7360 Animus Cookie-7392 Animus Cop-Mpl Akuku Cops-1 Copyright Copyright Copyright-1205 Copyright Coru Rasek Cossiga Cossiga Cossiga-B Cossiga Costeau Costeau Cover Girl Psychogenius Coyote Coyote CPSU-2535 CPSU-2535 Cpxk Cpxk Cracker Jack Cracker Jack Enigma Crackpot 208 Cracky Crash Crash Crasher Crazy Eddie Crazy Eddie Crazy Imp Crazy Imp Crazy Imp v1.5 Crazy Imp Crazy Imp-1402 Crazy Imp Crazy Imp-B Crazy Imp Crazy Priest Crazy Priest Creeper Creeper Creeper-B AIDS II Creeping Death Dir-2 Creeping Tormentor Creeper Crew-2480 Crew-2480 Crew-2480 B Crew-2480 Crew-2480 C Crew-2480 Criminal Criminal Criminal-B Criminal Crumble Cruncher Cruncher Cruncher 1.0 Cruncher Cruncher 2.0 Cruncher Cruncher 2.1 Cruncher Crusades Butterflies Crusades Butterflies Crusher Crusher CryptLab DAME Crystal CSL Beta CSL V4 CSL V5 Cuban Attack Cunning Cascade Curse IV Curse IV Curse Curse Cursy Nowhere Man Cyber Cyber Cyber-946 Cyber Cybercide Cybercide Cybercide-2299 Cybercide Cybercide-2299B Cybercide CyberTech CyberTech CyberTech-222 CyberTech CyberTech-501 CyberTech CyberTech-552 CyberTech CyberTech-654 CyberTech CyberTech-A CyberTech CyberTech-B CyberTech Cysta Cysta Cysta-2711 Cysta Cysta-2954 Cysta Cysta-8045 Cysta Czech PZPAPN Dutch Dada Dada Daddy.1117 Incest Damage Damage Damage-B Damage DAME DAME Danish Danish Danish .NC.284 Danube Invader DAPDM-13 Japanese Christmas >1028 >1801 V651 V2100 >.1797 >.1800.Satan >.Jericho Jericho >.Jericho.1000 Jericho >.Major >.Shyster >-1693 >-1799 >-1813 >-Romanian V2000 V1024 Dark End Dark End Dark Lord Dark Lord Dark Lord-B Dark Lord Dark Quest Darkray Darkray DarkSide DarkStar DAME Darth Darth Vader Darth Vader Darth Vader Darth-1 Darth Vader Darth-2 Darth Vader Darth-3 Darth Vader Darth-3B Darth Vader Darth-4 Darth Vader Darth-5 Darth Vader Dashel 1804 Data Molester Swedish Boys Datacrime Datacrime Datacrime II Datacrime Datacrime IIB Datacrime Datacrime IIC Datacrime Datacrime-B Datacrime DataDeath DataLock DataLock DataLock 1.00 DataLock DataLock-828 DataLock DataLock-1043 DataLock DataLock-1740 DataLock DataLock-D DataLock DataRape-10 R-10 DataRape-11 R-11 Datarape 2.2 Sunday-2 David-1173 Davis Davis Day10 Day10 Day/10 Day10 DBase dBASE DBF blank Crash DBF dBASE Dead-790 Dead-790 DeadPool Marauder Deaf Dead-790 Dear Nina Happy New Year Death Dragon Death Dragon Death Rattle Rattle Death To Pascal Wisconsin Death 2 DeathBoy (see: .DeathBoy) A24th Icelandic (see Icelandic-III) A28th Spanish Fools Dedicated DAME Dedicated 2 DAME Dedicated 3 DAME Define Define Define-256 Define Define-B Define Deicide Deicide Deicide 2 Deicide Deicide II.622 Deicide Deicide II.623 Deicide Deicide-1335 Deicide Deicide-2405 Deicide Deicide-2570 Deicide Deicide-B Deicide Dejmi Dejmi Delyrium Murphy Democracy Democracy Demolition Demolition Demon Demon Viper Demon Viper Demon.348 Satyricon Demon-B Demon-C Den Zuk Den Zuk Den Zuk-RPKS Den Zuk Dennis Pay Rise Deranged Deranged Desperado Desperado Desperado 1.0 Desperado Desperado 1.1 Desperado Desperado.2403A Desperado Desperado.2403B Desperado Desperado.2403C Desperado Dest-1 Dest Dest-2 Dest Dest-3 Dest Destructor Destructor V4.00 Destructor V4.00 Destructor V4.00 Deunis Devil's Dance Devil's Dance Devil's Dance-B Devil's Dance Devils & Evangels Devils & Evangels Devils & Evangels.1456 Devils & Evangels Devils & Evangels.1526 Devils & Evangels Devils & Evangels.1634 Devils & Evangels Devils & Evangels.1792 Devils & Evangels Dewdz Dewdz Die Di-94 Di-101 Di-108 Di-110 Diabolical Ingenuity Golgi (See: Golgi.1173) Diabolik Murphy Diamond V1024 Diamond Diamond-444 Diamond Diamond-465 Diamond Diamond-485 Diamond Diamond-584 Diamond Diamond-594 Diamond Diamond-602 Diamond Diamond-606 Diamond Diamond-607 Diamond Diamond-608 Diamond Diamond-609 Diamond Diamond-614 Diamond Diamond-620 Diamond Diamond-621 Diamond Diamond-624 Diamond Diamond-626 Diamond Diamond-891 Diamond Diamond-978 Diamond Diamond-1013 Diamond Diamond-B V1024 Diamond Dial Diana Diarrhea Diarrhea6 Dichotomy Dichotomy Dicker Dicker Dicker.400 Dicker Die Die Die Young V2000 Digger Digger Dima Dima Dinky Dinky Dinky.122 Dinky Diogenes Dir 2-910 Dir-2 Dir Dir Dir-2 Dir-2 Dirty Dirty Discom Discom DisDev DisDev MCrunching Icelandic MKiller MKiller MOgre MKiller MPlus 1 1385 MSpoiler 1308 Dismember Dismember Distrust Distrust DLSU DLSU DM 92 Bios DM.310 DM-330 DM-400 DM-B DM 1.01 DM 1.01B DM 1.04 DM 1.05 DNR-ROM Bios Do-Nothing Do-Nothing Doctor Qumak 2 Doctor Qumak 2 DoDo DoDo Dodo 2456 Dodo 2456 Dome Dome2 Dome3 Dome4 Doom I Taiwan Doom I-B Taiwan Doom II Doom II Doom II-B Doom II Donald Duck Donatello Dorn Aussie Parasite DOS-1 DOS-1 DOS-62 DOS-625 DOS-68 DOS3 DOS3 DOS7 DOS7 DOS7-B DOS7 DOS7-C DOS7 DOSHunter DOSHunter Dostepu Dostepu DOSVer DOSVer Dot Eater Dot Killer Dot Killer Dot Killer Dot Killer B Dot Killer Doubleheart Doubleheart Doubleheart.452 Doubleheart Doubleheart.452.B Doubleheart Doubleheart.649 Doubleheart Dr Q Dr Q-B Dr Qumak 2 Doctor Qumak 2 Dragon Dreamer Dreamer QNot Ready Drop Drop Druid Druid DSME DSME DSME.T DSME RaubKopie (see: Raubkopie-FRD) Dudley Oi Dudley Durban Saturday The 14TH Dushanbe Dust Mini-45 Dutch 424 Dutch 555 Dutch 555 Dutch 555-B Dutch 555 Dutch 1039 Grapje Dutch Dutch Dutch Dutch Dutch Dutch Dutch Dutch Dutch Dutch Dutch -124B Dutch Dutch Dutch Dyslexia Solano 2000 Dyslexia 2.00 Solano 2000 Dyslexia 2.01 Solano 2000 Dzino Dzino PZPAPN E.T.C. E-Coli E-Riluttanza Grog 3.1 Earth Day Earthquake Gippo VCL EB 21 Print Ebbelwoi Ebbelwoi Eclypse Edcl Edcl Edcl-B Edcl Edct Edcl Eddie Eddie 3 V651 Eddie 2000 V2000 Eddy'93 Death Dragon Edge Friday 13th Egg-1000 Egg-1000 Egg-1000 Eight Tunes Eight Tunes Eight Tunes-Mod1 Eight Tunes Ein Volk Ein Volk Einstein Einstein EkoT EkoT Elena Eliza Eliza Aussie Parasite Elvis-1250 Elvis-1250 Emf-625 Emmie Emmie Emo-899 Emo-899 Emo-899 Empire Evil Empire Encroacher DAME Encroacher 2 DAME End Of End Of Enemy Enemy Enemy Enemy England Crazy Eddie Enigma Enigma Enola Enola Erasmus Murphy Estepa Estepa W-92B Wan Fish Fish Evil Evil Evil Empire Evil Empire Evil Empire-A Evil Empire Evil Empire-B Evil Empire Evil Genius NPox Evil Genius 2 NPox Evil Genius 2B NPox Evil Genius 2C NPox Evil Men Evil-B Evil Exebug Exebug Experiments Experiments Experiments-416 Experiments-416 Experiments-755 Experiments Explode Explode Explosion Explosion Extasy MMIR Exterminator Exunt Exunt PZPAPN F-soft Frodo Soft F-Word Tula F-you Tula F1-337 Faerie Faerie Faerie-276 Faerie Fairz Fairz FakeVirx Relzfu Fall Cascade Falling Letters Cascade Ping Pong Falling Letters Swap Dir-2 Fat Fat Father Father Father Christmas Father Christmas Father Christmas-B Father Christmas Faust Spyer Fax Mosquito Fear DAME FeelBad FeelBad Feist Feist Fellow Fellowship Fellowship Fellowship Fellowship-B Fellowship Fich Fich Fich-897 Fich FichV Fich Fichv-896 Fichv-896 @11-537 @11-537 Filler Filler Filling AtomAnt 3.0 Finger Murphy Fingers Fingers Finnish-357 Finnish-709 Finnish-709 Finnish-709 FireFly FireFly FireFly.1087 FireFly Fish Fish Fish F Fish Fish II Fish Fish 6 Fish Fish Fish Fish Fish Fisher Fisher Fisher-1100 Fisher Fisher-2420 Fisher Fishy Fish Fission Fission Fist Scream Five O'Clock Yankee Doodle Flagyll Flagyll Flagyll-Z Flagyll Flash Flash Flex Flex Flip Flip Flip-2153 Flip Flip-2153B Flip Flip-2153C Flip Flip-2343B Flip Flower Flower PC Flu Flu-2 PC Flu-2 Flue Flue Fly 1.1 Fly 1.1 Foetus 1.1 Foetus 1.1 FoneSex FoneSex Forger Forger Form FORM- Form FORM- Form II FORM- FORM- FORM- FORM-18 FORM- Form-Canada FORM- Frajer.524 Frajer-649 Frajer-649 Frajer-649 Fratricide Fratricide Raubkopie Freak Freak Freddy Freddy Freddy 2.1 Freddy Freddy Soft Keypress (see: Keypress-Freddy Soft) fw-692 fw-692 fw-718 Frere Frere Jacques Frere Jacques Frere Jacques Frere Jacques-B Frere Jacques Frere Jacques-C Frere Jacques Frere Jacques-D Frere Jacques Friday 13th Friday 13th Friday 13th Friday 13th Friday 13th-540C Friday 13th Friday 13th-978 Friday 13th Friday 13th-B Friday 13th Friday 13th-C Friday 13th Friday 13th-D Friday 13th Friday 13th-NZ Friday 13th Friday The 13th Friday 13th Friday-13th-440 Reset Friends Friends FroDo 4096 Frodo Soft Frodo Soft Frodo Soft-458 Frodo Soft Frodo Soft.633 Frodo Soft Frodo Soft.656 Frodo Soft Frogs Frogs Frogs-B Frogs Frog's Alley Frogs Frog's Alley-B Frogs Fu Manchu Fu Manchu Fu Manchu-B Fu Manchu Fumble Typo Funeral Funeral Fungus Fungus Fuse Box Dwarf Fuse Box Dwarf Futhark Youth FWord-383 FWord-383 PZPAPN Perfume Perfume Sorry G2-A429 G2-A438 G2-A615 G2-Celeste G2-D598 G2-E513 G2-Mudshark G2.Punisher Garden Mutagen Garfield Geek Geek Genc Genc Genc.502 Genc Genc.1000 Genc Generic Generic Generic Generic Genesis Genesis Genesis.217 Genesis Genesis.226 Genesis Genesis.238 Genesis Genesis.295 Genesis Genny-648 Genvir Geodesic 2.0 Geodesic 2.0 Gergana Gergana Gergana II Gergana Gergana III Gergana Gergana IV Gergana Gergana-182B Gergana Gergana-222 Gergana Gergana-300 Gergana Gergana-450 Gergana Gergana-512 Gergana Germ 255 Baron German Telecom Get Password 1 Ghost Ghostballs Ghost Ghostballs Ghostballs Ghostballs Ghostballs.1 Ghostballs Gidra-469 Gidra-469 Ginger,2691 Gingerbread Man Gingerbread Man Gingerbread Man Gippo Gippo Gippo.Bumpy Gippo Gippo.Earthquake Gippo Gippo.JumpingJack Gippo Gippo.Stunning Gippo Gipsy-304 Gipsy-304 Girafe Glenn Deicide Gliss Gliss Globe Globe Globe 3.0 Globe HH&H Gnose Gnose Goblin Murphy Goddamn Butterflies Butterflies Godoy Godoy Godoy Dropper Godoy Golden Gate Alameda GoldGeld GoldGeld Golgi Golgi Golgi Testicles Golgi Golgi 1.0 Golgi Golgi 2.0 Golgi Golgi 3.0 Golgi Golgi.886 Golgi Golgi.1173 Golgi Golgi.DEI Golgi Golgi.Oracle Golgi Gollum Gollum Gomb HH&H Goodbye Siskin Gorlovka Gorlovka Gosia Gosia Got-You Got-You Gotcha Gotcha Gotcha-627 Gotcha Gotcha-732 Gotcha Gotcha-906 Gotcha Gotcha-A Gotcha Gotcha-A2 Gotcha Gotcha-B Gotcha Gotcha-E Gotcha Gotcha-Mut1 Gotcha Gotcha-Mut2 Gotcha Gotcha-Mut3 Gotcha Gotcha-Mut4 Gotcha Gotter Aussie Parasite (see: .Gotter var.) Granada Granada Grapje Grapje Graveyard-479 Graveyard-479 Grease Greemlin Gremlin Green Green Joker Green Caterpillar 1575 Green Caterpillar-1989 Green Caterpillar-1989 Green Joker Green Joker Green Left Groen Links Green Peace Green Peace Gremlin Gremlin Grither Grither Groen Links Groen Links Grog 3.0 Grog 3.1 Grog 3.1 Grog 3.1 Grog 5.0 Grog 3.1 (See: Grog.2825) Grog.202 Grog 3.1 Grog.324 Grog 3.1 Grog.377 Grog 3.1 Grog.566 Grog 3.1 Grog.798 Grog 3.1 Grog.800 Grog 3.1 Grog.801 Grog 3.1 Grog.903 Grog 3.1 Grog.926 Grog 3.1 Grog.2825 Grog 3.1 Grog.Dream Grog 3.1 Grog.Gonfie Grog 3.1 Grog.Hop Grog 3.1 Grog.Il_Mostro Grog 3.1 Grog.IlCuoco Grog 3.1 Grog.Inc Grog 3.1 Grog.N Grog 3.1 Grog.NTA Grog 3.1 Grog.Ovile Grog 3.1 Groove Groove Groove OW Groove OW Groovy Grouchy Timid (see: Timid-290) Grouchy-C Timid (see: Timid-371) Grouchy-E Timid (see: Timid-297) Growing Block Growing Block Groz-999 Groz-999 Grue Aussie Parasite Grunt-1 Grunt-1 Grunt-1B Grunt-1 Grunt-3 Grunt-1 Grunt-4 Grunt-1 GSav 1.0 Grog 3.1 GSav 1.1 Grog 3.1 Guillon Guillon Guppy Guppy Guppy-B Guppy Guru Meditation Gusano Gusano Gyorgyi Hungarian Gyro Gyro PZPAPN Hacktic Hacktic Hacktic 2 Hacktic Hafen Hafenstrass Hafenstrass Hafenstrass Hafenstrass 2 Hafenstrass 2 Hafenstrass-1191 Hafenstrass Hafenstrass-1191B Hafenstrass Hafenstrass-D Hafenstrass Hahaha AIDS Haifa Haifa Hallo Hallo-496 Halloechen Hallo-496 Hallo-496 Hallo-751 Hallo-496 Hallo-759 Hallo-496 Halloechen Halloechen Halloween Halloween Hambone Hambone Hammelburg Hamster Hamster Handi-215 Handi-215 Handler Hannibal Happy Happy Happy Happy Birthday Joshi Joshi Happy Halloween Halloween Happy N.Y. Happy New Year Happy New Year Happy New Year Happy New Year B Happy New Year Harakiri Harakiri lDays lDays Harm-1082 Harm-1082 Hary Hary Anto Hary Anto Hary Anto Hastings Hastings Hate Klaeren Hates-213 Hates-213 Hawaii Headache Swedish Boys Headache.441 Swedish Boys Hebrew University Heevahava Hehheh Timid Helicopter Helicopter Helicopter.777 Helicopter Hell Hell Hell-892 Hell Hellraiser Hellraiser Hellween Hellween Hellween-1182 Hellween Hellween.1684 Hellween Helmet 1.0 Here Were Here Hero Hero Hero-394 Hero-394 Hero-506 Hero Hero-506B Hero Hero-B Hero-394 Hemp Hexametricx Hexametricx Hey You HH&H HH&H Hiccup HiDos HiDos Highlander Highlander Hiperion Hiperion Hiperion.249 Hiperion Hitchcock Hitchcock Hitchcock-1238 Hitchcock Hitler Dreamer Murphy HLL-5150 Globe (see: Globe 3.0) HLLS.Linda Lou HLLS Plastique Hobbit Hobbit Holiday Holiday Holland Girl Sylvia Holland Girl 2 Sylvia Holo Holocaust Holocaust Holocaust Hominy Hominy Hominy-B Hominy Honey Honey Hong Kong Azusa Horror Horror Horror-1112 Horror Horror-1137 Horror Horror-1137B Horror Horse Horse 2 Horse 5 Horse-8 Horse-8B Horse Horse Horse (Dropper Horse Hot.130 House House Vivaldi Hungarian Hungarian Hungarian 482 Hungarian 482 Hungarian-B Hungarian Hunt ZeroHunt Hybrid Hybryd Hybryd Hybryd Hydra Hydra Hydra Hydra Hydra-0 Hydra Hydra-1 Hydra Hydra-2 Hydra Hydra-3 Hydra Hydra-4 Hydra Hydra-5 Hydra Hydra-6 Hydra Hydra-7 Hydra Hydra-8 Hydra Hydra-8 Trojan Hydra Hymn Hymn Hymn-2 Sverdlov PZPAPN Ice 9 Ice 9 Ice 9-159 Ice 9 Ice 9-199 Ice 9 Ice 9-224 Ice 9 Ice 9-250 Ice 9 Ice 9.639.Starfish Ice 9 Ice 9B Ice 9 Ice Cream CyberTech (see: CyberTech-501) Iceland Icelandic Icelandic Icelandic Icelandic.655 Icelandic Icelandic-IB Icelandic Icelandic-IC Icelandic Icelandic-ID Icelandic Icelandic-IE Icelandic Icelandic-II Icelandic Icelandic-III Icelandic IKV 528 Idle Idle Ieronim Ieronim Ieronim-512 Ieronim Ieronim-560 Ieronim Ieronim-570 Ieronim Ieronim-600 Ieronim Ieronim-1581 Ieronim Ignorant Ignorant IKV-512 IKV 528 IKV 528 IKV 528 Ilja-1704 Ilja-1704 Imi.1536 Imi.1538 Imi.1656 Imi.A Imi.B Imi.C Imi.D Imi.E Imi.F Immolation Immolation Immortal Riot Bad Boy Immortal Riot.B Bad Boy Crazy Imp Incest Incest Incest.1117 Incest Incom Incom w-822B w (See: AReg-822) Infinity Infinity Inky Inky Inky Ghost Inky Inofensivo Malaga Int13 Label Int86 Interceptor Interceptor Internal Internal Internal-1459 Internal Internal-B Internal Intrep-1092 Cyber Intruder Intruder Intruder-1326 Intruder Intruder.1331 Intruder Intruder.1355 Intruder Intruder-1440 Intruder Intruder.1555 Intruder Intruder-1967 Intruder Intruder-1988 Intruder Intruder-2336 Intruder Intruder-B Intruder Invader Invader MMIR Man I Man II Invol Invol Invol-B Invol Ionkin Ionkin Ionkin-231 Ionkin Ionkin-2372 Ionkin All Sys 9 Iper Iper Iranian Iranian Iraqui Iraqui Warrior Iraqui Warrior Iraqui Warrior Iris Pascal-4260 Irish Maltese Amoeba Irish3 Gnose Iron Hoof 1 Iron Hoof 2 Iron Maiden Iron Umbrella Iron Umbrella Israeli Suriv 1.01 Suriv 2.01 Suriv 3.00 Israeli Swap It-457 Ital Boy Italian Boy Italian Ping Pong Italian 803 Italian 803 Italian 803-B Italian 803 Italian Boy Italian Boy Italian Italian 803 StarDot 801 Italian Pest Murphy Italian-A Ping Pong Itavir Itavir Itti Itti Itti-A Itti Itti-B Itti IVL-1 Murphy (see HIV) IVP Example 1 IVP Example 2 IVP.Angry Samoans IVP. Showers IVP.Taselhoff IVP.Walky IVP-Ozzy IVP-S2DD IVP-Tuesday PZPAPN Nowhere Man Sistor Jabberwocky Jabberwocky.615 Jabberwocky-B Jack Jack Jack.416 Jack James Bond James Bond 25TH-B Japan Japanese Christmas Japanese Christmas Japanese Christmas Japanese Christmas-B Japanese Christmas Japanese Christmas-C Japanese Christmas Japanese Christmas-D Japanese Christmas Japanese Cookie Japanese Christmas Japanese-709 Japanese Christmas Jasmine Jasmine Jason Jason JD-158 JD-276 JD-356 JD-392 Jeff Jeff Jericho Jericho Jericho.1000 Jericho Jerk Jerk Jerk-B Jerk 11-30 11-30 -1361 Growing Block -Haifa -Haifa -Polish -Yellow Growing Block .2389 .Suselfo Jews2 Mayak Jihuu.621 JKTK Changu Mangu Joanna Joanna Joanna Joanna 1.11 Joanna Joanna-911 Joanna Joanna-911B Joanna Jocker Joker Joe's Demise JoJo JoJo JoJo 2 JoJo 2 JoJo-B JoJo JoJo-C JoJo Joker Joker Joker 2 Joker 2 Joker-01 Joker 2 Joker-1602 Joker-1602 Joshi Joshi Joshi-B Joshi Joshua Joshua Julia Julia-1000 Julia-1000 Julia-1000 Julia-1027 Julia-1000 13TH-B 13TH-C Jump Jump Jump 4 Joy Sistor (see: Sistor-J4J) Jump.466 Jump Bloody! Jeff Junior Junior Junkie Junkie Just.398 Just.398 JVT1 JVT1-B PZPAPN Micropox K-4B K-4B K-4C K-4C K-Hate K-Hate Kalah Kalah Kalah-499 Kalah Kali-4 Kali-4 Kamasya Murphy Kamikaze Kamikazi Kamikazi Kamikazi Kang Yong Karin Karin Karlik Karlik Kbug Keeper Keeper Keeper.Acid Keeper Keeper.Enemy Enemy Keme Kemerovo Kemerov Kemerovo Kemerovo Kemerovo Kemerovo-B Kemerovo Kemerovo-C Kemerovo Kennedy Kernel Seventh Son Kersplat Bug-914 Bug-1596 Bug-1720 Bug-1724 Keybug Magician Keydrop Keydrop Keydrop Dropper Keydrop KeyKap KeyKap KeyKap.1074 KeyKap KeyKap.1077 KeyKap Keypress Keypress Keypress-1232X Keypress Keypress-1238 Keypress Keypress-1238B Keypress Keypress-1238C Keypress Keypress-1268 Keypress Keypress.2728 Keypress Keypress-B Keypress Keypress-Chaos Keypress Keypress-E Keypress Keypress-Freddy Soft Keypress Keypress-UFO Keypress Keypress-Viring Keypress KEZB Fingers Khobar Fairz Kiev Kiev 483 Kiev 483 Kiev 483 Kiev 2049 Kiev 2049 Kinison Kinnison-734 Kipa Kipa Kiwi Kiwi-550 Kiwi-550 Kiwi-550 Klaeren Klaeren Klaw Nygus Klepavka Klepavka KLF-356 KLF-356 Kode4 Kode4 Kode4-129 Kode4 Kode4-399 Kode4 Kode4-B Kode4 Kohntark Kohntark Koko Koko Koko.1783 Koko Korea Korea Kradee 1.0 Fish Kremikovtzi Kremikovtzi Krivmous Krivmous Krivmous-B Krivmous Kthulhu Kthulhu Kuang Kuang Ku-448 Kuku-448 Kubla Kahn Kukac Turbo Kukac-2 Turbo Kuku-448 Kuku-448 Kuzmitch PZPAPN Label Label Lamer Mosquito Lancs Lancs Lancs-5476 Lancs Lancs-5882 Lancs Lancs-7376 Lancs Lancspoly Lancs Lao Duong Loa Duong Larry Larry LastDirSect NoInt Late Night Late Night Laufwerk Laufwerk Lavi Dirty Lazy Lazy Lazy-2 Lazy LBC Korea LCT-599 LCT-762 LowerCase Leapfrog Leech Leech Leech2 Leech Legalize Legalize Lehigh Lehigh Lehigh University Lehigh Lehigh-2 Lehigh Lehigh-B Lehigh Lehigh-D Lehigh Leningrad Leningrad II Leningrad II Leprosy Leprosy Leprosy 1.00 Leprosy Leprosy-3 Leprosy (see Leprosy-C) Leprosy-5600 Leprosy Leprosy-664A Leprosy Leprosy-B Leprosy Leprosy-C Leprosy Leprosy-D Leprosy Leprosy-FVHS Leprosy Leprosy.Wannabe Leprosy Lession Tormentor-205 Lession-1 Tormentor-205 Lession-2 Tormentor-205 Lession-3 Tormentor-205 Lib1172 Liberty-1172 Liberty Liberty Liberty.2867 Liberty-2 Liberty-2 Liberty-2 Liberty-2A Liberty-2 Liberty-2B Liberty-2 Liberty-2C Liberty-2 Liberty-1172 Liberty-1172 Liberty-B Liberty Liberty-C Liberty Liberty-D Liberty Liberty-E Liberty Liberty-F Liberty Liberty-G Liberty Liberty-H Liberty Liberty-I Liberty Liberty-J Liberty Libin 1575 (see: 1575-Libin) Lima Pirate Linda Lou HLLS Lippi Lippi-286 Lippi-286 Lippi-286 Liquid Lisbon Lisbon Lisbon-B Lisbon Lisbon-B2 Lisbon Literak Literak Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Br Little Girl Little Girl Little Girl 2.0 Little Girl Little Girl 3.0 Little Girl Little Pieces Little Pieces Little Red Little Red Little-139 Little-139 Live Death V800 Live Death 3 Evil Lixo Nuke Tormentor Lixo Nuke Dropper Tormentor Lo Tek Lo Tek Loa Duong Loa Duong Locker Murphy Lockjaw Civil War (see: Civil War-Lockjaw) Lockjaw.499 Civil War Lockjaw.507 Civil War Locks Malaise (Malaise-524) LockUp LockUp Lockup 3.0 Lockup 3.0 LockUp-B LockUp Loki Loki Loki-354 Loki Loki-973 Loki Loki-1234 Loki Loki-1237 Loki Lokjaw Lokjaw Lokjaw-Drei Lokjaw Lokjaw-Zwei Lokjaw Grog 3.1 Lord Zero NPox (see: NPox.372) Lord-933 Lord-933 Los-693 Los-693 Love Bink LoveChild-2710 LoveChild-2710 LowerCase LowerCase LowerCase-B LowerCase Lozinsky Lozinsky Lozinsky-1018 Lozinsky Lozinsky-1023B Lozinsky LPT Off LPT Off Luca-309 Luca-309 Lucifer Lucifer Lucky7 Lucky7 Lurve Lurve LV 1.2 LV 1.2 Lycee Lycee Lycee.944 Lycee Lycee-1788 Lycee Lycee-1832 Lycee Lycee-1888 Lycee Lycee-1975 Lycee Lyceum Lycee Lyceum.1901 Lycee Lythyum Lythyum Lythyum-B Lythyum LZ-2 LZRQ LZRQ PZPAPN M-128 Micro 128 M.I.R. M.I.R. Maaike Maaike Maaike.164 Maaike Maaike.250 Maaike Maaike.757 Maaike Macabi Yafo Macedonia Macedonia MacGyver MacGyver MacGyver 2.2 MacGyver Made Madismo Madismo Magician Magician Magnitogorsk 2560 Magnitogorsk 2048 Magnitogorsk 2048 Magnito-3000 2560 Magnum 2560 Major > (see: .Major Malaga Malaga Malaga-B Malaga Malaise Malaise Malaise-524 Malaise Malaise-1743 Malaise Malign Malign Malign-575 Malign Malign-630 Malign Malmsey Malmsey Malmsey 2 Malmsey Malmsey 3 Beta Malmsey Maltese Maltese Amoeba Maltese Amoeba Maltese Amoeba Maltese Amoeba-B Maltese Amoeba Mannequin Mannequin Manola Manola ManOWar Dark Lord Manta Manta Manuel Manola Manuel.B Manola Marauder Marauder March 25th March 25th Mardi Bros Mardi Bros Marijuana Mark ][ Mark II Mark II Mark II Marked-X Marked-X Marl Marl Marzia Marzia Marzia.N Marzia Math Test Matura Matura Matura 92 Matura Max.347 Maxwell-498 Maxwell-499 Mayak Mayak Mayak-2370 Mayak Mayberry Mayberry Mayberry.402 Mayberry Mayberry.409 Mayberry Mayberry.475 Mayberry Mayberry.496 Mayberry Mayberry.502 Mayberry Mayberry.609 Mayberry Mayberry.687 Mayberry Mayberry.732 Mayberry Mayberry.747 Mayberry Mayberry.758 Mayberry Mayberry.828 Mayberry Mayberry.Dementia Mayberry Mazatlan Alameda McYellow McWhale McWhale-1022 Medical Medical Meditation Meditation Meditation-B Meditation Lapse Lapse Lapse-323 Lapse Lapse-375 Lapse Mendoza Mercenary Mercenary Mercury Mercy Mercy Merde-5 Loki (see: Loki-354) Merde-6 Loki Merritt Alameda Merry Xmas Merry Xmas Messina Messy Bomber Meta-2048 Meta-2048 Metal Thunder Akuku Metallica II Metallica II Mexican Mud Mexican Mud Mface Multi-Face MG-2 MG-3 MG-3B MGTU MGTU Mich II Mich II Michaelangelo Michelangelo Michelangelo Michelangelo Michelangelo II Mich II Micro 128 Micro 128 Micro Cop Queens Microbes Microbes Micropox Micropox MicroElephant MicroElephant Beta MicroElephant V4 CSL MicroElephant V5 CSL Midnight Serial Killer Blaze Migram Murphy Miky Miky Miky-2390 Miky Mila Grog 3.1 Milano Milano Milena Milena Miles Milous Cadkill Mimic-Den Zuk Mimic- Mindless Mindless MindRiot MindRiot MindRiot-B MindRiot Ming Ming Ming.1017 Ming Mini Mini-45 Mini-35 Mini-45 Mini-44 Mini-45 Mini-45 Mini-45 Mini-46 Mini-45 Mini-97 Mini-45 Mini-99 Mini-45 Minimal Mini-45 MiniMax MiniMax Minimite Minimite Ministry Ministry Minnow ZeroHunt Minsk Ghost Minsk Ghost M.I.R. Mirage Mirage Mirror Mirror Mistake Typo Mithrandir Mithrandir Mithrandir I Mithrandir Mithrandir III LockUp Mithrandir III-B Mithrandir MIX1 Mix1 MIX2 Mix2 MIX/1 Mix1 Mix1 Mix1 Mix1-1636 Mix1 Mix1-B Mix1 Mix2 Mix2 MLP-1321 Cybercide MLTI Red Diavolyata MMIR MMIR MMIR.Extasy MMIR MMIR.In MMIR MMIR.Moonlite MMIR MMIR.Ravage MMIR Moctezuma Moctezumas Revenge Moctezumas Moctezumas Revenge Moctezumas Revenge Moctezumas Revenge Moctezumas Revenge 2 Moctezumas Revenge Yafo Mohova Mohova Mohova.659 Mohova Monday Black Monday Monika Monika-686 Monika-686 Monika-686 Monkey Monkey Mono Mono Monxla Monxla Monxla B Monxla B Moonlite MMIR Mordor Mordor.1110 Mordor.538 Mordor.1110 Mordor.1110 Mordor.1110 More-649 More-649 Morgoth Deicide Mormorio Grog 3.1 Mosquito Mosquito Whale Mozart Invader MPS 4.01 MPS 1.1 MPS 1.1 MPS 3.1 MPS 3.1 MPS 3.2 MPS 3.2 MPS 3.2-B MPS 3.2 MPS 4.01 MPS 4.01 MPS II MPS II-754 MPS II-754 MPS II-754 MPS-OPC 1.1 MPS 1.1 MPS-OPC 3.1 MPS 3.1 MPS-OPC 3.2 MPS 3.2 MPS-OPC 4.01 MPS 4.01 MPS-OPC II MPS II-754 Mr. D Mr. D Mr. G Mr. G MS-748 Pixel MShark MShark MShark-378 MShark Blaze MSTU MSTU MSTU-1536 MSTU MSTU-531 MSTU MSTU-551 MSTU DAME MTE Spawn DAME MTE Spawn 2 DAME MuBark Keypress (see: Keypress-1268) Mudshark Mugshot Mugshot Mule Mule Multi Multi-123 Multi 1.1 Multi 1.1 Multi-2 Sticky Multi-123 Multi-123 Multi-Face Multi-Face Multi Child Multi Child Multi Child-104 Multi Child Multi Child-110 Multi Child Mumcu Ugur Mummy Mummy Mummy 1.0 Mummy Mummy 1.2 Mummy Mummy 2.1 Mummy Mummy 2.1B Mummy Mummy 2.1C Mummy Munich Munich Murphy Murphy Murphy-1 Murphy Murphy-2 Murphy Murphy-3 Murphy Murphy-4 Murphy Music MusicBug Music Bug MusicBug Music Oropax MusicBug MusicBug Musician Oropax Mutagen Mutagen Mutagen.Agent I Mutagen Mutagen.Agent III Mutagen Mutagen.Garden Mutagen Mutant 123 Mutant Mutant 127 Mutant Mutant 128 Mutant Mutant Mutant Mutating Rocko Rocko Mutation Mutation Mutation Mutation MVF-1954 MVF-1954B MVF-1954C MX-335 MX-335 My Child My Child Mystic-377 Mystic-377 Mystic-379 Mystic-377 PZPAPN Nagytud Turbo Nanite Nanite Napolean Complex Narcosis Narcosis Natas Natas Natas.4744 Natas Natas.4746 Natas Naught-865 Naught-865 Navigator Civil War (See: Civil War-282) Nazgul Nazgul NaziPhobia NaziPhobia NCU LI NCU LI Necro Skull Necro Fear Necro Fear Necro Shadow Necro Shadow Necro Shadow-B Necro Shadow Necrosoft Necrosoft Dementia Necrosoft Dementia Necrosoft Dementia Necrosoft Dementia-B Necrosoft Dementia Necrop Cracker Jack Bios Nemesis NeverMind NeverMind New Generation New New Years -New Years) New Zealand NewBug Anti Newcom Newcom News Flash Leprosy Neznamy Explosion NGV-1376 NGV-Cousin It NGV-Gomez NGV-Morticia NGV-Lurch NGV-Pugsley NGV-Thing NGV-Uncle Fester NGV NGV-Wednesday Nibbles Timid (see: Timid-526) NightCrawler 2.0 NightCrawler 3.0 Leprosy Nina Nina Nina.D Nina Nines Nines Nines-706 Nines Nines-776 Nines Ninja Ninja Nipper Brain Nirvana No Frills No Frills No Frills 1.01 No Frills No Frills 2.0 No Frills No Frills 3.0 No Frills No Frills-1358 No Frills No God No Grazie Cossiga No Wednesday NoBock NoBock Nocciola Grog 3.1 NoInt NoInt Nomen Nomenklatura Nomenclature Nomenklatura Nomenklatura Nomenklatura Noon Beep Nops.b Not-586 Not-586 Nothing Do-Nothing Nov 17 Nov 17-768 Nov 17-880 Nov 17-B 17th-B Nowhere Man Nowhere Man Nowhere Man 1.9 Nowhere Man Nowhere Man 2.0 Nowhere Man NPox NPox NPox 2.0 NPox NPox 2.1 NPox NPox.372 NPox NR-481 NR-481 NTit NTit NTit.1254 NTit NTit.1578 NTit NTKC NTKC Nu Way Sticky Nuke Tormentor Null Null Set Null Set Null Set Null-178 Null-178 Number 1 Number One Number 6 Number 6 Number of the Beast Number One Number One Number One-Argentina Number One Number One-B Number One Nygus Nygus Nygus-Klaw Nygus Nympho 1.0 Nympho 1.0 Nympho Mitosis Nympho 1.0 Nympho.230 Nympho 1.0 PZPAPN Off Offspring Offspring Offspring v.05 Offspring Offspring v.07 Offspring Offspring v.81 Offspring Ogre MKiller Ohio Ohio Oi Dudley Oi Dudley Old Yankee Yankee 2 Oliver Outland Olympic Omega Reset OMud OMud-512 Ondra Ondra Ondra-B Ondra One Half One Half One Half.3544 One Half One Half.3577 One Half One In Eight One In Ten Icelandic One In Two Icelandic (see: Saratoga) One More Thing Ont-730 Ontario 730 Ontario Ontario Ontario 730 Ontario 730 Ontario II 1024 SBC Ontario III Ontario III Oracle Golgi Oropax Oropax Oropax-B Oropax Oropax-C Oropax Oropax-D Oropax Oscar Osiris Osiris Otto-415 Otto6 Otto6 Otto6 Oulu 1008 Outland Outland Over-4032 Over-4032 OW-37 OW-40 OW-42 OW-42B OW-64 OW-Trident Oxana Oxana Oxana.1719 Oxana Ozzy PZPAPN P-45 Polish-45 Evil Phoenix PhoenixD Proud P529 Polish 529 Page Page-B Pakistani Brain Pakistani Brain Brain Palette Zero Bug Paola.1110 Mordor.1110 Paradise Under 7 Paranoimia Parasite Parasite Parasite 2 Parasite Parasite 2B Parasite Paris Paris Parity Parity Parity Parity Park ESS Particle Man Particle Man Particle Man 2 Particle Man Pas-5220 Pascal-5220 Pascal-4032 Over-4032 Pascal-4260 Pascal-4260 Pascal-5220 Pascal-5220 Path Path Pathhunt Pathhunt Patient Patient Patsy RIP-699 Paturuzu Paturuzu Paturuzu.931 Paturuzu Paturuzu.1024 Paturuzu Pay Rise Pay Rise Pay Rise-874 Pay Rise Pay Rise-897 Pay Rise Payday ,Bandit PCBB PC Flu PC Flu PC Flu-2 PC Flu-2 PC Flu-2B PC Flu-2 PC Flu-2D PC Flu-2 PC Flu-2E PC Flu-2 PC Flu-2F PC Flu-2 PC Weevil DAME PCBB PCBB PCBB PCBB PCBB-11 PCBB PCBB-3 PCBB PCBB-3B PCBB PCBB-1141 PCBB PCBB-3072 PCBB PCBB-5 PCBB PCBB-5B PCBB PCVRSDS Peace Man Peace Man Keypress Pearl Harbor Pegg Pegg-833 Pegg-833 Pegg-833 Peking Alameda Pentagon Pentagon Peni YAM-3599 Penza Penza Penza-1210 Penza Perfume Perfume Perfume-2 Sorry Pest Murphy (see Italian Pest) Pfish Mosquito Phalcon Beta Phalcon.894 Phalcon.894 Phantom Phantom Phenome Phoenix Phoenix Phoenix 2000 Phoenix 2000 PhoenixD PhoenixD Piazzolla Piazzolla Pieces Little Pieces Pif Paf B v1.0 DoDo Pig-B DoDo Pila Pila Ping Pong Ping Pong Ping Pong-B Ping Pong Ping Pong-C Ping Pong Pinky Pinky Pinky.Clyde Pinky Pinky Ghost Pinky Pinworm Pinworm Pirate Pirate Pirate 1344 Pirate 1344 Pisello Pisello Pisello-B Pisello Pitch Pitch Pitch-B Pitch Piter Polish 529 Piter-1228 Piter-1228 Piter2 Polish 529 Pixel Pixel Pixel 2 Pixel Pixel-257 Pixel Pixel-275 Pixel Pixel-277 Pixel Pixel-283 Pixel Pixel-295 Pixel Pixel-297 Pixel Pixel-299 Pixel Pixel-342 Pixel Pixel-739 Pixel Pixel-740 Silly-365 Pixel-779 Pixel Pixel-837 Pixel Pixel-847 Pixel Pixel-847B Pixel Pixel-850 Pixel Pixel-850 Dropper Pixel Pixel-852 Pixel Pixel-854 Pixel Pixel 877 Silly-365 Pixel-897 Hell Pixel-899 Hell Pixel-899B Hell Pixel-905 Hell Pixel.1268 Pixel Pixie Pixie Pixie 1.0 Pixie Pixie 1.0B Pixie Patient Plague Leprosy (see: The Plague) Plaice Sistor Plastique Plastique Plastique 1 Plastique Plastique 2 Plastique-B Plastique 4.51 Plastique Plastique 5.21 Plastique-B Plastique Invader Plastique-B Plastique-B Platinum Mummy Platov Platov Play Tetris Play Tetris Plov Plovdiv 1.3 Plovdiv 1.1 Plovdiv 1.1 Plovdiv 1.3 Plovdiv 1.3 Plovdiv 1.3B Plovdiv 1.3 Plumbum Plumbum Plumbum-A Plumbum Plumbum-B Plumbum Plumbum-C Plumbum Plumbum-D Plumbum Plumbum-E Plumbum Plumbum-F Plumbum Plumbum-M1 Plumbum Plumbum-M2 Plumbum Plutto Plutto Poem Poem Poet Poet Pogue Pogue Killer Dot Killer Poison Poison Poison 1 Poison Poison 2 Poison Poison 3 Poison Pojer Pojer Pojer-1935 Pojer Pojer-1941 Pojer Pojer-1949 Pojer Polifemo Polifemo Polimer Polimer Polimer Tapeworm Polimer Polish 217 Polish 217 Polish 217 B Polish 217 Polish 217 C Polish 217 Polish 457 Self Polish 529 Polish 529 Polish 529B Polish 529 Polish 550 Self Polish 583 Polish 583 Polish 961 Stone`90 Polish Stupid Polish 217 Polish Polish Polish Polish Polish Polish Polish Polish Polish Polish Polish-2 Turbo Polish-45 Polish-45 Polish-376 Polish-376 Polish-583 Polish 583 Poor Man Poor Man Porridge Porridge Portugal-500 Pixel Positron Positron Possessed Possessed Possessed 1.03A Possessed Possessed 1.03B Possessed Possessed 1.07 Possessed Possessed 1.07B Possessed Possessed 1.08 Possessed Possessed-2443 Possessed Possum Possum PPSP PPSP PPSP.1526 PPSP Prague Joker Shaker Prague.Blinker Blinker Pray ZK900 Praying Praying Praying.579 Praying Praying.587 Praying Predator Predator Predator-1072 Predator Predator-1148 Predator Predator-1154 Predator Predator-1195 Predator Pregnant Pregnant Press Press Pretoria Print Print Print Print Prime Prime Prime Evil Prime PrintMonster PrintMonster Prism Flip Pro-Choice Problem Problem Problem-734 Problem Problem-856 Problem Problem-863 Problem Profesor Saddam Protect Protecto Protecto Protecto Protecto-1157 Protecto Protecto-1196 Protecto Protecto-1323 Protecto Protecto-1355 Protecto Protecto-2535 CPSU-2535 Protipus Protipus Proto-T Civil War Proud Proud PRTSC Print Prudents 1210 .DeathBoy .Greetings .Powermen.717 .Walt.311 PS!KO PS!KO-1459 PS!KO-1687 PS!KO-1800 PSMPC-331 PSMPC-338 PSMPC-339 PSMPC-344 PSMPC-347 PSMPC-351 PSMPC-352 PSMPC-353 PSMPC-478 PSMPC-573 PSMPC-598 PSMPC-603 PSMPC-611 PSQR 1720 Psycho Psychogenius Psychogenius Psychogenius Psychogenius-B Psychogenius Psychosis Psychosis Public Grog 3.1 (See: Grog.800) Public Enemy Beast-N-Black Puerto Puke Puke-393 Puke-393 Puke-393 Punisher Pussy PV-81 PV-81 Python Python PZPAPN QD335 Striker #1 QFresh Friday 13th QQ-1513 Quadratic-986 Quake Quake Quake-O Queens Queens Queensland Queens Quest > (see: Dark Quest) Questo DAME Quiet Quiet Quick Quick Quirk Quirk Quit- Dutch 555 PZPAPN R-10 R-10 R-11 R-11 Rabid Avenger Radyum Radyum Radyum 2-707 Radyum Radyum-B Radyum Radyum-C Radyum Rael Rael Rage Rage Raistlin Flip Rajaat Rajaat Rajaat.287 Rajaat Rajaat.679 Rajaat Rajaat.700 Rajaat RAM RAM Random Random Rape-10 R-10 Rape-11 R-11 Raptor Raptor Rasek Rasek Rasek.1490 Rasek Rasek.1492 Rasek Rat-615 TechnoRat Rattle Rattle Raubkopi RaubKopie RaubKopie RaubKopie RaubKopie-FRD RaubKopie Ravage MMIR Raver Raver Razor Grog 3.1 (See: Grog.801) RCE-1049 Reaper Reaper Reaper Man Reaper (Patcher Pascal-5220 Recovery 382 Recovery Red Diavolyata Red Diavolyata Red Diavolyata B Red Diavolyata Red Team RedX Ambulance Car RedX-Any Ambulance Car RedStar Karin RefRef RefRef Refresh Reklama Reklama Relzfu Relzfu Repent Repent Reset Reset Revelation Revelation Revenge Revenge Attacker Revenge Attacker Revenge Attacker Reverse.A Reverse.A Rider Rider Rider.577 Rider Rigor Mortis Riihi Riihi RIP-699 RIP-699 RIP-699 Ritzen Civil War Rocko RMIT Leprosy RNA-7408 RNA2 Rocko Rocko Rocko-B Rocko Roguey Roguey ROM Bios Rosen Rosen Rostov RPKS Den Zuk RPVS RPVS RPVS-B RPVS RSP-1876 RSP-1876 RTL4 RTL4 Rubbit Rubbit Rubbit.681 Rubbit Rubbit.1018 Rubbit Rubbit.2060 Rubbit Rubbit.3839 Rubbit Russ-1075 Crash Russian Russian Mirror Beeper Russian Mutant Rust Alfa Ryazan Ryazan Rybka Rybka PZPAPN S-847 Pixel Sabbath Sabbath Sad-307 Sadam Saddam Saddam Saddam Sadist Sadist SamSoft Keypress SamSoft-B Keypress San Diego Sandwich Sandwich Sara DAME Saratoga Icelandic Saratoga 2 Icelandic Satan-B Saturday 14th Saturday The 14TH Saturday The 14th Saturday The 14TH Satyricon Satyricon Satyricon.348 Satyricon Sayha Watpu Sayha Watpu 1024 SBC Scarey Schrunch Schrunch-420 Schrunch-420 Scorpio Scorpio Scott's Scott's Valley Scott's Valley Scott's Valley Scramble Scramble Scramble.1253 Scramble Scream Scream Scream 1B Scream Scream 2 Scream Scream 2-696 Scream Scream 2-732 Scream Scream 2B Scream Scream 2C Scream Scream-650 Scream Scream2 Scream Screaming Fist Scream Screaming Fist 2 Scream Scribble Leprosy Scroll Scroll Scythe Scythe SD-123 Multi-123 Sdir Aussie Dir SeaCat SeaCat Search-1000 Search-1000 Search-377 Search-1000 Seat Seat Seat.2389 Seat Secret Service Shhs Self Self Self-457 Self Self-550 Self Sempre Grog 3.1 (See: Grog.377) Semtex Semtex Semtex-B Semtex Semtex-C Semtex Semtex-D Semtex Seoul Alameda Seneca-B Seneca-B Sentinel Sentinel Sentinel-3 Sentinel Sentinel-5 Sentinel Sept 18 Italian 803 Serena Serena Servant Trident (See: Trident-444) Seventh Son Seventh Son Seventh Son-284 Seventh Son Seventh Son-332 Seventh Son Seventh Son-350 Seventh Son Seventh Son-426 Seventh Son Seventh Son-473 Seventh Son Seventh Son.473.B Seventh Son Seventh Son-Kernel Seventh Son Sex Revolution V1.1 Sex Revolution V2.0 Alameda Shhs Shadow Shadow , Necro Shadow Shadow-2 Shadow Shadow Shadow Shake Shake Shake Dropper Shake Shaker Shaker Shaman Shaman Shanghai Shanghai Shhs Shhs Shield Shield Shifter Shifter Shiny Happy Shiny Happy Shirley Shirley Shizol Shizol Shock Therapy Shock Therapy Shoe_ Ashar Shoe_ Ashar-B Short-45 Mini-45 Sicilian Mob Sicilian Mob Sigalit Cansu Signs Signs Signs of Life Signs Silence Silence Silent Killer Silly Silly Silly Silly Silly-365 Silly-365 SillyOR SillyOR SillyOR.76 SillyOR SillyOR.88 SillyOR SillyOR.94 SillyOR SillyOR.97 SillyOR SillyOR.101 SillyOR SiloDeath Silver Dollar Silver Dollar Silver Dollar-2A Silver Dollar Silver Dollar-2B Silver Dollar Silver Dollar-2D Silver Dollar Silver Dollar-2F Silver Dollar Silver Dollar-8101 Silver Dollar Silver Dollar-SHJH Silver Dollar Silver Surfer Leprosy Simple Simple Simple Minds Simple Minds Sinep Sinep Sistor Siskin Siskin Siskin-948 Siskin Siskin-1017 Siskin Siskin-Goodbye Siskin Sistor Sistor Sistor-1129 Sistor Sistor-2225 Sistor Sistor-2380 Sistor Sistor-2630 Sistor Sistor-J4J Sistor Sistor-J4J Alpha Sistor Tolbuhin Tolbuhin Skater Skater Skater.664 Skater Skater-977 Skater Skater-1021 Skater Skeleton Skew Skew-469 Skew-469 Skew-469 Skid Row Skid Row Skid Row.418 Skid Row Skid Row.432 Skid Row Skism Skism Skism Skism Skism Skism-1 Skism-808 Skism Skynet Skynet Skynet.1809 Skynet Simulati Simulati Skull Skull Skull Skull Slayer Slayer Slayer Slayer Slayer-A Slayer Slayer-B Slayer Slayer-C Slayer Slayer-D Slayer Slayer-E Slayer Sledge Hammer Invader Sleeper Sleepwalker Sleepwalker Slime Slime Slovak Slovak Slovak 1.00 Slovak Slovak 2.00 Slovak Slovak 2.02 Slovak Slovak 3.00 Slovak Slovak-4 Slovak Slovak-4B Slovak Slovakia Slovak Slow Slow Slow II Slow Slow III Slow Slow IV Slow Slow-2131 Scott's Valley Slowdown Slow Slub Slub Sluknov Sluknov Smack Murphy Small ARCV Small ARCV Small Small Small-38 Small-38 Small-46 Small-72 Small-115 Small-115 Small-145 Small-145 Small-178 Small-178 Smaug Smaug Smiley Smiley Smiley Worm Curse Smithsonian Smurf (OW-40) SNA.393 Sneaker Snow Mix1 Sofia Term Sofia Term Sofia Term.839 Sofia Term Sofia Term.887 Sofia Term Solano Solano 2000 Solano 2000 Solano 2000 Solono B Solano 2000 Solono D Solano 2000 Solomon 1605 thing thing thing-658 thing Sonik Youth Sonik Youth Sorlec Sorlec Sorlec 3 Sorlec Sorlec 4 Sorlec Sorlec 5 Sorlec Sorlec 6 Sorlec Sorry Sorry Soupy Soupy Soupy-Death Soupy South African Friday The 13th South African 350 Friday The 13th Sov-545 Sov-602 Soy Un Spanish Spanish Spanish Fools Spanish Fools Spanish JB Spanish Telecom-2 Telecom Anti-Tel Spanz Spanz Sparkle Sparkle Sparse Sparse Sparse-B Sparse Spawn KeyKap Spider Reverse.A Split Split Split.250 Split Split Second Split Second Split Second.1135 Split Second Split Second.1149 Split Second Spring Spring Spring-640 Spring Spring-768 Spring Spyer Spyer Spyer-B Spyer Spyer-C Spyer Squawk Squawk Squeaker Squeaker Squisher Squisher SSI 1.0 Wasp SSI 2.01 Wasp St Leos Keypress St. Remi Murphy (see Erasmus) Staf Staf Staff Staf Stahl Stahl Stahlplatte Stahl Stanco Stanco StarDot StarDot 600 StarDot 801 StarDot 600 StarDot 600 StarDot 789 StarDot 789 StarDot 801 StarDot 801 Starfish Ice 9 (See: Ice 9.639.Starfish) Stasi Stasi Stasi-1728 Stasi Stelboo Sterculius Sterculius Sterculius I Sterculius Sterculius II Sterculius Sterculius.240 Sterculius Sterculius.280 Sterculius Sterculius.440 Sterculius Sticky Sticky Stigmata Stink StinkFoot Stink 2 Timid StinkFoot StinkFoot StinkFoot-1273 StinkFoot StinkFoot-2B StinkFoot Stone`90 Stone`90 Stone-90 Stone`90 NoInt -AT Love -Collor -Mexican Mutation Storm-1163 Storm-1163 Storyteller Storyteller Stranger Enemy Striker #1 Striker #1 Student-776 Student-776 Stunning Gippo (Gippo.Stunning) Stupid Do-Nothing Stupid-1355 Stupid-1355 Sub-Zero Sub-Zero B Sub-Zero C Subliminal Solano 2000 Subliminal 1.10 Solano 2000 Sucker Suicidal Suicidal Suicide Sunday Sunday Sunday-2 Sunday-2 Sunday-B Sunday Sunday-C Sunday Sunday.Satan Sunday Sunday-UNAM Sunday Sunday Death Sundevil Sundevil Sundevil.762 Sundevil Sunrise Gippo Suomi 1008 SuperHacker Jerk Surfer Leprosy Suriv 1.01 Suriv 1.01 Suriv 2.01 Suriv 2.01 Suriv 2.01B Suriv 2.01 Suriv 3.00 Suriv 3.00 Suriv 4.02 Suriv 4.02 Suriv A Suriv 1.01 Suriv 2.01 Suriv B Suriv 3.00 Suriv01 Suriv 1.01 Suriv02 Suriv 2.01 Suriv03 Suriv 3.00 Surrender Surrender Susan Susan Susenka Dejmi SVC 3.1 SVC 3.1 SVC 3.1-CHR SVC 3.1 SVC 4.0 SVC 4.0 SVC 4.0-1740 SVC 4.0 SVC 5.0 SVC 5.0 SVC 5.0B SVC 5.0 SVC 5.0C SVC 5.0 SVC 5.0D SVC 5.0 SVC 6.0 SVC 6.0 SVC 6.0-4677 SVC 6.0 SVC 6.01 SVC 6.0 SVC 6.01-B SVC 6.0 SVC V3.1 SVC 3.1 SVC V4.00 SVC 4.0 SVC V5.0 SVC 5.0 SVC-1740 SVC 4.0 SVC-2936 SVC-2936 SVC.3241 SVC.3241 Sverdlov Sverdlov Sverdlov-1064 SVC 3.1 Sverdlov-B Sverdlov SVir SVir SVir_0 SVir SVir-A SVir SVir-B SVir Sayha Watpu Swami Murphy Swank SwanSong (see: Zeppelin) Swap Swap Swedish Swedish Boys Swedish 709 Finnish-709 Swedish Boys Swedish Boys Swedish Boys.Headace.441 Swedish Boys Swedish Disaster Swedish Disaster Swiss 143 Swiss 143 Swiss 1813 Swiss Exebug Swiss Phoenix Swiss Phoenix Sword Sword Sword-B Sword Plovdiv 1.1 Sybille Sybille Sybille.853 Sybille Sylvia Sylvia Sylvia 2 Sylvia Sylwia Sylwia Synergy Synergy Day10 Syrian Syrian Syrian.241 Syrian Syrian.412 Syrian SysLock SysLock Icelandic Systers Of Mercy Mercy Sze.314 Sze.351 PZPAPN T-1000 T-1000 T-Rex Tabulero Tabulero Tabulero 2 Tabulero Tabulero-B Tabulero Tack Tack Tack-411 Tack Tack-477 Tack Tai-Pan Tai-Pan Taiwan Taiwan Taiwan 2 Taiwan Taiwan 3 Taiwan 3 Taiwan 4 Taiwan 4 Taiwan-B Taiwan Tajfun Tajfun Tajfun 1.0 Tajfun Tajfun.250 Tajfun Talentless Talentless Talentless Jerk Jerk TalkingHeads TalkingHeads Tamanna Tamanna Tamper Tamper Tankard Tankard Tankard V2.0 Tankard Tankard V3.01 Tankard Tannenbaum Christmas Tree Tao Cheng Tao Cheng Taselhoff Tatou Tatou Taunt AIDS Taurus Taurus Traceback TBug-634 TBug-634 Tchantches Tchantches TechnoRat TechnoRat Tecla Barrotes (Barrotes.840) Tel Aviv 1605 Ten Ten + (see: 1415) Telecom Telecom Anti-Tel Telecom Telecom Anti-Tel Telefonica Telecom Anti-Tel +-1514 +-1514B Terminator Terminator Terminator-2294 Terminator-2294 Terminator-3549 Terminator-3549 Dark Lord Tequila Tequila Test 441 Tester Tester TestVir Tester Test B V1.4 Tester ksgiving 1253 The Click The Click The Plague Leprosy Thimble Thimble Thirty Three Thirty Three Thor Thriller Green Caterpillar-1989 Thursday The 12th Tim 3 Tim 4 Tim 5 Monxla Monxla B mark 1 mark 2 Timid Timid Timid-290 Timid Timid-297 Timid Timid.300 Timid Timid-305 Timid Timid-371 Timid Timid-382 Timid Timid-431 Timid Timid-526 Timid Timid-557 Timid Timid-LM Timid Timid-Orig Timid Timor Timor Di-94 Di-101 Di-108 Di-110 ^.Fred Hunter Squisher Mutant Mutant Mutant Dutch Dutch Dutch Mutant Micro 128 -143B Tired Alfa Tiso Tiso Tiso.1279 Tiso TMTM TMTM Tobacco Tobacco Tobacco-B Tobacco Today Today Todor Todor Todor-B Todor Tokyo Tokyo Tolbuhin Tolbuhin Tolbuhin-626 Tolbuhin Tolbuhin-992 Tolbuhin Tolbuhin-1004 Tolbuhin Tolbuhin-1147 Tolbuhin Tomato Tomato Tongue Tony Tony Tony-203 Tony Tony Tony Tony (Dropper Tony Tonya Skater Tonya 2 Skater Toothless Topler Leech Topo Mosquito Tormentor Tormentor Topsy-900 Badsec Tormentor-205 Tormentor-205 Tormentor-263 Tormentor-205 Tormentor-358 Tormentor-205 Tormentor-360 Tormentor-205 Tormentor-1040 Tormentor Tormentor-1072 Tormentor Tormentor-1072B Tormentor Tormentor-1072C Tormentor Tormentor-1072D Tormentor Totoro Totoro Totoro.B Totoro Toxic Toxic Toys TP04VIR Vacsina TP05VIR Vacsina TP06VIR Vacsina TP16VIR Vacsina TP23VIR Vacsina TP24VIR Vacsina TP25VIR Vacsina TP33VIR Yankee Doodle TP34VIR Yankee Doodle TP38VIR Yankee Doodle TP41VIR Yankee Doodle TP42VIR Yankee Doodle TP44VIR Yankee Doodle TP45VIR Yankee Doodle TP46VIR Yankee Doodle TPWorm TPWorm Traceback Traceback Traceback 3029 Traceback 3029 Traceback II Traceback II Traceback II-B Traceback II Traceback-4 Traceback 3029 Traceback-B Traceback Traceback-B2 Traceback Travel V2000 Traveling Jack Traveller Traveller Traveller-B Traveller Traveller-C Traveller Traveller-C2 Traveller Traveller-C3 Traveller TrekWar Clonewar Tremor Tremor Trident Trident Trident 90210 Trident Trident.439 Trident Trident-444 Trident Trident.454 Trident Trident-611 Trident Trident.914 Trident Trigger Trigger Triple Trivial Mini-45 Trivial-Banana Banana Trivial-Blood Lust Blood Lust Troi Troi Troi-2 Troi Troi-2B Troi Troi-2C Troi Trojector Trojector-B Trumpery Grog 3.1 (see: Grog.202) TSoft TSoft TSoft-547 TSoft TSoft-598 TSoft Tu-482 Tu-482 Tuesday Tula Tula Tula-419 Tula Tula-593 Tula Tula-635 Tula Tula-1480 Tula Tumen V.5 Tumen Tumen V1.2 Tumen Tumen V1.3 Tumen Tumen V2.0 Tumen RPVS Turbo @ Turbo Turbo 448 Turbo Turbo Hamster Hamster Turbo Kukac Turbo Turbo Kukac 9.9 Turbo TurboSoft TSoft TurboSoft-547 TSoft TurboSoft-598 TSoft Turkey 1661 Turku Keypress Turn.557 Turn.557 Tver-308 Tver-308 Twer Twer-1000 Twin Twin-351 Twin Peaks Twin Peaks Twin-351 Twin-351 Twister Twister Twister.451 Twister Twister.863 Twister Twister.1015 Twister Twister.1767 Twister Two Minutes To Midnight TMTM Two Tigers Frere Jacques Typo Typo Typo Typo Typo Typo-712 Typo Typo-867B Typo Tyst Tyst PZPAPN Ucender UFA-1201 UFA-1201 Keypress Ugur Ugur UIUC Ashar UIUC Ashar Ultimation Ultimation Under 7 Under 7 Unesco UnExe UnExe Ungame Copyright Urfydus Urfydus Uruguay Uruguay Uruguay 3 Uruguay Uruguay 4 Uruguay Uruguay 5 Uruguay Uruguay 6 Uruguay Uruk-hai Uruk-hai Uruk-hai 300 Uruk-hai Uruk-hai 361 Uruk-hai V2100 Kemerovo Attention! Red Diavolyata SVC 4.0 2144-B SVC 5.0 Kemerovo Attention! PZPAPN 1253 V-10 V-1n V-11 V-1n V-1n V-1n V-123 Mutant V-127 Mutant V-1391 Big-2000 V-20 Gnose V-277 Pixel V-299 Pixel V-30 V-3n V-31 V-3n V-32 V-3n V-3n V-3n V-311 V-345 Pixel V-351 V351 V-370 Voronezh-370 V-388 V388 V-801 V801 V-847 Pixel V-847B Pixel V-852 Pixel V-Alert V-IVL110 Malaise V-Sign Cansu V08-15 Fingers V123 Multi-123 V200 Silly V217 Polish 217 V257 Kemerovo V270x V270x V337 V351 V351 V376 Polish-376 V388 V388 V415 V483 V483 V492 V516 V600 V605 V651 V651 V707 V711-2 V791 V801 V800 V800 V800M V800 V801 V801 V817 Italian 803 V920 DataLock V948 V1024 V1024 V1193 Copyright V1226 1226 V1226D 1226 V1226M 1226 V1277 Murphy V1302 Proud V1521 Murphy V1600 Happy New Year V1701New Evil V1701New-B Evil V1963 1963 V2000 V2000 V2000-B V2000 V2100 V2100 V2144 V2480 Crew-2480 V2P1 1260 V2P2 V2P2 V2P6 V2P6 V2P6-B V2P6 V2P6Z V2P6 Vacsina Vacsina Vampire Vampire VAN Soft Varicell Varicell Varisela Varicell VBasic 5120 VBasic-2 Slayer VComm VComm VComm.633 VComm VCL.551 VCL.587 VCL.Angel.436 VCL.Blue Moon VCL.Elena VCL.Noble VCL.Olympic VCL.Reptoid VCL-409 VCL-JP2 VCL-Windows VCL-YD2 VCL-YD2B VCS-Post Vengeance Parasite Vengeance-B Parasite Vengeance-C Parasite Vera Cruz Ping Pong Veronika Veronika VFSI VFSI VGA2CGA AIDS VHP-2 VHP2 VHP2 VHP2 VHP-348 VHP-353 VHP-367 VHP-435 VHP-547 Path VHP-623 VHP2 VHP-627 VHP2 VHP-757 VHP-776 Vicious Vicious Vicious.918 Vicious Victor Victor Video Mode Voronezh-Chemist Vien6 .Ambalama Monxla B IKV 528 Path Polish 583 -634 Re VComm -648E -726B Grither -Abacus -B 645 -Beta Boys -Beta Boys 730 -CDM.A -CDM.B -CDM.C -Dr Q -Feliz -Iraqui Iraqui Warrior -Kaszana -New Years -Refresh -Yam 92 -Yam 92B Vinchuca Vinchuca Vindicator Vindicator B2-969 Strain B Strain B4 Violetta Violetta Violetta-1024 Violetta Violite Violite Viper Viper Viperize Viperize Viperize-B Viperize VirDem VirDem VirDem 2 VirDem VirDem-792 VirDem-792 VirDem-833 VirDem VirDem-1542 VirDem-1542 Viring Keypress Construction Set VCS Friday 13th Viva Mexico Vivaldi Vivaldi Vivat Vivat VLamix VLamix VLamix-1 VLamix VMem VMem VMessiah Nowhere Man Voco Voice-1495 Voice-1495 Volkov Hellween Voodoo Voodoo Voronezh Voronezh Voronezh B Voronezh Voronezh-370 Voronezh-370 Voronezh-650 Voronezh-Chemist Voronezh-Chemist Voronezh-Chemist Vote Vote Vote-1000 Vote Vote-1004 Vote Vriest Vriest VS-2790 VS-2790 Vulner Weak VVF 3.4 VVF 3.4 VX-163 VX-163 PZPAPN W13-A W13-B W13-B2 W13-B3 W13-361 W13-377 W13-534B W13-534C W13-534D W13-534E W13-537 W13-Req Walkabout Walker Walker Walky Wally Wally Wanderer Wanderer War Dork Warchild Golgi (see: Golgi.886) Warez D00d Warez-1341 Warez-1341 Warlock Yankee Doodle Warning Warning Warrior Warrior Warrior 2 Warrior Warsaw Warsaw-850 Warsaw-850 Warsaw-850 Wasp Wasp Wasp.629 Wasp Wasp.909 Wasp Wave Wave Weak Weak Were Here Were Here Western Ukraine Western Ukraine Westwood Westwood Whale Whale Wharps Wharps Whisper Tai-Pan Whit LZRQ Who Cares Why Windows Swedish Boys Wien Wiggers Viper Wilbur Akuku Wilbur-B Akuku Wilbur-C Akuku Wilbur 2 Akuku Wilbur 3 Akuku Wild Cards Grog 3.1 (See: Grog.798) Wild Thing Wild Thing 2 Wild Thing 2 Wild Thing 2 Wild Thing-289 Wild Thing 2 istrover III istrover III WinVir WinVir Windmill Windmill Windmill Dropper Windmill Wirus Pascal-4260 Wisconsin Wisconsin Wishes Best Wishes Witch Witch Wizard.312 Wizard 3.0 Wizard 3.0 Wizard 3.0 Wolf Wolfman Wolfman Wolfman Wolfman 2 Wolfman Wonder Wonder Wonder-B Wonder Wonderful Wonderful Woodstock Grog 3.1 WordSwap WordSwap WordSwap-1069 WordSwap WordSwap-1085 WordSwap WordSwap-1387 WordSwap WordSwap-1503 WordSwap World Peace World Peace Worm-16850 Worm-16850 Worm-17690 Worm-17690 Wrzod Wrzod WVir WinVir WW-658 WW-658 WWT 01 WWT 02 WWT 02B WXYC WXYC WZ.495 PZPAPN X-1B X-3B X-Fungus Fungus Christmas Tree Xabaras Leprosy Xandu Xandu Tao Cheng Xpeh Xpeh Xpeh-3600 Xpeh Xpeh-3840 Xpeh Xpeh-4048 Xpeh Xpeh-B Xpeh XPH-1029 XPH-1100 XPH.DR&ET Xuxa Xuxa Xuxa-B Xuxa Xuxa-945 Anti-D Xuxa-1405 Xuxa Bljec PZPAPN Yafo Yafo Yale Alameda YAM-3599 YAM-3599 Yankee 2 Yankee 2 Yankee Doodle Yankee Doodle Yankee Doodle Dropper Slayer Yankee Doodle.Warlock Yankee Doodle Yankee Doodle-1150 Alfa Yankee Doodle-1202 Alfa Yankee Doodle-1905 Yankee Doodle Yankee Doodle-2189 Yankee Doodle Yankee Doodle-2505 Yankee Doodle Yankee Doodle-2973 Yankee Doodle Yankee Yankee 2 Yankee-go-Home Yankee 2 Yaunch 2559 YB.316 YB.Old Scribe YB.466 YB.Old Scribe YB.647 YB.Old Scribe YB.Old Scribe YB.Old Scribe YD Logon-2967 Yankee Doodle YD Logon-D Yankee Doodle YD Logon-E Yankee Doodle YD Logon-X Yankee Doodle Yeah Year Year Year-6545 Hell Youth Youth Youth.580 Youth Yukon Yukon PZPAPN Z The Whale Whale Zak2 Hellween Zaphod Zaphod Zaragosa Zaragosa Zeppelin Zero Zero Bug Zero Bug Zero Bug Zero Bug B Zero Bug Zero-Hunt ZeroHunt ZeroHunt ZeroHunt ZeroHunt B ZeroHunt Zero Slow Zeroto-O Australian 403 Zherkov Zherkov Zherkov-1882 Zherkov Zherkov-1940 Zherkov Zherkov-1958 Zherkov Zherkov-2435 Zherkov Zherkov-2968 Zherkov Zherkov-2970 Zherkov ZigZag ZigZag ZigZag.232 ZigZag ZipLoc ZMT-252 ZMT-262 ZMT-365 Zoid Zoid Zombie Zombie Zherkov ZK900 ZK900 ZK900-B ZK900 PZPAPN 0_thru_499 30 OW Define 35 OW Mini-45 (Mini-35) 37 OW (OW-37) 38 OW Small-38 40 OW (OW-40) 42 OW (OW-42 & OW-42B) 44 OW Mini-45 (Mini-44) 45 OW Mini-45 Polish-45 46 OW Mini-45 (Mini-46) (Small-46) 50 OW Mini-45 (Dust) 64 OW (OW-Trident) 67 OW (WWT 01) 72 OW (Small-72) 76 OW SillyOR (SillyOR.76) PV-81 83 OW Hacktic 88 OW SillyOR (SillyOR.88) 90 OW Hydra ^ (Hydra-8 Trojan) Hacktic (Hacktic 2) Di ( Di-94) 94 OW SillyOR (SillyOR.94) Mini-45 (Mini-97) 97 OW SillyOR (SillyOR.97) Mini-45 (Mini-99) 99 OW Itti (Itti-B) Di ( Di-101) 101 OW SillyOR (SillyOR.101) 102 OW Argentina-102 Multi Child AT144 (AT108) Di ( Di-108) African 109 Multi Child (Multi Child-110) Di ( Di-110) Dutch (Dutch .111) 113 OW V-1n (V-11) AT144 (AT114) Dutch (Dutch -115) Small-115 Dutch (Dutch -117) AT144 (AT118) AT144 (AT122) Dinky Multi-123 Mutant ^ (Mutant 123) Dutch (Dutch -124 & 124B) 124 - 125 OW WWT (WWT 02 & WWT 02B) Dutch (Dutch -126) Mutant ^ (Mutant 127) 127 OW ZigZag Micro 128 Mutant ^ (Mutant 128) 128 OW T-1000 Anto 129 OW Kode4 (Kode4-129) 130 OW Rosen Riihi 132 & More Rybka -133) -134) -138) Little-139 139 OW Banana AT144 (AT140) Australian (Australian -142) Australian (Australian -143) Swiss 143 -143 & -143B) AT144 Small-145 Australian (Australian -147) Exunt AT144 (AT149) Australian (Australian -150) Polish (Polish -150) 151 OW Yukon Guppy Australian -154) -156) Civil War (Civil War.158) JD (JD-158) Polish (Polish -158) -158) Ice 9 (Ice 9-159) -159) SeaCat -160) 161 OW Itti Australian (Australian -162) VX-163 164 OW Maaike Atomic 2 (Atomic.166) -167) 171 OW Toxic Polish (Polish -176) -177) 177 OW Today Null-178 Small-178 -180) (Who Cares) Gergana Minimite DOS-1 Medical (191) -198) Ice 9 (Ice 9-199) 200 OW Darth Vader (Darth-4 & Darth-5) Hastings Silly Tony 202 OW Grog 3.1 (Grog.202) Possum (203) Tony (Tony-203) Tormentor-205 205 OW 207 OW Simple Minds 208 OW I-B (BadGuy 2) Hates-213 Handi-215 Genesis Polish 217 CyberTech (CyberTech-222) Gergana (Gergana-222) Ice 9 (Ice 9-224) Genesis (Genesis.226) Polish (Polish -226) Clonewar (Clonewar 2) 229 OW Explode Nympho 1.0 (Nympho.230) Bljec (Bljec3) Ionkin 232 OW ZigZag (ZigZag.232) Relzfu Junior Bljec (Bljec-235) Bljec (Bljec3B) Small ARCV Angarsk Genesis (Genesis.238) Sterculius (Sterculius.240) 241 OW Syrian Civil War Clonewar Late Night Hiperion (Hiperion.249) Ice 9 (Ice 9-250) Split Tajfun 250 OW Maaike (Maaike.250) Shaman Bljec (Bljec4B) ZMT (ZMT-252) 252 OW Blaze (MSK) Mr. G Hiperion Baron ^.Fred) 255 OW Darth Vader (Darth-3 & Darth-3B) LPT Off Nina (Brenda & Brenda-B) 256 OW Define (Define-256) Kemerovo Pixel (Pixel-257) Tormentor-205 (Tormentor-263) 263 OW I-B (Demon-C) 265 OW I-B (BadGuy) Nazgul V-3n (V-31) V-3n (V-30) Wizard 3.0 268 - V270x 269 OW Jasmine Ash (Ash.270) CRF 270 OW Darth Vader (Darth-1) 272 OW I-B (Demon & Demon-B) Aussie Parasite (Aussie Parasite.272) Bljec (Bljec5B) MGTU V-3n (V-32) Western Ukraine Pixel (Pixel-275) Bljec (Bljec6) Faerie JD (JD-276) Pixel (Pixel-277) Sterculius Bljec (Bljec6B) Civil War (Civil War-282) MMIR (MMIR.Extasy) Grog 3.1 (Nocciola) Pixel (Pixel-283) Bljec (Bljec-284) (Danish .NC.284) Seventh Son (Seventh Son-284) 284 OW Blaze Lippi-286 Bljec (Bljec7) Rajaat (Rajaat.287) Dismember Synergy Wild Thing 2 (Wild Thing-289) Aussie Parasite (.Lipo Timid (Timid-290) The Click Aussie Parasite Bljec (Bljec7B) Genesis (Genesis.295) Pixel (Pixel-295) Pixel (Pixel-297) Timid (Timid-297) Little Br (Little Br -299) Meditation Pixel (Pixel-299) Osiris Gergana (Gergana-300) Little Br (Little Br -300) Timid (Timid.300) Uruk-hai (Uruk-hai 300) (Tim 3) Sad Butterflies 302 OW Blood Lust Gipsy-304 Gotcha (Gotcha-Mut3) Suicidal Timid (Timid-305 & Timid-LM) Aussie Parasite (Aussie Parasite.306) Timid Gotcha (Gotcha-Mut2) Little Br Sad (Sad-307) Tver-308 Luca-309 G2 (G2-Celeste) .Walt.311) Wizard 3.0 (Wizard.312) G2 (Mudshark) Sze YB.Old Scribe (YB.316) 317 OW Druid 318 OW Flagyll Belgium-320 Timid (Hehheh) Under 7 320 OW Leprosy (Leprosy-C) Little Br (Little Br -321) Troi Dest (Dest-1) Lapse Grog 3.1 (Grog.324) IVP (IVP.Walky) Yafo ARCV 330 DM (DM-330) Grog 3.1 (Grog.Il_Mostro) (PSMPC-331) Seventh Son (Seventh Son-332) 332 OW Nanite (Kennedy) ARCV-n (ARCV-6) 335 - MX-335 Aussie Parasite (Grue) (PSMPC-338) (PSMPC-339) Hydra ^ (Hydra-4) 340 OW Squisher 340 - Boojum DOS7 Hydra ^ (Hydra-3) Pixel (Pixel-342) Hydra ^ (Hydra-2) Grunt-1 (PSMPC-344) Pixel 345 OW Darth Vader (Darth-2) Big Bang Grunt-1 (Grunt-1B) Max.347 (PSMPC-347) VHP (VHP-348) Little Br (Little Br -349) Small Smaug Atomic 2 Seventh Son (Seventh Son-350) 350 OW Repent 350 - Mark II 350 - Satyricon IVP (IVP Example 1) (PSMPC-351) Sze (Sze.351) Twin-351 V351 (PSMPC-352) Baba (PSMPC-353) VHP (VHP-353) Loki (Loki-354) 354 OW Marked-X James Bond JD (JD-356) KLF-356 Finnish-709 (Finnish-357) Bljec (Bljec8) Breeze Taurus Tormentor-205 (Tormentor-358) Iron Umbrella Tormentor-205 (Tormentor-360) Little Br (Little Br -361) Uruk-hai (Uruk-hai 361) W13 (W13-361) Bljec (Bljec8B) ZMT (ZMT-365) VHP (VHP-367) Alex-368 Hydra ^ (Hydra-7) Aussie Parasite (El Bljec (Bljec9) 370 OW Leprosy (Leprosy-D) Voronezh-370 Timid (Timid-371) 371 OW Atomic 1 Flagyll (Flagyll-Z) Hydra ^ (Hydra-6) NPox (NPox.372) MShark Bljec (Bljec9B) IVP (IVP.Taselhoff) Lapse ( Lapse-375) DOS7 (DOS7-B) Polish-376 Aussie Parasite (Dorn) Mystic-377 Search-1000 (Search-377) W13 (W13-377) 377 OW Grog 3.1 (Grog.377) MShark (MShark-378) Mystic-377 (Mystic-379) CSL (CSL Beta) (Cheesy) 382 Recovery Timid (Timid-382) FWord-383 388 - V388 Atas 384 OW Chromo 1.0 (Chromo 3.0) Bad-389 Cinderella Kalah Hydra ^ (Hydra-5) JD (JD-392) MMIR (MMIR.Ravage) Puke-393 SNA Attention! Hero-394 Uruk-hai DNR (DNR-ROM Bios) (Silent Killer) Just.398 Kode4 Zaphod Atas (Atas-400) Cobra Curse IV Dicker Macedonia Wanderer (Tim 5) Ebbelwoi Mayberry (Mayberry.402) Australian 403 Hydra ^ (Hydra-1) 405 OW Chromo 1.0 Chromo 1.0 (Chromo 2.0) DoDo (Pig & Pig-B) DoDo Mayberry (Mayberry.409) 409 OW VCL (VCL-409) (T-Rex) 411 - Tack (Tack-411) Happy (Helmet 1.0) 412 OW Syrian (Syrian.412) Otto6 (Otto-415) -415) Blood Sugar Experiments-416 Jack 416 OW ZeroHunt Tula (Tula-417) 417 OW Vampire Blood 418 OW Skid Row 418 - Friday 13th (Friday 13th-D) Deranged DOS7 (DOS7-C) Tula Schrunch-420 VCL (Handler) 422 OW 422 423 OW Mindless UnExe W-92 ( W-92B) Simple IVP (IVP-Ozzy) Seventh Son (Seventh Son.426) Albania (Albania-429) Beast-N-Black G2 (G2-A429) Timid (Timid-431) 432 OW Skid Row (Skid Row.432) VCL (Dome3) VHP (VHP-435) VCL (VCL.Angel.436) 437 - VFSI G2 (G2-A438) Tai-Pan Trident (Trident.439) II (AP-440) Aussie Parasite (Aussie Parasite.440) Bljec (Bljec7C) NoBock Reset Sterculius (Sterculius.440) Ash (Ash.441) Bljec (Bljec-XYZ) Parity (Test 441) Swedish Boys (.Headache.441 TMTM Beware Diamond (Diamond-444) Trident (Trident-444) Career Of Evil Kuku-448 Radyum Turbo (Turbo 448) Ash (Ash.449) It (Viva Mexico) Raver 449 - Tack Blood Rage Gergana (Gergana-450) Mithrandir (Mithrandir III-B) Plumbum (Plumbum-D, Plumbum-E) 450 - Geek Ash (Ash.451) Twister 451 OW I-B (Exterminator) 452 OW BFD (BFD-452) 452 - Doubleheart RPVS Trident (Trident.454) Wave 456 OW Grog 3.1 (Mormorio) It (It-457) Self (Self-457) Swedish Boys (Headache) 457 OW VCL (DM 92 Bios) Frodo Soft (Frodo Soft-458) MMIR (MMIR.Moonlite) (Schrunch) W13 (Dushanbe) Gotcha (Gotcha-Mut1) (Iron Hoof 1) Swedish Boys (Why Windows) Striker #1 (Iron Hoof 2) Chris 463 - Diamond (Diamond-465) Golgi Gosia Jump (Groovy) YB.Old Scribe (YB.466) 466 OW Skull (Skull Gidra-469 MPS 1.1 469 - Skew-469 ASP-472 Grunt-1 (Grunt-3) Seventh Son (Seventh Son-473) Zu1 474 - Ein Volk Adolf Hitler ARCV-n (ARCV-5) Creeper Mayberry (Mayberry.475) Shake (Danish .476) Bit Addict DLSU Highlander 477 - Tack (Tack-477) 477 OW LV 1.2 Dest (Dest-2) (PSMPC-478) Graveyard-479 II (AP-480) VCL (Miles) 480 OW Atomic 1 (Atomic 1B) Grog 3.1 (Grog.Hop) NR-481 Aussie Parasite (Aussie Parasite.482) Beeper Tu-482 Dirty DOSHunter Kiev 483 V483 Diamond (Diamond-485) Aussie Parasite (Aussie Parasite.491) Dest (Dest-3) Flex 491 - Larry (Pussy) Tankard .Ambalama) 493 OW Seneca-B W13 (W13-Req) Hydra ^ (Hydra-8) 495 OW Malmsey 495 - 495 - Bit Addict (Bit Addict-496) Blinker (Blinker-496) Hallo-496 LockUp Mayberry (Mayberry.496) 498 - Astra (Astra-498) (Maxwell-498) Civil War (Lockjaw.499) Kalah (Kalah-499) (Maxwell-499) PZPAPN 500_thru_999 Boys Pixel (Portugal-500) R-10 Shizol CyberTech (CyberTech-501) Genc Lythyum Mayberry (Mayberry.502) RTL4 505 OW Hobbit Albania (Albania-506) 506 - Hero Civil War (Lockjaw.507) W13 (W13-B) CCCP-510 510 - Astra (Astra-510) Capicua 66A Akuku (Columbus, Wilbur Blinker Costeau Friday 13th Gergana (Gergana-512) Kthulhu OMud-512 Polimer Positron Ryazan Shaker SVir Troi (Troi-2) Turbo (Turbo Kukac) 512 OW Gyro Label 512 - 1,023 Ieronim (Ieronim-512) Ontario G2 (G2-E513) Surrender VCL (Heevahava) (Tim 4) VCL (Garfield) VCL (Beva 96) CSL (CSL V4) Fission Plumbum (Plumbum-M2) -Feliz) 518 - Quake VCL (Beva 33) 519 OW TalkingHeads (No Wednesday) 521 - Astra (Astra-521) Frajer-649 (Frajer.524) Malaise (Malaise-524) Burghofer Thirty Three Terminator Timid (Timid-526) Back Death Dragon IKV 528 (AP-529) Grunt-1 (Grunt-4) Polish 529 (Bamestra 7) Bobo (Bamestra 1, 6, 9, 10) (Bamestra 3) VCL (VCL.Noble) 531 - MSTU (Hiccup) Plumbum (Bamestra 8) W13 Cocaine Monxla B (Bamestra 2) (Bamestra 5) Sorlec (Sorlec 5) (Bamestra 4) W13 (W13-537) 537 - @11-537 Mordor.1110 (Mordor.538) Swedish Boys (Data Molester) Butt Stink ARCV-n (ARCV-7) 542 - Friday 13th ( Plumbum (Plumbum-C) Chill IVP (IVP Example 2) Hexametricx 545 - Sov (Sov-545) Ash (Ash.546) Clonewar (TrekWar) Hamster (Abraxas) VCL (Dome) (Cracky) TSoft 547 - Path Matura Aussie Dir Self (Self-550) 550 - Kiwi-550 VCL (VCL.551) 551 - MSTU (MSTU-551) ButtUgly CyberTech (CyberTech.552) Play Tetris (War Dork) Sorlec (Sorlec 4) 554 OW Bad Brain (Bad Brain 1.2) Dutch 555 Silence 555 OW Leprosy (Angel Of Death) (Skeleton) Tankard (Tankard V3.01) (Love Bink) Timid (Timid-557) Turn.557 557 OW Grog 3.1 (Mila) 557 - 560 OW Burger Marauder (DeadPool) Marl 560 - 1,119 Ieronim (Ieronim-560) Anti-DAF VCL (Beva 32) 562 OW Leprosy (NightCrawler 3.0) Frodo Soft 563 OW Burma.563 AtomAnt 3.0 (AtomAnt 1.0) (Armana-564) Sorlec (Sorlec 6) Grog 3.1 (Grog.566) Wild Thing 2 568 - X-2 (X-1) Ieronim (Page) (Alien-1) 571 OW Busted Susan AIW (Sucker) Wharps 572 - X-2 (X-1B) (PSMPC-573) (Walkabout) Albania (Albania-575) Malign Mexican Mud Rage VCL ( 7Zero) 576 OW Bad Brain 576 - Rider Italian Boy Praying Civil War (Civil War II v1.0) Prime Youth (Youth.580) Polish 583 Diamond (Diamond-584) 585 OW Shhs Not-586 Praying (Praying.587) VCL (VCL.587) Aussie Parasite (Aussie Parasite.588) (Anathema) 591 - Aussie Parasite (Aussie Parasite.591) 591 OW Leprosy (The Plague) Ear (Anti-Print) Pitch Tula (Tula-593) Diamond (Diamond-584) VCL (Crasher) 595 OW Leprosy (Scribble) 596 OW VCL (Diarrhea6 Trojan) (Tongue) Sorlec G2 (G2-D598) (PSMPC-598) TSoft (TSoft-598) Civil War (Civil War II v1.1) LCT (7% Solution) VCL (Dial) Ieronim (Ieronim-600) Japanese Christmas 600 OW Shhs (Secret Service) Dewdz Diamond (Diamond-602) G2 (G2.Punisher) Plutto 602 - Sov (Sov-602) (PSMPC-603) VCL (Chicken Pox) 604 - StarDot 600 Golgi (Golgi 2.0) Albania (Albania-606) Diamond (Diamond-606) Diamond (Diamond-607) Gotcha (Gotcha-E) Diamond (Diamond-608) Do-Nothing Diamond (Diamond-609) Jason Mayberry (Mayberry.609) Rocko (Mutating Rocko) 609 OW Pirate 610 OW VCL (CD Player) 610 - Seventh Son (Seventh Son-Kernel) (PSMPC-611) Trident (Trident-611) GoldGeld Diamond (Diamond-614) G2 (G2-A615) JW2 (Jabberwocky.615) Random Rattle TechnoRat 615 - Friday 13th (QFresh & Edge) -618) Semtex (Semtex-C) Diamond (Diamond-620) Shock Therapy Diamond (Diamond-621) -621) Deicide (Deicide II.622) Deicide (Deicide II.623) VHP2 623 - Friday The 13th / (-NZ Diamond (Diamond-624) 624 OW V-1n (V-10) Emf (Emf-625) (Alien-3) (DOS 625) Diamond (Diamond-626) Tolbuhin (Tolbuhin-626) Gotcha (Gotcha-627) VHP2 (VHP-627) 628 - Attention-629 629 - Wasp Malign (Malign-630) Number 6 Icelandic (Icelandic-II) Frodo Soft (Frodo Soft.633) 633 - 1,145 VComm (VComm.633) TBug-634 -634 Re Aussie Parasite (Aussie Parasite.635) Shadow , (Shadow-2) Tula (Tula-635) 637 - 1,149 VComm Ice 9 Spanz MPS 3.1 Otto6 Youth 640 - Spring Kali-4 (Eclypse) Icelandic (Saratoga) -CDM) Enemy IVP (Kubla Kahn) (644) (Sunday Death) Sinep Beer (Beer.645) -645) -B 645) Trident (Trident 90210) YB.Old Scribe (YB.647) 647 OW Fratricide Genny-648 Incom Lisbon Frajer-649 More-649 649 - Doubleheart (Doubleheart.649) Scream (Scream-650) Voronezh-Chemist V651 VCL ( 7Zero-652) Japanese Christmas (Japanese Cookie) Perfume (G- 653 - Aurea CyberTech (CyberTech-654) MPS 3.2 654 OW Leprosy (Leprosy-654) Kohntark 655 - Icelandic (Icelandic.655) Frodo Soft (Frodo Soft.656) -656) 656 - Icelandic ARCV-n (ARCV-3) thing WW-658 DOS3 661 - Gippo Gollum lDays 662 - Close IVP (Yeah) VCL ( 663 OW Immolation 663 - Mohova ARCV-n (ARCV-4) Skater (Skater.664) 664 OW Leprosy (Leprosy-664A) Geodesic 2.0 Grog 3.1 (Lor) Honey Rocko Skull 666 OW Deicide Leprosy Viper (Wiggers) IVP (IVP.Angry Samoans) 669 - Saturday The 14TH ARCV Xmas ARCV-670 Feist (Kersplat) (Death 2) (7% Solution 2.0) Bryansk Day10 VCL (Big Taiwan (Doom I-B) ARCV-n (ARCV-8) Plumbum (Plumbum-M1) Rajaat (Rajaat.679) -Beta Boys) Rubbit IVP (Bubbles) 684 - MPS 4.01 Monika-686 K-4B Mayberry (Mayberry.687) Flash Mutation 688 OW FoneSex Grog 3.1 (E-Riluttanza) Particle Man Dir Sundevil ARCV-n (ARCV-2) Arusiek (Arusiek.692) 692 - 1,172 Scream (Scream 2B & Scream 2C) 692 - 1,362 fw-692 Deicide (Br hood) Los-693 Keeper (Keeper.Acid) Mithrandir Mutation ~(-B Civil War (Proto-T) Hungarian (696) 696 - 1,176 Scream (Scream 2-696) Career Of Evil (Career Of Evil-697) -New Years) Radyum (Radyum-B) IVP (Crystal) RIP-699 Penza Rajaat 700 OW Skism (Angel Dust 1.0) 702 OW Nowhere Man (VMessiah) (Z10) 704 - Nines Sparkle Nines (Nines-706) VCL (E-Coli) Radyum (Radyum 2-707) .707) Finnish-709 Japanese Christmas (Japanese-709) VCL (ZipLoc) Offspring (Offspring v.05) 711 - 1,191 Scream 712 - 1,396 Enemy Typo / (Typo-712) -712) Shadow VCL (Red Team) -716) .Powermen.717) Kuang Lurve Lazy Signs VCL (Arwen3) Parasite (Vengeance) 723 OW Psychogenius 723 - Agena Aussie Parasite (Aussie Parasite.726) -726 & -726B) (No God) (Napolean Complex) VCL (VCL.Elena) -Beta Boys 730) 730 - Ontario 730 Sorry Gotcha (Gotcha-732) Infinity Mayberry (Mayberry.732) 732 - 1,212 Scream (Scream 2-732) Null Set 733 - Baobab (Baobab-731) IVP (SiloDeath) Problem (Problem-734) Sylwia VCL (Kinnison-734) Vindicator Hydra ^ (Hydra-0) 736 OW Silver Dollar (Silver Dollar-2F) Ash (Ash.737) K-4C Pixel (Pixel-739) (Scarey) 740+ Silly-365 (Silly-740) Anna Alpha-743 Green Joker Taiwan ARCV-n (ARCV-9) 745 OW VCL (Voco) 746 - 1,435 Enemy (Stranger) Mayberry (Mayberry.747) R-11 Zombie 10 Past 3 Pixel (MS-748) Hungarian (Gyorgyi) Stahl Chad 751 - Hallo-496 (Hallo-751) Nygus (Nygus-Klaw) Taiwan (Doom I) Socha 754 - MPS II-754 Experiments Grog 3.1 (Grog.Dream) Maaike (Maaike.757) Nygus VHP (VHP-757) Abal Andromeda 1.1 Mayberry (Mayberry.758) 759 - Hallo-496 (Hallo-759) 760 - Aussie Parasite (Aussie Parasite.762) LCT (LCT-762) Sundevil (Sundevil.762) IVP (IVP-S2DD) Badsec Perfume Copyright (Ungame) 767 - Chemnitz 17th (Nov 17-768) 768 - Spring (Spring-768) 768 - 1,531 Brainy MMIR (In Evil) (Toys) Slime Grither Grog 3.1 (Grog.Inc) Nines (Nines-776) Student-776 VHP (VHP-776) Iraqui Warrior 777 OW Helicopter Mannequin (Crumble) Pixel (Pixel-779) 779 - Gotcha (Gotcha-Mut4) (Page-B) Black Monday (Borderline) Hafenstrass (Hafenstrass-D) End Of Aussie Parasite (Aussie Parasite.784) 785 - 1,041 10 Past 3 (10 Past 3-B) IVP (Swank) 789 - StarDot 789 Dead-790 791 - V801 Serena 792 OW Acid 792 - 1,526 VirDem-792 Grog 3.1 (GSav 1.0) Sword 795 - 1,306 Scroll Ambulance Car Grog 3.1 (Grog.N male) VCL (Earth Day) Grog 3.1 (Grog.798) Grog 3.1 (Grog.800) Plovdiv 1.1 V800 800 - 9wealth Grog 3.1 (Grog.801) PC Flu Italian 803 804 - StarDot 801 Malmsey (Malmsey 3 Beta) VCL (Kinison) 808 OW Skism (Skism-808) Hafenstrass Pixie No Frills 814 OW MindRiot 814 - Jeff No Frills (No Frills 1.01) Arusiek Demon Viper Golgi (Golgi 3.0) VCL (VCL-YD2) 821 - IVP (IVP-Tuesday) VCL (VCL-YD2B) 822 - Gusano 822 - Wisconsin ARCV-n (ARCV-1) Black Hawk ARCV-n (ARCV-10 & ARCV-10B) VCL (Donatello) -827) Mayberry (Mayberry.828) 828 - 1,048 DataLock (DataLock-828) Red Diavolyata Atomic 2 (Atomic 2B) Sistor (Sistor-J4J Alpha) VirDem (VirDem-833) 833 - Pegg-833 Billboard 1.0 No Frills (No Frills 3.0) (Nirvana) Pixel (Pixel-837) NeverMind 838 - Were Here 838 - 1,318 Scream (Scream 2) ARCV Friends Nympho 1.0 Sofia Term 839 - Siskin (Siskin-Goodbye) Barrotes (Barrotes.840) 840 OW Viper No Frills (No Frills 2.0) Tiso VCL (Diogenes) Amstrad Pixel (Pixel-847 & Pixel-847B) Shanghai Barrotes (Barrotes.849) -Yam 92 & YAM 92B) Pixel (Pixel-850) Warsaw-850 848 - Icelandic (Icelandic-III) -851) Pixel (Pixel-852) Squawk CLS-853 PrintMonster 853 - Sybille Mercenary Pixel (Pixel-854) WinVir 854 - Sonik Youth Problem (Grease) 856 - Lo Tek Marauder Radyum (Radyum-C) Dejmi Dichotomy Problem (Problem-863) Twister (Twister.863) LowerCase 865 OW Naught-865 Typo 867 - Sluknov 869 - 1,348 CHR-869 873 OW VCL (VCL-Windows) Pay Rise (Pay Rise-874) Piazzolla 875 - Cossiga 877+ Silly-365 A-Bomb Collor de Mello 878 - Einstein Gotcha 17th (Nov 17-880) Gotcha (Gotcha-B) Klepavka Clone 2.0 883 - Gippo (Gippo.Earthquake) 883 - Flower (Cinco de Mayo & Cinco X) Golgi (Golgi.886) Sofia Term (Sofia Term.887) 889 - 889 - 1,157 Keypress (P 890 OW Budo Diamond (Diamond-891) 891 - Akuku Hell (Hell-892) 892 - Akuku (Metal Thunder) .DeathBoy) Lokjaw (Lokjaw-Zwei) Phalcon.894 895 - Cossiga (Cossiga-B) BackFont-896 Fichv-896 Fich (Fich-897) Hell (Pixel-897) Pay Rise Suriv 1.01 Suriv 4.02 Lokjaw Emo-899 Hell (Pixel-899 & Pixel-899B) Badsec (Topsy-900) ZK900 Civil War (Civil War III v1.0) Parasite (Parasite 2) Grog 3.1 (Grog.Gonfie) Fich Grog 3.1 (Grog.903) Parasite (Parasite 2B) Hell (Pixel-905) Gotcha (Gotcha-906) Polifemo Gippo (Gippo.JumpingJack) 907 OW MindRiot (MindRiot-B) 909 - Wasp (Wasp.909) Joanna (Joanna-911 & Joanna-911B) Bug ( Bug-914) Trident (Trident.914) Joanna (Joanna 1.11 & Jo 918 OW Attack (Attack-918) (7% Solution 3.0) 918 or 943 Vicious Saddam DataLock Funeral Shiny Happy 921 - Dark Lord (Dark Lord-B) Clonewar (Acme) 923 - Dark Lord 923 - Mich II Vinchuca Grog 3.1 (Grog.926) Capitall Swiss Phoenix 927 - Mirror 927 - 1,407 Sticky Berlusca VCL (Pearl Harbor) VCL (Diarrhea) Paturuzu (Paturuzu.931) VCL (VCL.Blue Moon) 933 - Lord-933 Viperize Hell Literak Monxla Devil's Dance 942 - Freak -943) Dot Killer Lycee (Lycee.944) Anti-D Cyber (Cyber-946) 946 OW Leprosy (Silver Surfer) 948 - Siskin (Siskin-948) 950 - Cacophony 950 - Reverse.A 950 - Carioca Pinky Manola Ear (Quake-O) Stone`90 NPox Joshua 965 - istrover III 966 - Atomic 2 (Atomic.967) Roguey 968 - 1,479 Youth (Futhark) B2-969) Best Wishes (Chuang Tzu) Youth (Hannibal) 972 - Krivmous Loki (Loki-973) .Mom) Astra (Astra-976) Skater (Skater-977) Diamond (Diamond-978) Friday 13th (Friday 13th-978) 978 - Klaeren 979 - 99% (99%-B) 980 - Chaser 980 - Magician 981 - 1,932 983 - (Quadratic-986) 983 - Hary Anto Joanna Violite Grog 3.1 (Grog 3.0) Tolbuhin (Tolbuhin-992) Golgi (Golgi.Oracle) Commy 999 - 1,096 Groz-999 PZPAPN 1000_thru_1999 # ^ # 8 \ PTNU 1,000 Bad Boy Breaking Cpxk Dzino Explosion Forger Genc (Genc.1000) Jericho ( >.Jericho.1000) Jos Julia-1000 My Child Plovdiv 1.3 Scorpio Search-1000 Semtex Tester (Stigmata) (Twer-1000) B2 & Baby) Vote (Vote-1000) 1,000 OW Budo (Budo.1000) 1,000 - 1,014 Egg-1000 1,000 - 1,019 Bebe 1,001 Soupy (Soupy-Death) 1,004 Tolbuhin (Tolbuhin-1004) Vote 1,007 Grog 3.1 (Grog.IlCuoco) 1,008 1008 Little Girl Murphy (AntiChrist) 1,010 - 1,016 Astra (Astra-1010) 1,013 Diamond (Diamond-1013) 1,014 Interceptor 1,014 - 1,028 1,015 Twister (Twister.1015) Unk 1,015 - 1,029 Kremikovtzi 1,016 Grog 3.1 (Grog.NtA) Ill 1,017 IVP (Sleeper) Ming 1,017 - 1,025 Siskin (Siskin-1017) 1,018 Lozinsky (Lozinsky-1018) Rubbit (Rubbit.1018) 1,019 - 1,027 Fellowship 1,019 - 1,034 Fellowship (Fellowship-B) 1,021 Skater 1,022 (McWhale-1022) 1,022 - 1,038 Gorlovka 1,023 Lozinsky 1,024 1024 SBC 1024 Print Aussie Parasite (.Gotter Best Wishes (Best Wishes B) Dima Ear Leech Nomenklatura Paturuzu Press Sicilian Mob Slub Tormentor V1024 Warrior 1,024 - 1,038 Axe-1024 1,024 - 2,046 Thimble Violetta (Violetta-1024) 1,025 Cara 1,026 - 1,040 March 25th 1,027 Julia-1000 (Julia-1027) Mayberry (Mayberry.Dementia) 1,028 (Dr Q-1028) 1,029 Wally 1,029 - 1,043 XPH (XPH-1029) 1,030 - 1,040 Mosquito Pisello 1,030 - 1,042 Junkie 1,036 - 1,046 Gippo (Sunrise) 1,039 Grapje 1,040 Tormentor (Tormentor-1040) 1,040 - 1,279 Anthrax 1,041 Aussie Parasite (Aussie Parasite.1041) 1,043 DataLock (DataLock-1043) Wrzod 1,045 - 1,055 Gippo (Gippo.Bumpy) 1,049 4Res 1,050 Aussie Parasite (.1050 1,050 - 1,162 Destructor V4.00 1,051 - 1,064 1,051 - 1,065 1,053 Civil War (Civil War-Lockjaw) 1,054 Bad Boy (Immortal Riot.B) (New Generation) 1,054 - 1,055 Bad Boy (Immortal Riot) 1,055 Black Monday 1,055 - 1,069 Black Monday (Black Monday-B) 1,056 - 1,066 Cacophony (Cacophony 2) 1,057 - 1,062 Arara 1,060 (DataDeath) 1,062 Iper 1,062 - 1,076 1,063 Damage Mono 1,060 X-2 (X-3B) 1,064 SVC 3.1 1,064 - 1,222 (Kuzmitch) 1,066 or 1,076 CyberTech 1,067 1067 1,068 Aussie Parasite (.Comic Big Joke Pixel (Pixel.1268) 1,069 WordSwap (WordSwap-1069) 1,072 Predator Reaper Soupy Tormentor (-1072, Nuke, Lixo Nuke) 1,073 - 1,074 Bad Boy (Bad Boy-D) 1,074 Armagedon (Armagedon-1074) KeyKap 1,075 Crash 1,076 (Clint) 1,077 Armagedon (Armagedon-1077) Jerk KeyKap (KeyKap.1077) Manta Talentless VCS 1,079 Armagedon Doctor Qumak 2 1,082 or 1,215 Grog 3.1 (GSav 1.1) 1,082 - 1,098 Harm-1082 1,083 VCL (Cops-1) 1,083 - 1,097 mark ( mark 2) 1,084 - 1,098 Kipa 1,085 WordSwap (WordSwap-1085) 1,086 Lucifer 1,087 Civil War (Ritzen) FireFly (FireFly.1087) 1,090 Karin 1.091 Squeaker 1,091 - 1,106 VLamix 1,092 Tumen (Tumen V2.0) 1,092 - 1,106 Cyber 1,098 Murphy (Kamasya) 1,100 Fisher 1,100 - 1,114 1,103 - 1,117 Coyote 1,104 (Birthday) 1,106 FireFly 1,110 Damage (Damage-B) Mordor.1110 1,112 Horror (Horror-1112) 1,113 - 1,128 Akuku (Cop-Mpl) 1,117 Beta Incest 1,118 .Greetings) 1,124 FeelBad 1,125 (McWhale) 1,127 - 1,177 Offspring (Offspring v.81) 1,127 Revenge Attacker 1,129 Sistor (Sistor-1129) 1,129 - 1,143 Metallica II 1,131 - 1,163 Drop 1,132 Parasite 1,134 Karin 1,135 Split Second 1,136 (Math Test) 1,137 Horror (Horror-1137 & Horror-1137B) 1,140 Andromeda 1.0 Witch 1,141 PCBB (PCBB-1141) 1,142 - 1,603 (approx) Python 1,145 VCL (Earthquake) 1,146 Gremlin 1,147 Tolbuhin 1,148 Predator (Predator-1148) 1,149 - 1,168 Split Second (Split Second.1149) 1,150 - 1,165 Alfa (Alfa-1150) 1,151 - 1,165 Mercy 1,153 Tatou 1,154 Predator (Predator-1154) 1,157 Protecto (Protecto-1157) 1,159 Zaragosa 1,160 Milena 1,161 (Dr Q) 1,163 Cadkill Storm-1163 1,164 Gnose 1,168 Datacrime Ministry Poor Man 1,169 Aussie Parasite (Aussie Parasite.1169) 1,171 Murphy (Diabolik) 1,171 OW Abraxas 5 1,172 Murphy (Finger) Sandwich 1,172 - 1,186 Liberty-1172 1,173 Golgi (Golgi.1173) 1,179 Aussie Parasite (Aussie Parasite.1179) 1,181 - 1,195 Spyer 1,182 Hellween (Hellween-1182) 1,183 Benoit 1,188 Dark End 1,191 Hafenstrass (Hafenstrass-1191) 1,193 - 1,194 Eliza 1,193 - 1,208 Copyright 1,195 Predator (Predator-1195) 1,196 Protecto (Protecto-1196) 1,199 Pregnant 1,199 - 1,213 13TH ( 13TH-B) 1,200 Grog 3.1 Little Girl (Little Girl 3.0) Necro Shadow 1,201 UFA-1201 1,201 - 1,209 1,201 - 1,215 13TH ( 13TH-C) 1,202 Psychosis 1,202 - 1,217 Alfa (Alfa-1202) 1,204 RefRef 1,205 or 1,215 CyberTech (CyberTech-B) 1,205 - 1,220 Copyright (Copyright-1205) 1,206 Vacsina 1,208 Scythe 1,209 - 2,193 Flue 1,210 1210 1,210 - 1,225 Penza (Penza-1210) 1,214 OW Groove OW 1,218 - 1,245 Oi Dudley 1,219 Grog 3.1 (Woodstock) 1,220 - 1,237 Traveller 1,220 - 1,238 Traveller (Traveller-B) 1,221 Murphy (Migram) VCL (Diarrhea6) 1,226 1226 1,228 Piter-1228 1,228 - 1,482 Keypress (Keypress-B) 1,231 Pathhunt 1,232 CheckSum (CheckSum 1.01) 1,232 - 1,486 Keypress 1,232 - 1,487 Keypress (SamSoft) 1,233 CheckSum 1,234 - 1,248 Loki (Loki-1234) 1,234 - 1,486 Keypress (multiple 1,236 VirDem 1,237 - 1,252 Loki 1,237 - 1,304 K-Hate 1,238 Hitchcock (Hitchcock-1238) 1,238 - 1,506 Keypress (Keypress-1238) Keypress (Keypress-Chaos) 1,238 - 1,507 Keypress (Keypress-1238C) 1,240 - 1,250 Gippo (Gippo.Stunning) 1,241 1241 1,242 Tumen (Tumen V1.3) 1,244 - 1,258 1244 1,245 - 1,258 Acvt 1,247 Gliss Hitchcock 1,249 Argentina 1,250 Elvis-1250 Murphy (Swami) 1,252 Doom II 1,253 1253 Scramble Weak 1,254 NTit StinkFoot 1,255 Tumen (Tumen V1.2) 1,257 - 1,313 Simulati 1,258 - 1,273 Tokyo 1,260 1260 Casper 1,261 - 1,278 Traveller (Traveller-C, -C2, -C3) 1,268 - 1,282 Sleepwalker 1,268 - 1,520 Keypress (Keypress-1268) 1,273 Sistor (Sistor-J4J) StinkFoot (StinkFoot-1273) 1,277 Murphy 1,279 Tiso (Tiso.1279) 1,280 Datacrime (Datacrime-B) Vriest 1,284 Murphy (Murphy-3) 1,294 Offspring 1,295 Tao Cheng 1,297 OW VCL (McYellow) 1,297 - 1,313 Ugur 1,302 Blinky Proud 1,303 Barrotes (Barrotes.1303) 1,306 Hybryd 1,308 1308 1,310 Barrotes 1,310 OW Twin Peaks 1,312 OW NGV (NVG-Wednesday) 1,319 - 1,333 Intruder 1,320 Iranian 1,321 Cybercide (MLP-1321) 1,322 - 1,337 Fingers 1,323 Protecto (Protecto-1323) 1,326 - 1,340 Intruder (Intruder-1326) 1,331 - 1,345 Intruder (Intruder.1331) 1,331 - 1,359 Mirage 1,332 Sylvia 1,335 Deicide (Deicide 2) 1,338 - 2,602 Wonderful 1,341 Warez-1341 1,343 Brazilian Bug 1,344 Bloody Warrior 1,344 - 1,358 Pirate 1344 1,348 - 1,365 Invol (Invol-B on . 1,352 - 1,603 Slovak (Slovak 1.00) 1,353 Cerburus 1,355 Protecto (Protecto-1355) Stupid-1355 1,355 - 1,369 Intruder (Intruder.1355) 1,357 - 1,371 Malaise 1,358 No Frills (No Frills-1358) 1,358 - 1,372 4-days Dada 1,361 - 1,375 Growing Block 1,362 - 1,377 Friends 1,363 - 1,587 Slovak (Slovak-4) 1,364 - 1,378 Mummy (Mummy 2.1, 2.1B, 2.1C) 1,365 - 1,379 Jericho 1,374 Little Pieces 1,376 Hellween 1,376 OW NGV (NVG-1376) 1,381 - 1,395 Internal 1,384 Porridge 1,385 1385 1,387 WordSwap (WordSwap-1387) 1,392 1392 1,392 - 1,406 1,399 - 1,413 Mummy 1,400 - 1,414 Tamper 1,402 Crazy Imp (Crazy Imp-1402) 1,403 - 1,417 1403 1,405 Xuxa (Xuxa-1405) 1,409 - 1,421 Invol (on . 1,413 Xuxa 1,413 - 1,425 Australian 1,415 - 1,462 + (1415) 1,417 Grog 3.1 (Grog.Ovile) Murphy (Cemetery) 1,416 Crazy Priest 1,417 - 1,431 Spanish Fools 1,422 Fungus 1,426 - 2,157 V2P2 1,431 Narcosis 1,436 - 1,450 Sadist 1,440 VCL (VCL.Olympic) 1,440 - 1,456 Intruder (Intruder-1440) 1,441 Multi-Face 1,445 Crazy Imp 1,448 - 1,462 Skynet 1,449 - 1,463 Father 1,450 - 1,478 Minsk Ghost 1,452 - 1,465 1452 Antimon 1,456 Devils & Evangels 1,458 - 1,472 1,459 1,459 - 1,473 > (PS!KO-1459) Internal (Internal-1459) 1,463 1,465 Little Red 1,475 Digger 1,480 Murphy (Murphy-4) 1,480 - 1,494 Tula (Tula-1480) 1,480 - 1,981 Datacrime (Datacrime IIB & IIC) 1,482 Varicell 1,488 Suriv 2.01 1,489 - 1,503 Mummy (Mummy 1.0) 1,490 - 1,506 Rasek 1,492 - 1,508 Rasek (Rasek.1492) 1,495 Voice-1495 1,496 Solano 2000 (Subliminal 1.10) 1,500 Frogs 1,501 Attack (Attack-1501) 1,503 WordSwap (WordSwap-1503) 1,504 - 1,519 Patient 1,508 Abraxas 5 (Abraxas.1508) (Zeppelin) 1,508 - 1,522 Carfield 1,513 1,514 Datacrime (Datacrime II) 1,518 - 1,569 + (Ten +-1514) 1,520 (Abraxas-1520) 1,521 Murphy (Murphy-2) 1,522 - 1,537 Aragorn 1,525 Darkray 1,526 Devils & Evangels (.1526 1,526 - 1,541 Arale 1,527 Chile Mediera 1,528 - 1,541 PPSP 1,530 - 1,544 CB-1530 17TH) 1,536 Month 4-6 Zero Bug 1,536 - 1,550 Mr. D MSTU (MSTU-1536) 1,538 - 1,552 Imi (Imi.1538) 1,539 Christmas Tree 1,540 - 1,554 Totoro 1,542 - 1,552 Mosquito (Lamer, Pfish, Topo) 1,542 - 3,028 VirDem-1542 1,546 - 1,634 Ninja 1,547 OW Silver Dollar (Silver Dollar-SHJH) 1,549 Veronika 1,552 - 1,568 1,554 1,555 - 1,567 Intruder (Intruder.1555) 1,556 Astra (Astra.1556) 1,560 Alabama 1,561 s (Trojector & Trojector-B) Foetus 1.1 1,562 - 1,576 Timor 1,568 Coffeeshop-1568 1,568 - 1,600 Cartuja 1,569 CheckSum (CheckSum-1569) VCL (Pro-Choice) 1,575 - 1,591 1575 1,576 1,577 - 1,591 1575 1,578 NTit (NTit.1578) 1,580 OW Hellraiser 1,581 Ieronim (Ieronim-1581) 1,585 Demolition 1,588 - 1,604 Distrust 1,589 Hominy 1,590 Arriba 1,594 1,598 - 1,620 Bug ( Bug-1596) 1,600 Happy New Year NGV (NVG-Pugsley) Voronezh 1,600 - 1,615 Edcl 1,602 Joker-1602 1,605 1605 1,610 1,614 > (Amilia) Murphy (HIV) 1,614 - 1,628 VVF 3.4 1,618 - 1,634 Mix1 1,621 Cascade (Cascade-1621) 1,624 Yankee 2 (1624) 1,626 - 1,641 Matura (Matura 92) 1,634 Devils & Evangels (.1634 1,636 Sunday 1,636 - 1,650 Mix1 (Mix1-B) Sunday (Sunday.Satan & Sunday-UNAM) 1,639 - 1,653 Basilisk 1,641 Bandit Hafenstrass 2 1,641 - 1,651 Baobab 1,642 Murphy (Locker) 1,644 Platov 1,644 OW Silver Dollar (Silver Dollar-2A) 1,648 NGV (NGV-Gomez, -Lurch, -Thing) 1,656 - 1,670 Imi (Imi.1656) 1,658 1,661 1661 1,663 Tumen (Tumen V.5) 1,666 Karlik 1,670 Oxana 1,673 - 1,771 Slovak (Slovak 2.00) 1,675 - 1,677 PCBB 1,676 IVP (IVP. Showers) 1,680 NGV (NVG-Cousin It) PCBB (PCBB-5 & 5B) 1,681 VCL (Angel) 1,682 Murphy (Erasmus) 1,683 - 1,698 Cheeba 1,684 Hellween (Hellween.1684) Sabbath 1,686 NPox (NPox 2.1) 1,687 - 1,701 > (PS!KO-1687) 1,689 1689 SVC 4.0 1,691 - 1,706 Chemmy Cheeba (Cheeba-1691 & Cheeba-1691B) 1,693 - 1,707 >-1693) 1,694 - 1,704 NCU LI 1,694 - 1,708 Merry Xmas 1,700 Necro Shadow (Necro Shadow-B) 1,701 Cascade Evil JoJo 1,701 - 1,773 Chang 1,702 Cascade (Cascade.1702) 1,703 JoJo 2 1,703 - 1,717 Malmsey (Malmsey 2) 1,704 Cascade Ilja-1704 Phoenix PhoenixD 1,706 Cascade (Cascade-1706) 1,710 - 1,725 Alfa (Rust) 1,710 - 1,724 XPH (XPH.DR&ET) 1,712 - 1,731 Alfa (Alfa-1712) 1,716 - 1,728 Slow 1,716 - 1,730 Slow (Slow II & Slow III & Slow IV) 1,718 - 1,745 TPE (Beethoven) 1,719 PCBB (PCBB-3) Oxana (Oxana.1719) 1,719 - 1,733 1720 1,722 PCBB (PCBB-3B) 1,722 - 1,744 Bug ( Bug-1720) 1,724 - 1,759 Bug ( Bug-1724) 1,728 - 1,742 Stasi 1,729 Devils & Evangels (.1792 1,731 - 1,746 Pila Year 1,735 - 1,749 (Czech) 1,737 - 1,765 Mutagen 1,740 DataLock (DataLock-1740) SVC 4.0 (SVC 4.0-1740) 1,743 - 1,757 Malaise (Malaise-1743) 1,745 - 1,759 M.I.R. 1,746 - 1,766 Alfa (Alfa-Tired) 1,751 - 1,773 Zoid 1,755 Enigma 1,761 Connie 1,767 Twister (Twister.1767) 1,767 - 1,779 1,771 - 1,786 Fly 1.1 1,776 NGV (NVG-Uncle Fester) 1,776 - 1,965 Davis 1,778 Murphy (Delyrium) 1,781 Legalize 1,783 - 2,052 Koko 1,784 1784 1,788 Lycee 1,792 Barcelona NGV (NVG-Morticia) 1,792 - 1,806 Godoy 1,797 - 1,811 >.1797) 1,799 - 1,813 >-1799) 1,800 NPox (NPox 2.0) 1,800 - 1,814 1,801 >1801) 1,800 - 1,815 > (Dark Quest) 1,802 - 1,816 >.Shyster) 1,803 (Warez D00d) 1,803 - 1,817 > (PS!KO) 1,804 - 1,805 1804 1,806 - 1,816 Raptor 1,808 - 1,822 Frere Jacques RAM (on . 1,809 - 1,849+ Skynet (Skynet.1809) 1,813 Suriv 3.00 1,813 - 1,827 >-1813) 1,817 - 1,832 Yankee Doodle (Yankee Doodle.Warlock) 1,819 - 1,829 Westwood 1,823 Necro Fear 1,824 - 1,838 China 1,825 - 1,888 Poem 1,832 Lycee (Lycee-1832) 1,832 - 1,846 >.Major) 1,835 1835 Murphy (Smack) 1,837 Chaos Year 1,838 - 1,891 1840 1,838 - 2,088 All Sys 9 1,839 Hellween (Zak2) 1,848 -Kaszana) 1,857 - 1,872 Tamanna 1,864 dBASE 1,864 - 1,878 Enola 1,865 - 1,883 Hymn 1,870 - 1,884 Freddy 1,874 OW Silver Dollar (Silver Dollar-2B) 1,876 RSP-1876 1,881 Father Christmas 1,882 - 1,896 Zherkov (Zherkov-1882) 1,888 Lycee (Lycee-1888) 1,888 - 1,902 Groen Links 1,888 - 2,160 RaubKopie (Raubkopie-FRD) 1,898 - 1,909 1,901 Lycee (Lyceum.1901) 1,904 - 1,918 1,905 - 1,924 Yankee Doodle (Yankee Doodle-1905) 1,910 Murphy (Italian Pest) 1,914 - 1,929 (Get Password 1) 1,917 Datacrime (Datacrime IIB) 1,919 Pojer VCL (VCL-JP2) 1,935 Pojer (Pojer-1935) 1,940 - 1,956 Zherkov (Zherkov-1940) 1,941 Pojer (Pojer-1941) 1,942 - 1,967 Dostepu 1,946 - 2,111 V2P6 1,947 - 1,961 > (Kang Yong) 1,948 Golgi (Golgi.DEI) 1,949 Pojer (Pojer-1949) 1,951 Murphy (Goblin) 1,951 - 1,965 Alexander 1,954 - 1,969 MVF (MVF-1954, MVF-1954B, MVF-1954C) 1,958 - 1,970 Zherkov (Zherkov-1958) 1,960 - 2,178 -Haifa 1,961 Yankee 2 1,962 - 1,977 Sverdlov 1,963 1963 1,967 - 1,981 Intruder (Intruder-1967) 1,969 - 2,091 Slovak (Slovak 2.02) 1,972 OW Leprosy (Xabaras) 1,971 - 1,985 Eight Tunes 1,975 Lycee (Lycee-1975) 1,979 Ignorant 1,987 - 1,994 Smiley 1,988 - 2,002 Intruder (Intruder-1988) 1,990 - 2,261 V2P6 (V2P6-B) 1,991 Albanian 1,991 - 2,005 Green Caterpillar-1989 1,992 OW Skism 1,993 Todor PZPAPN 2000_thru_3999 PT\% 2,000 Big-2000 EkoT Leningrad II Phoenix 2000 Solano 2000 V2000 V82 2,000 - 2,014 11-30 2,004 - 2,034 Estepa 2,011 Halloechen 2,013 - 2,027 ow ( ow 2) 2,015 CMagic 2,018 - 2,127 TPE (Civil War IV v1.1) 2,022 - 2,035 Como 2,045 Murphy (Br 2,048 Bios Crusher Ear (Suicide) Magnitogorsk 2048 Marzia Meta-2048 Ontario III 2,048 - 2,062 Tabulero 2,048 - 2,062 Avispa 2,048 - 2,063 Quiet 2,051 Black Wizard 2,051 - 2,064 Kiev 2049 2,051 - 2,177 Slovak (Slovak 3.00) 2,053 - 2,068 Discom 2,060 - 2,074 Rubbit (Rubbit.2060) 2,062 DOSVer 2,064 Wolfman 2,064 - 2,078 (Soy Un) 2,066 - 2,080 Peace Man 2,068 - 2,161 TPE (Civil War V v1.0) 2,071 OW Silver Dollar 2,076 - 2,364 V2P6 (V2P6Z) 2,078 Milano 2,080 Fu Manchu 2,083 Staf 2,086 Fu Manchu 2,088 - 2,102 Fairz 2,100 V2100 2,104 - 2,118 Alexander (Alexander.2104) 2,109 - 2,445 Adolph 2,112 - 2,126 PC Flu-2 2,131 - 2,140 Scott's Valley 2,134 - 2,148 PC Flu-2 (PC Flu-2D & PC Flu-2E) 2,136 - 2,150 Outland 2,141 - 2,157 PC Flu-2 (PC Flu-2B) 2,143 - 2,157 AtomAnt 3.0 2,144 - 2,159 2,149 - 2,224 Poet 2,153 Flip (Flip-2153 & Flip-2153B) Flip (Prism) 2,153 - 2,217 2153 2,156 - 2,170 PC Flu-2 (PC Flu-2F) 2,156 - 2,171 Tomato 2,161 Appelscha 2,161 - 2,175 2,174 - 2,242 Pinworm 2,181 - 2,193 Bubonic 2,189 - 2,204 Yankee Doodle (Yankee Doodle-2189) 2,204 Bomber 2,208 - 2,228 Moctezumas Revenge 2,218 OW Leprosy (Leprosy-FVHS) Silver Dollar (Silver Dollar-2D) 2,219 - 2,491 RaubKopie 2,225 Sistor 2,232 - 2,251 SysLock (Cookie) 2,246 CMagic (CMagic.2246) 2,248 (Horse-8 & Horse-8B) 2,274 Phantom 2,267 - 2,307 approx Mutagen (Mutagen.Agent I) 2,268 - 2,313 Silly 2,287 - 2,294 Mix2 2,294 Terminator-2294 2,299 Cybercide 2,300 AVV-2300 2,316 Hambone 2,319 Horror 2,332 - 2,346 Casino 2,332 - 2,859 Idle 2,336 - 2,350 Intruder (Intruder-2336) 2,339 Mayak 2,343 Flip 2,345 - 2,394 Freddy (Freddy 2.1) 2,350 - 2,364 Miky 2,351 - 2,372 Haifa 2,351 Ghostballs 2,355 - 2,370 Munich 2,358 - 2,373 Haifa (Mozkin) 2,367 - 2,381 Possessed (Possessed 1.03A) Possessed (Possessed 1.03B) 2,370 Mayak (Mayak-2370) 2,372 Ionkin (Ionkin-2372) 2,380 Sistor (Sistor-2380) 2,383 - 2,446 2,385 Sistor (Sistor-2380) 2,389 - 2,403 Xandu Seat 2,390 - 2,404 Miky (Miky-2390) 2,400 2,403 - 2,418 Desperado 2,405 Deicide (Deicide-2405) 2,416 - 2,436 Poison 2,420 Fisher (Fisher-2420) 2,435 - 2,449 Zherkov (Zherkov-2435) 2,443 - 2,457 Possessed (Possessed-2443) Possessed (Possessed 1.07B) 2,443 - 2,458 Victor 2,446 - 2,460 Possessed Possessed (Possessed 1.07) Possessed (Possessed 1.08) 2,456 Dodo 2456 2,468 Tequila 2,480 Crew-2480 2,482 Manola (Manuel.B) 2,504 - 2,564 Maltese Amoeba 2,504 - 2,571 Maltese Amoeba (Maltese Amoeba-B) 2,505 - 2,524 Yankee Doodle (Yankee Doodle-2505) 2,520 - 2,696 Trigger 2,535 CPSU-2535 2,536 VCL (VCL.Reptoid) 2,552 - 2,637 Uruguay (Uruguay 3) 2,559 - 2,933 2559 2,560 2560 Multi 1.1 2,570 Deicide (Deicide-2570) 2,576 - 2,590 Taiwan 4 2,586 - 2,810 Slovak (Slovak-4B) 2,600 2,600 - 2,715 Crazy Eddie 2,612 - 2,626 Malaga 2,615 Criminal 2,623 - 2,633 2623 2,630 Sistor (Sistor-2630) 2,638 - 2,653 Urfydus 2,660 - 2,687 2,661 - 2,674 Malaga (Inofensivo) 2,664 - 2,678 CHCC 2,691 Gingerbread Man (Ginger.2691) 2,702 Emmie 2,710 LoveChild-2710 2,711 - 2,726 Cysta 2,716 Bizarre 2,718 - 2,859 Uruguay (Uruguay 4) 2,720 Invol (Invol-B on .SYS 2,723 Reklama 2,725 - 2,994 Keypress (Keypress-UFO) 2,728 - 2,998 Keypress (Keypress.2728) 2,754 - 2,894 DAME (MTE Spawn 2) 2,755 - 2,800 Oropax (Oropax-B) 2,756 - 2,806 Oropax 2,765 Granada 2,768 - 2,783 SysLock (Advent-B) 2,772 Yankee Doodle (Yankee Doodle-B) 2,774 Gingerbread Man 2,790 VS-2790 2,794 - 3,069 Beer 2,799 - 2,953 Connie (Connie 2.0) 2,824 MacGyver 2,825 or 3,097 Grog 3.1 (Grog.2825) 2,829 - 2,843 > (Mercury) 2,832 Invol (on .SYS (Mimic- 2,850 - 3,125 Beer (Beer-2850) 2,859 - 2,873 Liberty 2,869 - 2,883 Liberty-2 2,877 - 2,891 Sunday-2 2,881 - 2,900 Casteggio 2,885 Yankee Doodle 2,899 Yankee Doodle 2,900 - 2,908 Taiwan 3 2,900 - 2,914 Tobacco 2,900 - 2,916 Holiday 2,918 - 2,927 ABC (ABC-2918 & ABC-2918B) 2,926 2,930 Spanish Traceback II 2,936 SVC-2936 2,952 - 2,972 2,954 - 2,969 Cysta (Cysta-2954) 2,967 - 2,986 Yankee Doodle (YD Logon-2967) 2,968 - 2,987 Yankee Doodle (YD Logon-X) 2,968 - 2,982 Zherkov (Zherkov-2968) 2,969 - 2,983 Lockup 3.0 2,970 - 2,984 Zherkov (Zherkov-2970) 2,971 - 3,227 DAME (Questo) 2,971 - 3,235 DAME (DarkStar) 2,973 - 2,986 Yankee Doodle (Yankee Doodle-2973) 2,973 - 3,850 Pogue 2,982 - 3,227 DAME (CryptLab) 3,000 2560 (Magnito-3000) 3,000 & Over DAME 3,004 - 3,019 Plastique (Plastique COBOL) 3,012 - 3,020 Plastique 3,029 Traceback 3029 3,039 - 3,117 TPE (Girafe) 3,040 - 3,183 3040 3,043 - 3,139 TPE (Coffeeshop 4) 3,045 - 3,060 Newcom Yankee Doodle (YD Logon-D,-E) 3,052 - 3,067 Got-You 3,066 Traceback 3,072 PCBB (PCBB-3072) Warning 3,072 - 3,104 3,103 SVC 5.0 3,132 3,139 - 3,299 DAME (PC Weevil) 3,146 - 3,245 TPE (Bosnia) 3,160 MacGyver (MacGyver 2.2) 3,164 - 3,437 Beer (Beer-3164) 3,184 - 3,196 Storyteller 3,211 - 3,226 Rael 3,223 Man (In Man II) 3,227 - 3,483 DAME (Encroacher & Encroacher 2) 3,241 SVC.3241 3,278 - 3,519 Approx DSME 3,291 VMem 3,303 - 3,318 Tchantches 3,321 Atas II 3,368 Mutagen (Mutagen.Agent III) 3,399 - 3,672 Beer (Beer.3399) 3,424 OW Tyst 3,430 - 3,443 Bad 3,445 3445- 3,517 RAM (on . 3,539 - 3,717 DAME (Dedicated 3) 3,544 One Half 3,549 OW Terminator-3549 3,551 SysLock 3,568 - 3,668 Andre 3,577 One Half (One Half.3577) 3,582 - 3,758 DAME (Dedicated 2) 3,584 Fish 3,599 YAM-3599 3,600 - 3,615 Xpeh (Xpeh-3600) 3,619 Accept.3619 3,646 - 3,708 Groove 3,696 > (Rabid Avenger) 3,700 Telecom 3,784 Holocaust 3,808 VCL (B-52) 3,820 - 3,974 DAME (Coffeeshop) 3,839 Rubbit (Rubbit.3839) 3,840 Sparse Xpeh (Xpeh-3840) 3,840 - 7,678 Violetta 3,845 - 3,977 DAME (Coffeeshop 2) 3,846 - 3,861 Walker 3,880 Itavir 3,959 - 3,973 Democracy PZPAPN 4000_and_Over 4,000 Die Sayha Watpu Tremor 4,016 Xpeh 4,031 OW Kamikazi 4,032 OW Over-4032 4,048 Xpeh (Xpeh-4048) 4,091 HH&H 4,096 4096 Cmdr Bomber Plastique-B Revelation 4,096 - 4,110 Invader 4,096 - 4,111 Invader (Danube) 4,099 - 4,112 Shirley 4,102 - 4,112 Vivaldi 4,112 - 4,126 Mule 4,209 - 4,223 Necrosoft Dementia 4,240 OW NaziPhobia 4,243 (Mimic-Den Zuk Trojan) 4,260 OW Pascal-4260 4,496 or 5,488 OW Lucky7 4,625 Sentinel 4,644 SVC 6.0 4,661 SVC 6.0 (SVC 6.01) 4,677 SVC 6.0 (SVC 6.0-4677) 4,744 Natas (Natas.4744) 4,745 Voodoo 4,746 Natas 4,768 + Over HLLS (HLLS.Linda Lou) 4,808 Dreamer 4,828 OW Nowhere Man (Nowhere Man 2.0) 4,870 OW 4870 4,879 Uruguay (Uruguay 6) 4,893 (Mimic-Den Zuk) 4,909 - 4,925 Paris 4,915 OW Ondra (Ondra-B) 4,928 Micropox 5,000 OW Ondra 5,085 - 8,847 5,106 - 9,141 LZ (LZ-2) 5,120 5120 5,120 OW Pinky (Pinky.Clyde) 5,120 - 5,135 Slayer 5,150 Globe (Globe 3.0) 5,152 Shield 5,173 Sentinel (Sentinel-3) 5,220 OW Pascal-5220 5,302 5,402 Sentinel (Sentinel-5) 5,472 Protipus 5,476 Lancs 5,488 OW AcidWarp Harakiri 5,600 OW Leprosy (Leprosy-5600) 5,792 5,856 5,882 Lancs (Lancs-5882) 6,007 OW Madismo 6,144 OW DisDev 6,258 6,286 OW Nowhere Man 6,540 OW Fat 6,610 Globe 6,666 - 6,746 DAME (MTE Spawn) 6,672 Shifter 7,040 OW Laufwerk 7,296 7,360 Animus (Animus-7360) 7,376 Lancs (Lancs-7376) 7,392 Animus (Animus-7392) 7,408 RNA (RNA-7408) 7,424 OW Wonder 7,529 Stanco 7,808 7808 8,045 - 8,060 Cysta (Cysta-8045) 8,064 AIDS II 8,101 OW Silver Dollar (Silver Dollar-8101) 8,588 YB.Old Scribe 9,216 & Larger Whale 9,382 Vivat 9,977 Quirk 10,000 Halloween 11,636 OW House 12,032 OW Number One 12,969 TPWorm 13,952 OW AIDS 15,022 OW Green Peace 15,392 16,850 Worm-16850 17,690 Worm-17690 23,310 - 23,325 Chang (Chang 007) 23,656 + Fuse Box Dwarf 23,802 Ultimation 23,963 NTKC 29,233 - 29,372 Joker 2 Up to 31,125 MiniMax 63,491 Murphy (Br PZPAPN Entry Fields 00D = `PTD Rof the entries in Hyper consists of several fields. &is a brief description of the contents of Rfield. For fields z, or a further explanation may be necessary of possible content, selecting the field provide the : One of the more s for the . The entries ;ed in Hyper alphabetized field. the same may be referred to by. s are or A.K.A.'s. : The field :a value indicates how 9or un 9the is in the public domain. J: The crecorded @for the If the zis not the ;ed in field be the a sample was : In the event crecorded location Pnot correspond to the ating geographic location, field . It ;the geographic location of 4to the may be noticed by s. Examples of typical may be field is , if selected. The country or geographic location where the is believed to ated S: The +of the it has component. For ws, the sas N/A, for not applicable. 7: The sfor a indicate the general behavior characteristics of the The detection method entry indicates how to determine if a by the . Where the can be detected a shareware, public domain, or readily commercial product, it is s. Note "+" product's number indicates s of the product forward are applicable. Brief instructions on how to remove Where a shareware, public domain, or readily commercial remove the , it is iincludes zabout qbut not limited to: historical z, possible , possible damage the may cause, and criteria. PZPAPN The , or status, field :one of the dvalues indicate how 9the is in the public domain. The is one of the most reported to various groups gather vstatistics. Most of groups are in the . Where a has had many reports ga specific geographic area, the field where x is an indicator of geographic location. Endangered: The "Endangered" classification of es are are very un 9and were fairly recently . Due to characteristics of es, it is highly unlikely ever "a widespread problem. It Pn't mean don't exist, just the probability of one becoming tby the is fairly low. Extinct: The "Extinct" classification is for at one #widespread (ie. not a research was never released into the public domain), but mnot had a reported vin at least one year. It is still possible one could one of es, but the probability is extremely low. New: The "New" category is for recently by the author and Hyper usually carry a "new" status on entries for one to three months inclusion in Hyper es are were recently in the last year) do not to be widespread. es, as a general rule, characteristics would make them a possible future problem. " ma higher probability of one becoming Endangered or Extinct es, but are much less likely to be Research: A "Research" is a by at least one researcher gits source or author. are not #released into the public domain, so are highly unlikely to be detected on computer researchers. Rumored: The "Rumored" classification is for the author has zabout, but no sample of the #made for analysis. Any es in classification should be considered a grain of salt, may not actually exist. The " " classification is for those where the submission of the to anti- researchers is suspect for any number of reasons, or is very little about the of the The " " classification is for es. es of historically not "a major threat as vof a host is very obvious. Host are corrupted and no longer function. While it is possible to tby one of es, it is extremely unlikely to accidently PZPAPN The contents of the " :" field :easily identifiable 4to the may be noticed by s experiencing . Typical entries in field include, but is not limited to: graphics slowdowns music sound effects BSC ( 5- may require a cold re Lto find) PZPAPN Findicates how to determine if a or tby the . Anti- products referenced in Hyper - Dr. Solomon's Anti- Toolkit <commercial> - Dr. Solomon's Anti- Toolkit NLM <commercial> - Central Anti- <commercial> 0 - Central Anti- <commercial> Dr - Softech's Dr <commercial> ] - Fridrik Skulason's <shareware> 8Software's ]Professional <commercial> Gobbler2 - /RAC's Gobbler 2 - IBM Anti- <commercial> o - IBM Anti- <commercial> - Cheyenne Software's {ulan (NLM) <commercial> - Intel's La ect NLM <commercial> MSAV - Microsoft Anti- /DOS 6.0 <commercial> NAV - Symantec's Norton Anti <commercial> - Symantec's Norton Anti <commercial> 8Softwares' Net Prot NLM <commercial> - McAfee Associates' NetShield NLM Panda - Panda 's Panda Pro <commercial> - Trend Micro Devices' <commercial> - Sophos' <commercial> - Sophos' for Netware (NLM) <commercial> - Fifth Generation ' Untouchable <commercial> - Leprechaun's Buster <commercial> - RG Software's Professional <commercial> - MicroCom's <commercial> - McAfee Associates' - Safetynet's <commercial> or Safetynet's Net Professional <commercial> PZPAPN zon how to remove the . Specific products are mentioned actually dis ythe not just Dthe CleanUp - McAfee Associates' CleanUp DOS COPY - Use the DOS COPY 8to copy tnon- (able Ms to newly formatted, Ms. Do not use the DOS DISKCOPY Ms, or the new DOS SYS - Use the DOS SYS Be sure you power down the c, and ga write protected L, or the SYS copy the Note: DOS SYS not dis ynon- K, so you need to use the DOS COPY 8for non- - Fridrik Skulason's ]package - McAfee Associates' MD w. Be sure to use the corresponds to your DOS release. MSAV - Microsoft Anti- /DOS 6.0 NAV - Norton Anti - MicroCom's PZPAPN Relationship Chart Relationship Charts Alameda Chart Chart Possessed Chart Cascade Chart Keypress Chart Scream Chart >Chart Leprosy Chart Chart Flip Chart Murphy Chart Syslock Chart Friday 13th Chart N. Hacker Chart ^Chart Hydra ^Chart Pixel Chart Traceback Chart Icelandic Chart Ping Pong Chart Chart Relationships PZPAPN Alameda Chart Alameda Alameda-2 Alameda 1.2M Golden Gate Golden Gate-B Golden Gate-C PZPAPN Cascade Chart Cascade (1701) 1701-B 1704 1704 Format 1704-B Cascade-1704G 17Y4 Cunning 1661 1661-B 1661-C Cascade-1621 Cascade 1701.E Cascade.1702 Cascade-1706 JoJo JoJo 2 JoJo-B JoJo-C 1701-Yap PZPAPN >Chart V1024 1963 Amilia Boroda CB-1530 Edcl Edct Edcl-B Alexander >-1693 >.1797 >-1799 >.1800.Satan >1801 >-1813 Rabid Avenger >-Romanian >.Shyster Dark Quest Evil Men Father >.Jericho.1000 Jericho Kang Yong Mercury Outland PS!KO PS!KO-1800 PS!KO-1687 PS!KO-1459 Sneaker V651 V800 V800M V2000 V2000-B V2100 M.I.R. Apocalypse II VAN Soft Diamond Diamond-B Ah-B Damage Damage-B Lucifer Diamond-444 Diamond-465 Diamond-485 Diamond-584 Diamond-594 Diamond-602 Diamond-606 Diamond-607 Diamond-608 Diamond-609 Diamond-614 Diamond-620 Diamond-621 Diamond-624 Diamond-626 Diamond-891 Diamond-978 Diamond-1013 Gremlin PZPAPN Flip Chart Flip Flip-2153 Tequila Flip-2153B Prism Raistlin Flip-2343B PZPAPN Friday 13th Chart Friday 13th Friday 13th-B Friday 13th-C Friday 13th-D Friday 13th-NZ Friday 13th-540C Friday 13th-978 Brazilian Bug QFresh Edge PZPAPN Hydra ^Chart Hydra-0 Hydra-1 Hydra-2 Hydra-3 Hydra-4 Hydra-5 Hydra-6 Hydra-7 Hydra-8 PZPAPN Icelandic Chart Icelandic Icelandic-IB Icelandic-IC Icelandic-II Icelandic-III Dec 24th Mix1 Mix1-B Snow Mix2 Saratoga PZPAPN Chart Suriv 3.00 Fu Manchu Taiwan 3 Fu Manchu-B JVT1 JVT1-B Messina Nemesis Ucender RAM New Payday Sunday Sunday-B Sunday-C Sunday.Satan Sunday-UNAM Sunday-2 Sunday-2B Carfield Spanish JB 1720 (PSQR) Australian 1720-B PCBB PCBB-3 PCBB-3B PCBB-5 PCBB-5B PCBB-3072 PCBB-1141 1210 (Prudents) 1244 1244-B Frere Jacques Anarkia Anarkia-B Antiviru Slow Scott's Valley Slow II Slow III Slow IV Westwood 1605 1605-B Park ESS Skism-1 Skism (See HM2) Discom Captain Trips Captain Trips 2 Swiss 1813 Phenome Apocalypse Mule Get Password 1 25TH 25TH-B Barcelona China Czech Dragon Freddy Freddy 2.1 11-30 -Haifa -Polish .Suselfo Moctezumas Revenge Moctezumas Revenge 2 Poison Poison 2 Poison 3 Mummy 1.0 Mummy Mummy 2.1 Mummy 2.1B Mummy 2.1C Oscar Puerto Bogota Soy Un Sub-Zero Sub-Zero B Sub-Zero C Tabulero Tabulero-B Tabulero II Timor Totoro Triple PZPAPN Keypress Chart Keypress Keypress-B Keypress-E Keypress-1232X Keypress-1238 Keypress-1238B Keypress-1238C Keypress-1268 Keypress.2728 Keypress-Chaos Keypress-UFO Keypress-Freddy Soft SamSoft SamSoft-B St Leos Turku Keypress-Viring PZPAPN Leprosy Chart Leprosy Leprosy-B The Plague Angel Of Death Leprosy-654 Leprosy-664A Leprosy-5600 Leprosy-FVHS Leprosy-C Leprosy-D NightCrawler 3.0 RMIT Scribble Silver Dollar Silver Dollar-8101 Silver Dollar-2A Silver Dollar-2B Silver Dollar-2D Silver Dollar-2F Silver Dollar-SHJH Silver Surfer Xabaras PZPAPN Murphy Chart Murphy Murphy-2 Murphy-4 HIV Tormentor Creeper Creeper-B Tormentor-1040 Tormentor-1072 Tormentor-1072B Tormentor-1072C Tormentor-1072D Nuke Lixo Nuke Migram Italian Pest Smack Goblin Swami Diabolik Murphy-3 Finger Erasmus AntiChrist Locker Kamasya Cemetery Delyrium PZPAPN N. Hacker Chart Horse 2 Horse Horse 5 Horse-8 Horse-8B PZPAPN Pixel Chart Pixel Amstrad Pixel-847B Pixel-852 Pixel-854 Amstrad-Luz Amstrad-End Is Near Amstrad-End Is Near B Pixel-299 Pixel-277 Pixel-295 Pixel-283 Pixel-275 Pixel-257 Pixel-342 MS-748 Pixel-739 Pixel-779 Pixel-837 Pixel-850 Dropper Pixel-850 Hell Hell-892 Pixel-897 Pixel-899 Pixel-899B Pixel-905 Silly-365 Silly Pixel.1268 Pixie Pixie 1.0B Portugal-500 Pixel-297 PZPAPN Ping Pong Chart Ping Pong Ping Pong-B Ping Pong-C Big Italian Typo Print Print Ghostballs Ghostballs.1 PZPAPN Possessed Chart Possessed 1.03A Possessed 1.03B Possessed-2443 Possessed 1.07B Possessed 1.07 Possessed 1.08 Possessed PZPAPN Scream Chart Enemy Stranger Emf Scream Scream 2 Scream 2-696 Scream-650 Scream 2-732 Scream 2B Scream 2C Scream 1B Emf-625 PZPAPN Chart Rostov Sex Revolution V1.1 Sex Revolution V2.0 -Collor -Mexican Swedish Disaster -AT Love Cansu Evil Empire Evil Empire-B HiDos Horse Michelangelo Monkey Parity Mutation Deunis WXYC PZPAPN Syslock Chart SysLock Macho Macho-B Advent Advent-B Cookie PZPAPN ^Chart -198 -143 -143B Note: The -163 or is not related to the PZPAPN Traceback Chart Traceback II Traceback Traceback-B Traceback-B2 Traceback 3029 Traceback II-B Spanish PZPAPN Chart Father Christmas NTKC Father Christmas-B Lisbon Lisbon-B Lisbon-B2 Ghostballs Ghostballs.1 1260 V2P2 V2P6 V2P6Z V2P6-B Casper Adolph Oi Dudley W13 (V-534) W13-B (V-507) Dushanbe Gipsy-304 Plumbum Plumbum-B Plumbum-C Plumbum-D Plumbum-E Plumbum-F Plumbum-G Plumbum-M1 Plumbum-M2 W13-Req W13-361 W13-377 Wien (Poland) Vien6 -B 645 -648E -634 Re -Abacus -Feliz -Kaszana -Refresh Violite B2-969 Baby Grither VHP-348 VHP-353 VHP-367 VHP-435 VHP-623 VHP-627 VHP-757 VHP-776 Iraqui Warrior Arf-B Dr Q Dr Q-1028 Genny-648 Incom Interceptor Maxwell-498 Maxwell-499 Monxla Monxla B -New Years Polish 583 Sicilian Mob Parasite Parasite 2 Parasite 2B Vengeance Vengeance-B Vengeance-C Cracky Kuzmitch Mexican Mud New Generation Rattle Twer-1000 -Beta Boys -Beta Boys 730 -CDM.A -CDM.B -CDM.C -YAM 92 -YAM 92B Viperize Viperize-B PZPAPN Relationships 10 Past 3 10 Past 3-B 334 334-B 334-C 382 Recovery 382 Recovery.1 512 512-B 512-C 512-D 512-E 512-F 834 834-B (Arab) 99% 99%-B 1226 1226M 1226D 1226-B 1963 1963-B 2560 2560-B 2560-C Magnitogorsk 2048 Magnum Magnito-3000 4096 4096-B 4096-C 4096-D 4096-E Fish Whale Fish II Fish F Kradee 1.0 5120 Slayer AirCop AirCop-B Akuku Metal Thunder Akuku-3 Cop-Mpl Wilbur Wilbur-B Wilbur-C Wilbur 2 Wilbur 3 Columbus Alfa-1150 Alfa-1202 Alfa-1712 Alfa-Tired Ambulance Car RedX-Any Ambulance Car-B Animus Animus-7392 AP-529 AP-400 AP-440 AP-480 AP-480B AP-440B Anti-Tel Telecom Holocaust Armagedon Armagedon-1077 Armagedon-1074 Armagedon #911 Astra-976 Astra-1010 Astra-498 Astra-510 Astra-521 AT144 AT149 AT108 AT114 AT118 AT122 AT140 Atas Atas II Atas-400 Trojector Foetus 1.1 Trojector-B Attack-918 Attack AtomAnt 1.0 AtomAnt 3.0 Atomic 1 Atomic 1B Atomic 2 Atomic 2B Azusa Azusa 2 Bad Boy Bad Boy 2 Immortal Riot Bad Boy-D Immortal Riot.B Badsec BackFont-896 Beta Ministry Elvis-1250 Best Wishes Best Wishes B Best Wishes C BFD-452 Bit Addict-496 Bit Addict Black Monday-C Black Monday Black Monday-B Borderline Blaze Blood Blood2 Boys Boys 2 Brain Ashar Clone Chaos Nipper Cacophony Cacophony 2 Cannabis Cannabis 2 Cannabis 3 Casino Casino-B Casino-C CheckSum CheckSum 1.01 CheckSum 1.01B CheckSum-1569 Civil War-Lockjaw Lockjaw.499 Lockjaw.507 Civil War Proto-T Civil War II v1.1 Civil War III v1.0 Civil War IV v1.1 Civil War V v1.0 Civil War-282 Ritzen [Note: Civil War IV v1.1 and Civil War V v1.0 are listed under the entry for TPE as the TPE engine.] CMagic CMagic.2246 Copyright Ungame Copyright-1205 Cossiga Friends Cossiga-B Crazy Imp-1402 Crazy Imp Crazy Imp-B Cruncher Cruncher 2.0 Cruncher 2.1 CSL Beta CSL V4 CSL V5 Cybercide MLP-1321 DNR DNR-ROM Bios Cybercide-2299B CyberTech CyberTech-B CyberTech-222 CyberTech-501 CyberTech-654 Darth-1 Darth-2 Darth-3 Darth-4 Darth-5 Darth-3B Datacrime Datacrime-B Datacrime II Datacrime IIB Datacrime IIC DataLock DataLock-1043 DataLock-D DataLock-828 DataLock-1740 Deicide Breeze Deicide-B Deicide 2 hood Deicide-2405 Deicide-2570 Desperado Desperado.2403B Desperado.2403C Dest-1 Dest-2 Dest-3 Devil's Dance Devil's Dance-B Devils & Evangels Devils & Evangels.1526 Devils & Evangels.1634 Devils & Evangels.1792 DM DM-B DM 1.04 DM-330 DM 1.01B Do-Nothing Saddam Profesor Doom II Doom II-B Dot Killer Dot Killer B DOS7 DOS7-B DOS7-C Dutch 555 Dutch 555-B Subliminal 1.10 Dyslexia 2.00 Solano 2000 Solano B Solano D Anti-Print Ear Suicide Quake-O NPox Evil Genius 2B Evil Genius 2C NPox 2.0 NPox 2.1 Experiments-416 Experiments Exterminator BadGuy Demon Demon-B Demon-C BadGuy 2 Fich Fich-B Fich-C Fich-897 Fichv-896 Finnish-709 Finnish-357 Fisher-2420 Fisher FORM- FORM-18 Form II Form-Canada Frodo Soft-458 Frodo Soft Genesis Genesis.226 Genesis.238 Genesis.295 Gergana Gergana-222 Gergana-300 Gergana-450 Gergana-182B Golgi Golgi 2.0 Golgi 3.0 Golgi.Oracle Gotcha Gotcha-B Gotcha-906 Gotcha-627 Gotcha-E Gotcha-A2 Gotcha-732 Gotcha-Mut1 Gotcha-Mut2 Gotcha-Mut3 Gotcha-Mut4 Tchantches Mila E-Riluttanza Grog 3.0 Grog 3.1 Woodstock Mormorio Nocciola GSav 1.0 GSav 1.1 Grunt-1 Grunt-1B Grunt-3 Grunt-4 Hafenstrass Hafenstrass 2 Hafenstrass-D Hafenstrass-1191 Hafenstrass-1191B Haifa Mozkin Happy New Year Happy New Year B Hellween Hellween-1182 Zak2 HM2 Plastique Plastique 4.21 Plastique 5.21 Invader Plastique COBOL Tobacco Tobacco-B Imi Imi.B Imi.C Imi.D Imi.E Imi.F Man II Joshi Joshi-B Headache Why Windows Data Molester Horror Horror-1137 Horror-1137B Horror-1112 Hungarian 482 Hungarian Gyorgyi Ice 9-159 Ice 9-199 Ice 9-224 Ice 9-250 Ice 9 Ice 9B Intruder Intruder-B Bell Intruder-1326 Intruder-1440 Intruder-1967 Intruder-1988 Intruder-2336 Invol Invol-B Japanese Christmas Japanese Cookie Japanese Christmas-B Japanese Christmas-C Japanese Christmas-D Japanese-709 Jerk Jerk-B Joanna Joanna 1.11 Joanna-911 Joanna-911B 13TH 13TH-B 13TH-C Kemerovo Kemerovo-B Kemerovo-C Kennedy Brenda Brenda-B Stigmata Kode4-129 Kode4 Kode4-B Kohntark K-4B K-4C Lazy Lazy-2 LCT-762 Little Br Little Br Little Br Little Br Little Br Little Br Little Girl Little Girl 3.0 Lycee Lycee-1832 Lycee-1888 Lycee-1975 LZ LZ-2 Malaga Malaga-B Inofensivo Malmsey Malmsey 2 Malmsey 3 Beta Marl Marauder Deadpool Mayak-2370 Mayak Lapse Lapse-375 Chromo 1.0 Chromo 2.0 Chromo 3.0 MG MG-2 MG-3 MG-3B Mini-45 Define Define-256 Dust Mini-35 Mini-44 Mini-46 Mini-99 Mini-97 Mithrandir Lockup Mithrandir III-B MMIR MMIR.Ravage MMIR.Moonlite MMIR.In Mosquito Topo Pfish Lamer MPS 1.1 MPS 3.1 MPS 3.2 MPS 3.2-B MPS II-754 Mr. G Mr. D Mutant 128 Mutant 127 Mutant 123 Mutation Mutation Necro Shadow Necro Shadow-B Necrosoft Dementia Necrosoft Dementia-B Nines Nines-706 Nines-776 No Frills No Frills 1.01 No Frills 2.0 No Frills 3.0 Nowhere Man VMessiah Nowhere Man 1.9 Nowhere Man 2.0 7Zero (VCL) 7Zero-652 Diarrhea Diarrhea6 Donatello Earth Day Earthquake Heevahava Kinison Pearl Harbor VCL-YD2 Number One AIDS AIDS-B AIDS- Number One-B Number One-Argentina Nygus Nygus-Klaw Offspring v.05 Offspring Offspring v.81 Ohio Den Zuk Den Zuk-RPKS Mardi Bros Ontario 1024 SBC Ontario III Particle Man Particle Man 2 Paturuzu Paturuzu.931 Pay Rise Pay Rise-874 PC Flu PC Flu-2 PC Flu-2B PC Flu-2D PC Flu-2E PC Flu-2F Perfume Sorry Phoenix PhoenixD Evil-B Evil V82 Phoenix 2000 Plovdiv 1.1 Plovdiv 1.3 Plovdiv 1.3B Polish 217 Polish 217 B Polish 217 C Predator Predator-1148 Predator-1154 Predator-1195 Problem-734 Problem Problem-863 R-10 R-11 Radyum Radyum-B Radyum-C Radyum 2-707 Rasek Rasek.1492 Raubkopie Raubkopie-FRD Red Diavolyata Red Diavolyata B Rocko Mutating Rocko Rocko-B Rubbit Rubbit.1018 Rubbit.2060 Rubbit.3839 Semtex Semtex-B Semtex-C Semtex-D Sentinel Sentinel-3 Sentinel-5 Seventh Son-350 Seventh Son-284 Seventh Son-Kernel Seventh Son-332 Shhs Secret Service Siskin-1017 Siskin-948 Siskin-Goodbye Sistor-2225 Sistor-2380 Sistor-2630 Sistor-1129 Sistor-J4J Skater Skater-977 Slovak 1.00 Slovak 2.00 Slovak 2.02 Slovak 3.00 Slovak-4 Slovak-4B Sofia Term Sofia Term.887 Soupy Soupy-B Sparse Sparse-B Spring Spring-768 Sterculius Sterculius.440 StinkFoot StinkFoot-1273 StinkFoot-2B SVC 3.1 SVC 4.0 SVC 4.0-1740 SVC 5.0 SVC 6.0 SVC 6.01 SVC 3.1-CHR SVC 5.0B SVC 6.01-B SVC 5.0C SVC 6.0-4677 SVC 5.0D Sverdlov Sverdlov-B Sylvia Sylvia 2 Taiwan-B Doom I Taiwan Doom I-B Note: The Taiwan-B thru Doom I-B grouped together in the as Taiwan . Dutch -126 Dutch Dutch -124B Dutch Dutch Mini-99 Mini-97 Ten 1415 +-1514 +-1514B Dark Lord Dark Lord-B mark 2 Timid-Orig Timid Hehheh Timid-290 Timid-371 Timid-297 Timid-305 Timid-382 Timid-431 Timid-526 Timid-557 Timid-LM Todor Todor-B Tormentor-205 Tormentor-360 Tormentor-358 Tormentor-263 Troi Troi-2 Troi-2B Tula-417 Tula Tula-593 Tula-635 Tula-1480 Tumen V.5 Tumen V1.2 Tumen V1.3 Tumen V2.0 Twister Twister.863 Twister.1015 Twister.1767 Uruguay 3 Uruguay 4 Uruguay 5 Uruguay 6 Uruk-hai Uruk-hai 300 Uruk-hai 361 V-10 V-11 V-30 V-31 V-32 VCS Manta DarkSide VCS-Post Violetta Violetta-1024 Vote Vote-1000 Warrior Warrior 2 Wasp Wasp.909 Wild Thing Wild Thing 2 Wild Thing-289 Wit Stasi Wolfman Wolfman 2 WordSwap-1085 WordSwap-1069 WordSwap-1387 WordSwap-1503 WWT 01 WWT 02 WWT 02B X-1 X-2 X-3B X-1B XPH XPH-1029 Xuxa Xuxa-B Xuxa-1405 Anti-D Anti-D B Yankee 2 Enigma Bandit Youth Silence Futhark Hannibal Zero Bug Zero Bug B ZeroHunt ZeroHunt B ZK900 ZK900-B PZPAPN Revision History Hyper 9503 9501 9411 9409 9408 9406 9404 9403 9401 9312 9310 9309 9308 9307 9306 9305 9304 9303 9302 9301 Pre- revision history data on request. PZPAPN X 9503 - March 31, Number of es and : 2,905 The descriptions , or new Arusiek - Arusiek.692 Aussie Parasite - Aussie Parasite.588 - Aussie Parasite.591 - Aussie Parasite.635 - Aussie Parasite.726 - Aussie Parasite.762 - Aussie Parasite.1050 - Aussie Parasite.1179 - Aussie Parasite.Comic - Aussie Parasite.Lipo Bad Boy - Immortal Riot.B Beer - Beer.645 Civil War - Civil War.158 - Lockjaw.499 - Lockjaw.507 Frodo Soft - F-soft - Frodo Soft.633 - Frodo Soft.656 Gingerbread Man - Ginger.2691 - Imi.1536 - Imi.1538 - Imi.1656 Incest - Daddy.1117 & Incest.1117 Intruder - Intruder.1331 - Intruder.1355 Lycee - Lycee.944 Marzia - Marzia.N Nina - Nina.D Nympho 1.0 - Nympho.230 One Half - One Half.3577 Praying - Praying.579 - Praying.587 Skater - Skater.664 Sterculius - Sterculius.240 Sundevil - Sundevil.762 Timid - Timid.300 .Ambalama Wizard 3.0 - Wizard.312 YB.Old Scribe - YB.316 ZigZag - ZigZag.232 The dnew to the Abal - Abal.758 Anti - or NewBug Crazy Priest Dicker - Dicker.400 Dinky - Dinky.122 Dzino Fission Gollum Helicopter - Helicopter.777 Jack Jasmine KeyKap - KeyKap.1074 - KeyKap.1077 Kipa Klepavka Kuang Late Night Mohova - Mohova.659 My Child - or B1 Platov Rajaat - Rajaat.287 - Rajaat.679 - Rajaat.700 Raver Shizol Skid Row - Skid Row.418 - Skid Row.432 - SNA.393 or Kid Sybille - Sybille.853 Sylwia Syrian - Syrian.241 - Syrian.412 - Sze.314 - Sze.351 Wally Wrzod The products were 2, and detection zhas - Dr Solomon's Anti- Toolkit DOS, (*) - Dr Solomon's Anti- Toolkit NLM, - Central Anti- DOS, Vers. 2.2 9503 upd. (*) - Central Anti- NLM, Vers. 2.5 8Software's ]Professional, Vers 2.17 - IBM's IBM Anti- DOS, (*) - IBM's IBM Anti- NLM, - Norton Anti- DOS, 3.05 9503 up (*) - Norton Anti- NLM, 1.05 9503 up (*) 8Software's Net-Prot NLM, (*) - McAfee Associates' NetShield, - Sophos Ltd DOS, (*) - Sophos Ltd NLM, - McAfee Associates' 2.1.7 Note: (*) denotes the product is an NLM. Microsoft Anti- (MSAV), Panda, Dr , and Central Anti- NLM ( #removed gthe individual entries. PZPAPN X 9501 - Number of es and : 2,831 The descriptions , or new - Ash.546.B Leprosy - Leprosy.Wannabe Manola - Manuel - Manuel.B Mutagen - Mutagen.Agent I - Mutagen.Agent III .DeathBoy The dnew to the AcidWarp Black Hawk Coyote Lucky7 Mercy Mirage NTit - NTit.1254 - NTit.1578 PPSP - PPSP.1526 Python Scramble - Scramble.1253 Split - Split.250 Split Second - Split Second.1135 - Split Second.1149 Sword - Sword - Sword.B Vivat Xandu The products were 2, and detection zhas (*) - Cheyenne's Inoculan NLM, - Symantec's Norton Anti- - McAfee Associates' 2.1.4 Note: (*) denotes the product is an NLM. PZPAPN X 9411 - Number of es and : 2,806 The descriptions , or new - DM.310 - F1-337 - Beech - Int86 - Jihuu.621 1804 - Dashel - Ash.270 - Ash.441 - Ash.449 - Ash.451 - Ash.546 - Ash.737 Atomic 2 - Atomic.166 - Atomic.967 Aussie Parasite - Aussie Parasite.306 - Aussie Parasite.482 - Aussie Parasite.491 - Aussie Parasite.784 - Aussie Parasite.1041 - Aussie Parasite.1169 CyberTech - CyberTech.552 Deicide - Deicide II.623 Golgi - Golgi.886 or Warchild Ice 9 - Ice 9.639.Starfish Maaike - Maaike.757 - Genvir, GV NPox - NPox.372 Pixel - Pixel.1268 Seventh Son - Seventh Son.473.B Tai-Pan 9list - Danish .NC.284 Trident - Trident.439 - Trident.454 - Trident.914 .707 - XPH.DR&ET The dnew to the - 3Y.853 4-days A-Bomb Acvt Appelscha Arara - Arara.1057 Baron Berlusca Blood Rage Bobo - Bobo.530 X.205 Breaking - Breaking.1000 Capicua Chill CMagic - CMagic.2015 - CMagic.2246 Cocaine Connie - Connie.1761 - Connie.1761.B - Connie.2799 or Connie 2.0 Cpxk Curse IV Dichotomy DSME - DSME.T Genc - Genc.502 - Genc.1000 Gusano - Hot.130 Jump - Jump.466 Junkie Just.398 Kali-4 Koko - Koko.1783 Literak Lo Tek Magician Marked-X Ming - Ming.1017 Mutagen - Mutagen.Garden Nanite Narcosis One Half - One Half.3544 Osiris Pinworm Polifemo Positron Raptor Rasek - Rasek.1490 - Rasek.1492 Rider - Rider.577 Rubbit - Rubbit.681 - Rubbit.1018 - Rubbit.2060 - Rubbit.3839 Satyricon - Satyricon.348 or Demon.348 Scorpio Seat - Seat.2389 or 2389 SillyOR - SillyOR.76 - SillyOR.88 - SillyOR.94 - SillyOR.97 - SillyOR.101 Slub Sparkle Synergy Tamper Taurus The Click Vampire Veronika Vicious - Vicious.918 VLamix Wasp - Wasp.629 or SSI 1.00 - Wasp.909 or SSI 2.01 Western Ukraine - WZ.495 The products were 2, and detection zhas - S&S Intl's Dr. Solomon's A-V Toolkit DOS 6.69 (*) - S&S Intl's Dr. Solomon's A-V Toolkit NLM 6.66 [Note: is the last the vendor via regular product mailings.] - IBM's Anti- For DOS, 1.07E - Norton Anti- Vers 3.0 11/94 Up - Sophos' DOS, (*) - Sophos' NLM, - McAfee Associates' 2.1.3 Note: (*) denotes the product is an NLM. PZPAPN X 9409 - Number of es and : 2,697 The descriptions , or new Alexander - Alexander.2104 Astra - Astra.1556 Aussie Parasite - Aussie Parasite.272 - Aussie Parasite.292 - Aussie Parasite.292.B - Aussie Parasite.Gotter Beer - Beer.3399 Cascade - Cascade.1702 >.1797 >.1800.Satan >.Major >.Shyster Deicide - Deicide II.622 Dutch - Dutch .111 Gippo - Gippo.Bumpy Intruder - Intruder.1555 - IVP.Angry Samoans Jericho >.Jericho >.Jericho.1000 - Jabberwocky.615 Liberty-2 - Liberty.2867 Lycee - Lyceum.1901 Oxana - Oxana.1719 Pinky - Pinky.Clyde .Greetings .Mom .Powermen.717 ^.Fred - Danish .476 Totoro - Totoro.B - VCL.Blue Moon - VCL.Noble - VCL.Reptoid VComm - VComm.633 YB.Old Scribe - YB.466 - YB.647 Youth - Youth.580 The dnew to the Baba - Baba.353 Burma.563 Devils & Evangels - Devils & Evangels.1456 - Devils & Evangels.1526 - Devils & Evangels.1634 - Devils & Evangels.1792 Die Genesis - Genesis.217 - Genesis.226 - Genesis.238 - Genesis.295 - Imi.A - Imi.B - Imi.C - Imi.D - Imi.E - Imi.F Incest Little Red Natas - Natas.4744 - Natas.4746 Reverse.A Sofia Term - or Sofia Term.839 - Sofia Term.887 Tai-Pan - or Whisper Tajfun - or Tajfun.250 or Tajfun 1.0 Twister - Twister.451 - Twister.863 - Twister.1015 - Twister.1767 PZPAPN X 9408 - Number of es and : 2,632 The descriptions , or new Abraxas 5 - Abraxas.1508 Aussie Parasite - Aussie Parasite.440 or Anke Barrotes - Barrotes.849 Budo - Budo.1000 Cansu - V-Sign FireFly - FireFly.1087 Golgi - Golgi.1173 - Golgi.DEI Grog 3.1 - Grog.202 or Trumpery - Grog.324 or Aver_Torto - Grog.377 or Sempre - Grog.566 - Grog.798 or Wild Cards - Grog.800 or Public - Grog.801 or Razor - Grog.926 - Grog.2825 or Grog 5.0 - Grog.Dream - Grog.Gonfie - Grog.Hop - Grog.Il_Mostro - Grog.IlCuoco - Grog.Inc - Grog.N male - Grog.NTA - Grog.Ovile Hiperion - Hiperion.249 - IVP. Showers - IVP.Walky .2389 Mayberry - Mayberry.Dementia Mordor.1110 - Mordor.538 .Walt.311 Skynet - Skynet.1809 Swedish Boys - Swedish Boys.Headache.441 - VCL.551 - VCL.587 - VCL.Angel.436 - VCL.Elena - VCL.Olympic The dnew to the Accept.3619 Dejmi - or Susenka Doubleheart - Doubleheart.452 - Doubleheart.452.B - Doubleheart.649 FeelBad Turn.557 The products were 2, and detection zhas (*) - McAfee Associates' NetShield, 1.6V117 (Netware 3.11 - McAfee Associates' 9.30V117 Note: (*) denotes the product is an NLM. PZPAPN X 9406 - Number of es and : 2,586 The descriptions , or new Cinderella - Cinderella.C Frajer-649 - Frajer.524 Gippo - Gippo.JumpingJack Grog 3.1 - Grog.903 Hellween - Hellween.1684 Icelandic - Icelandic.655 - IVP.Taselhoff Seventh Son - Seventh Son.426 - Leningrad Sunday - Sunday.Satan Tiso - Tiso.1279 Yankee Doodle - Yankee Doodle.Warlock The dnew to the Chaos Year - Chaos Year.1837 Distrust Dostepu Ignorant Leningrad II Maaike - Maaike.164 - Maaike.250 Max.347 Mayberry - Mayberry.402 - Mayberry.409 - Mayberry.475 - Mayberry.496 - Mayberry.502 - Mayberry.609 - Mayberry.687 - Mayberry.732 - Mayberry.747 - Mayberry.758 - Mayberry.828 MMIR - MMIR.Extasy - MMIR.In - MMIR.Moonlite - MMIR.Ravage NeverMind Paturuzu - Paturuzu.1024 - Paturuzu.931 Phalcon.894 Rael Riihi Skynet The products were 2, and detection zhas - S&S Intl's Dr. Solomon's A-V Toolkit DOS 6.64 (*) - S&S Intl's Dr. Solomon's A-V Toolkit NLM 6.64q 8Software's ]Professional, Vers 2.13 (*) - Norton Anti- NLM, 6/94 Up (*) 8Software's Net-Protect, (*) - McAfee Associates' NetShield, 1.6V116 (Netware 3.11 - McAfee Associates' 9.28V116 Note: (*) denotes the product is an NLM. PZPAPN X 9404 - May 2, Number of es and : 2,545 The descriptions , or new Barrotes - Barrotes.840 - Barrotes.1303 Cybercide - Cybercide-2299B Fish - Kradee 1.0 - G2.Punisher Gippo - Gippo.Earthquake - Gippo.Stunning Golgi - Golgi.Oracle Grunt-1 - Grunt-4 .Suselfo Keypress - Keypress.2728 - No God Suriv 2.01 - Suriv 2.01B - Beethoven The dnew to the Blood Sugar Bloody Warrior Desperado - Desperado.2403A or Desperado 1.0 - Desperado.2403B or Desperado 1.1 - Desperado.2403C Ebbelwoi Enemy Geodesic 2.0 Hexametricx HLLS - HLLS.Linda Lou Keeper - Keeper.Acid or Acid Trip March 25th Mordor.1110 Psychosis Sterculius - Sterculius.280 or Sterculius I - Sterculius.440 or Sterculius II SVC.3241 Tamanna Vinchuca Voodoo YB.Old Scribe The products were 2, and detection zhas (*) - McAfee Associates' NetShield, 1.6V113 (Netware 3.11 - McAfee Associates' 9.25V114 Note: (*) denotes the product is an NLM. PZPAPN X 9403 - March 23, Number of es and : 2,510 The descriptions , or new Amstrad - Amstrad-End Is Near B - Trojector-B Butterflies - Crusades Civil War - Ritzen >-1693 >-1799 >-1813 - Mercury Flip - Raistlin - G2-Mudshark Gippo - Sunrise - IVP-Ozzy - Kubla Kahn - Sub-Zero C Keypress - Keypress-1232X - Keypress-Freddy Soft Leprosy - Leprosy-664A MacGyver - MacGyver 2.2 - 7% Solution 2.0 - Love Bink - Silent Killer - Angel - VCL-409 The dnew to the Arale Avispa Cacophony - Cacophony 1 - Cacophony 2 Dead-790 DLSU Green Caterpillar-1989 Hambone Jason MPS II-754 The products were 2, and detection zhas (*) - Central Anti- NLM, - S&S Intl's Dr. Solomon's Anti- Toolkit 6.60 (*) - Norton Anti- NLM, - Sophos' DOS, (*) - Sophos' NLM, - McAfee Associates' 9.23V112 - Safetynet's Net Professional, 2.11a Note: (*) denotes the product is an NLM. PZPAPN X 9401 - Number of es and : 2,477 The descriptions , or new Bad Boy - Bad Boy-D Bljec - Bljec-235 - Bljec-284 Civil War - Civil War-282 Cybercide - MLP-1321 CyberTech - CyberTech-654 Darth Vader - Darth-3B DataLock - DataLock-1740 Faerie - Faerie-276 Globe - Globe 3.0 or HLL-5150 Hitchcock - Hitchcock-1238 - AReg-822 13TH-C Mystic-377 - Mystic-379 Protecto - Protecto-1323 - 7% Solution 3.0 - VCL-JP2 -827 -Feliz -Kaszana Warrior - Warrior 2 The dnew to the 1784 4Res AVV-2300 Big Bang Chris Cobra 9wealth Democracy FireFly Foetus 1.1 Gidra-469 Groz-999 Hobbit Ilja-1704 Julia-1000 - Julia-1000 - Julia-1027 Kremikovtzi - NGV-1376 - NGV-Cousin It - NGV-Gomez - NGV-Morticia - NGV-Lurch - NGV-Pugsley - NGV-Thing - NGV-Uncle Fester - NGV-Wednesday Roguey Student-776 Thirty Three VS-2790 Wanderer The products were 2, and detection zhas - Central Anti- 8Software's ]Professional, Vers 2.10g - Norton Anti- Vers 3.0 30A02 (*) 8Software's Net-Prot, (*) - McAfee Associates' NetShield, 1.56V111 (Netware 3.11 - Trend Micro Devices' - McAfee Associates' 9.21V111 Note: (*) denotes the product is an NLM. Note2: Pre- through "D" for the products. The remainder of be included in the release. PZPAPN X 9312 - A16, Number of es and : 2,426 The descriptions , or new 1575 - 1575-Libin Carioca - Carioca-B Civil War - Civil War-Lockjaw Cruncher - Cruncher 2.1 CyberTech - CyberTech-501 or Ice Cream DataLock - DataLock-828 Eight Tunes - Eight Tunes-Mod1 Father Christmas - Father Christmas-B Friday 13th - Friday 13th-540C - Friday 13th-978 Icelandic - Icelandic-ID - Icelandic-IE JoJo - JoJo-C MindRiot - MindRiot-B Oropax - Oropax-C - Oropax-D - 7% Solution - Abraxas-1520 Sorlec - Sorlec 6 Traveller - Traveller-C - Traveller-C2 - Traveller-C3 -Abacus - W13-534C - W13-534D - W13-534E - W13-537 - W13-B2 - W13-B3 The dnew to the 1403 Axe-1024 Darkray Death Dragon or Eddy'93 - DNR - DNR-ROM Bios DOS-1 Fairz or Khobar Flue Gippo Godoy Holiday Multi Child - Multi Child-104 - Multi Child-110 Pirate 1344 Poor Man Small-115 Storyteller Trident - Trident-611 or Bugfix 1.1 - Trident 90210 - Trident-444 or Servant Voice-1495 The products were 2, and detection zhas - IBM's IBM Anti- /DOS, (*) - McAfee Associates' NetShield, 1.55V109 (Netware 3.11 - Datawatch's Virex For The PC, - McAfee Associates' 9.20V109 - Safetynet's Net Professional, Note: (*) denotes the product is an NLM. PZPAPN X 9310 - Number of es and : 2,375 The dcertified product(s) #removed, or are in the process of %removed, gHyper #either discontinued by vendor or it has #over one year since last Detect+ - Over 1 year since last Iris - Over 1 year since last Novi - Over 1 year since last Trend - Over 1 year since last - Over 1 year since last The descriptions , or new Cascade - Cascade 1701.E Civil War - Civil War II v1.0 Clonewar - Clonewar 2 - TrekWar DAME - PC Weevil - Sneaker Grog 3.1 - E-Riluttanza - Grog 3.0 - GSav 1.0 - GSav 1.1 - Lor - Mila - Mormorio - Nocciola - Woodstock Hallo-496 - Hallo-751 - Hallo-759 Lokjaw - Lokjaw-Zwei Matura - Matura 92 - Armana-564 - Nirvana - T-Rex - Bosnia - Paranoimia Yankee Doodle - YD Logon-2967 Zherkov - Zherkov-2435 The dnew to the Blinky Collor de Mello Cybercide Dirty Faerie Freak Gipsy-304 Golgi - Golgi 1.0 - Golgi 2.0 - Golgi 3.0 Handi-215 Honey Inky Jericho K-Hate MacGyver Mercenary Metallica II Mithrandir - Mithrandir I - Mithrandir III-B Naught-865 Nympho 1.0 Pinky Protipus Sayha Watpu Sluknov Smaug TBug-634 Varicell The products were 2, and detection zhas - Symantec's Norton Anti- Note: (*) denotes the product is an NLM. PZPAPN X 9309 - Number of es and : 2,317 The descriptions , or new Bad Boy - Immortal Riot Bad Brain - Bad Brain 1.2 Man - 9List - Yeah Loki - Loki-973 - Loki-1234 MShark - MShark-378 Mutation ~ - Mutation No Frills - No Frills-1358 Offspring - Offspring v.05 Pojer - Pojer-1941 - Pojer-1949 - PSMPC-331 - PSMPC-338 - PSMPC-339 - PSMPC-344 - PSMPC-347 - PSMPC-351 - PSMPC-352 - PSMPC-353 - PSMPC-478 - PSMPC-573 - PSMPC-598 - PSMPC-603 - PSMPC-611 - Pussy - Quadratic-986 Seventh Son - Seventh Son-473 Skism - Angel Dust 1.0 Tack - Tack-411 - Tack-477 -177 Tolbuhin - Tolbuhin-626 -851 Yankee Doodle - Yankee Doodle-2189 The dnew to the Aurea Clone 2.0 DOSVer Estepa FWord-383 - G2-A429 - G2-A438 - G2-A615 - G2-Celeste - G2-D598 - G2-E513 Karlik Laufwerk Necrosoft Dementia - Necrosoft Dementia - Necrosoft Dementia-B OMud-512 Peace Man Revelation Sabbath Sleepwalker Sonik Youth Spring - Spring-640 - Spring-748 SVC-2936 Tiso V351 istrover III WW-658 The products were 2, and detection zhas - Dr. Solomon's Anti- Toolkit, (*) - Dr. Solomon's Anti- Toolkit NLM, Vers 6.54 8Software's ]Professional, Vers 2.09f - IBM's IBM Anti- /DOS, (*) - Intel's La 1.53 + 8/93 (*) - McAfee Associates' NetShield, 1.52aV108 - Sophos' (*) - Sophos' NLM, - Fifth Generation 30.00 - McAfee Associates' Note: (*) denotes the product is an NLM. PZPAPN X 9308 - 00{ n Number of es and : 2,253 The A word gPatricia... section has false alarms on the VALIDATE. included in the Hyper archive a. If you are a of Central Anti- or a "Heuristic" ner, please read section now. The dcertified product(s) #removed, or are in the process of %removed, gHyper #either discontinued by vendor or it has #over one year since last AllSafe - No longer supported/ gXTree Gobbler2 - Over 1 year since last IBM - IBM's =offering is IBM Anti- ViruSafe - No longer supported/ gXTree The descriptions , or new Bit Addict - Bit Addict-496 Butterflies - Crusades Chromo 1.0 - Chromo 2.0 - Chromo 3.0 Diamond - Diamond-614 - Diamond-620 - Diamond-621 - Diamond-624 - Diamond-626 - Diamond-891 - Diamond-978 - Diamond-1013 - Description Fellowship - Description Gotcha - Gotcha-Mut3 - IVP Example 1 - IVP Example 2 Offspring - Offspring v.81 - Bamestra 1 - Bamestra 2 - Bamestra 3 - Bamestra 4 - Bamestra 5 - Bamestra 6 - Bamestra 7 - Bamestra 8 - Bamestra 9 - Bamestra 10 - Birthday - Cinco - Groovy - Iron Hoof 1 - Iron Hoof 2 - Tim 3 - Tim 4 - Tim 5 Timid - Timid-290 - Timid-297 - Timid-371 - Timid-526 - Garfield The dnew to the AtomAnt 3.0 - AtomAnt 3.0 - AtomAnt 1.0 BackFont-896 Bad Billboard 1.0 Bizarre Career Of Evil - Career Of Evil-446 - Career Of Evil-697 Explosion Frajer-649 Fuse Box Dwarf Granada Graveyard-479 Mich II Milano Monika-686 Over-4032 Poet Praying Trigger Under 7 Warsaw-850 Zombie The products were 2, and detection zhas MSAV - Microsoft Anti- /DOS 6.0 8/13/93 up - Symantec's Norton Anti- 2.1.10 (*) - McAfee Associates' NetShield, 1.52aV107 - Leprechaun's Buster, 3.96.03 Note: (*) denotes the product is an NLM. PZPAPN X 9307 - Number of es and : 2,191 The descriptions , or new Armagedon - Armagedon-1074 Cyber - Intrep-1092 CyberTech - CyberTech-222 - Crystal - IVP-Tuesday - Sleeper Leprosy - NightCrawler 3.0 Lycee - Lycee-1888 Poison - Poison 3 Polish - Polish -176 - DataDeath - Helmet 1.0 - Math Test - War Dork Timid - Timid-382 - Timid-431 - Timid-557 -180 - Danish Uruk-hai - Uruk-hai 300 - Uruk-hai 361 - Red Team - VCL-Windows -New Years - Maxwell-498 - Maxwell-499 - Baby ow 2 Youth - Hannibal Zherkov - Zherkov-1940 The dnew to the Benoit Cysta - Cysta-2711 - Cysta-2954 - Cysta-8045 Diamond - Diamond-444 - Diamond-465 - Diamond-485 - Diamond-584 - Diamond-594 - Diamond-602 - Diamond-606 - Diamond-607 - Diamond-608 - Diamond-609 Dodo 2456 Elvis-1250 Harm-1082 Iron Umbrella Marzia Lapse Lapse-323 Lapse-375 Mr. D Mr. G MX-335 Porridge PrintMonster Storm-1163 Sundevil Today Tver-308 Ugur The products were 2, and detection zhas - Dr. Solomon's Anti- Toolkit, 8Software's ]Professional, Vers 2.09 (*) Net-Prot 8Software's Net-Prot, 1.00s (Late 2- detection info on entries not included month, release) - McAfee Associates' 9.17V106 Note: (*) denotes the product is an NLM. PZPAPN X 9306 - Number of es and : 2,129 The descriptions , or new - 99%-B - Traveling Jack - 334-C Cascade - Cascade-1704G Cossiga - Cossiga-B - No Grazie DOS7 - DOS7-B - DOS7-C Gotcha - Gotcha-Mut1 - Gotcha-Mut2 - Gotcha-Mut4 - IVP-S2DD Kode4 - Kode4-B Malaise - Malaise-524 - MVF-1954C - OW-40 Pojer - Pojer-1935 - Grease - Page-B - Who Cares Slovak - Slovak-4B - Coffeeshop 4 - Arwen3 - CD Player - Crasher - E-Coli - Handler - McYellow - Miles - Pro-Choice The dnew to the Andromeda 1.0 Andromeda 1.1 Arusiek Atomic 1 - Atomic 1A - Atomic 1B Atomic 2 - Atomic 2A - Atomic 2B Belgium-320 Bubonic Butterflies ButtUgly Cartuja Chile Mediera Chromo 1.0 Cruncher - Cruncher 1.0 - Cruncher 2.0 Deranged Ein Volk Grog 3.1 Hates-213 Immolation James Bond K-4B K-4C Kohntark Lockup 3.0 Mark II Meta-2048 Mystic-377 Offspring Poison - Poison 1 - Poison 2 Predator - Predator-1072 - Predator-1148 - Predator-1154 - Predator-1195 Small-145 ZigZag The products were 2, and detection zhas - Central Anti- (Performed " & "Analyse" Options) - Softech's Dr 1.10 (English) (Performed as a late May - IBM's IBM Anti- /DOS, - Fifth Generation 28.02S - McAfee Associates' 9.16V105 Note: (*) denotes the product is an NLM. PZPAPN X 9305 - May 28, Number of es and : 2,062 The descriptions , or new Fish - Fish F Freddy - Freddy 2.1 Hellween - Zak2 Intruder - Bell - SiloDeath Malaga - Inofensivo Malaise - Malaise-1743 MSTU - MSTU-1536 Perfume - G- Pixel - Pixel-739 - Sucker Search-1000 - Search-377 Silver Dollar - Silver Dollar-2A - Silver Dollar-2B - Silver Dollar-2D - Silver Dollar-2F - Silver Dollar-SHJH Slow - Slow IV Sunday - Sunday-UNAM Tremor 9List, Multiple Reports - Cops-1 - ZipLoc Viper - Wiggers The dnew to the Abraxas 5 DOS7 Dreamer Emo-899 Flagyll - Flagyll - Flagyll-Z Fly 1.1 Hiperion Man - In Man I - In Man II Italian Boy -Haifa Merry Xmas Number 6 Schrunch-420 Shanghai Shiny Happy Shock Therapy Susan Tchantches Warez-1341 - XPH-1029 - XPH-1100 The products were 2, and detection zhas - Dr. Solomon's Anti- Toolkit, - Frisk Software's (*) - Cheyenne's {ulan NLM, 2.00 / 2.18g - Symantec's Norton Anti- 2.1.7 (*) - McAfee Associates' NetShield NLM, 1.5V104 - Leprechaun's Buster, 3.95.00 - McAfee Associates' 9.15V104 - Safetynet's Net, 2.08a Note: (*) denotes the product is an NLM. PZPAPN X 9304 - Number of es and : 2,015 The descriptions , or new ARCV-n - ARCV-10B Baobab - Baobab-731 Beer - Beer-3164 Ice 9 - Ice 9-159 - Ice 9-199 - Ice 9-224 - Ice 9-250 Joanna - Joanna-911B 13TH-B Bug-914 - McWhale-1022 -143B -YAM 92B - X-1B - X-3B The dnew to the 422 1689 Alpha-743 Anti-DAF ARCV-670 Attention-629 Bad-389 Big-2000 Chemnitz China CHR-869 Demon Viper Experiments-416 Fisher - Fisher-1100 - Fisher-2420 Gorlovka Hallo-496 Hamster Joker-1602 - LCT-599 - LCT-762 Lord-933 LoveChild-2710 Lurve More-649 Multi 1.1 NR-481 Pay Rise - Pay Rise-897 - Pay Rise-874 Piter-1228 PV-81 Search-1000 Shaman Sinep Slime Suicidal Tankard - Tankard V2.0 - Tankard V3.01 TechnoRat Toxic Ultimation Wave The products were 2, and detection zhas MSAV - Microsoft Anti- gMS-DOS 6.0 (initial addition is to X9303 - Sophos' (*) - Sophos' NLM, 2.48a Note: (*) denotes the product is an NLM. PZPAPN X 9303 - March 23, Number of es and : 1,956 The descriptions , or new Australian - Australian -162 Civil War - Civil War III v1.0 - Anti-Print Grunt-1 - Grunt-3 Leprosy - Leprosy-654 Malmsey - Malmsey 3 Beta Mummy - Mummy 2.1C Murphy - Locker - Alien-1 - Alien-3 - Hiccup Radyum - Radyum 2-707 Slow - Slow III StinkFoot - StinkFoot-2B - Civil War IV v1.1 - Civil War V v1.0 - B-52 - Beva 33 - Big - Dial Wild Thing 2 - Wild Thing-289 The dnew to the Aragorn ARCV Xmas Aussie Dir Basilisk Beer - Beer-2794 - Beer-2850 CCCP-510 CPSU-2535 Experiments Fat Gingerbread Man Kiwi-550 Little-139 Lokjaw Los-693 LPT Off Malign - Malign-575 - Malign-630 MiniMax Minimite Mutation Not-586 Oi Dudley Oxana Pegg-833 Random RIP-699 Simple Skater - Skater-977 - Skater-1021 Skew-469 Small-178 Stasi Totoro Tremor Tu-482 Uruk-hai V388 The products were 2, and detection zhas (*) - McAfee Associates' NetShield 1.11V102 - McAfee Associates' 9.14V102 Note: (*) denotes the product is an NLM. PZPAPN X 9302 - _23, Number of es and : 1,894 The descriptions , or new 10 Past 3 - 10 Past 3-B ARCV-n - ARCV-10 Bljec - Bljec-XYZ Fish - Fish II - Swank Joanna - Joanna-911 Little Girl - Little Girl 3.0 Maltese Amoeba - Maltese Amoeba-B Mix1 - Mix1-B - Small-46 - Small-72 - Cheesy - Chuang Tzu - Cinco de Mayo - Scarey Quick - Brasil Radyum - Radyum-B - Radyum-C Slow - Slow II Tabulero - Tabulero-2 Troi - Troi-2C - Beva 32 - Beva 96 - Chicken Pox - Voco VirDem - VirDem-833 The dnew to the 1804 Atas II Aussie Parasite - Aussie Parasite - Dorn - El - Grue Australian - Australian - Australian -142B - Australian - Australian - Australian - Australian Butt Stink Costeau DOS3 Flex FoneSex Fratricide GoldGeld Iranian Luca-309 Lythyum - Lythyum - Lythyum-B Shifter Sorlec - Sorlec 3 - Sorlec 4 - Sorlec 5 Soupy - Soupy - Soupy-Death TalkingHeads UnExe Violite YAM-3599 The products were 2, and detection zhas - Dr. Solomon's Anti- Toolkit - Frisk Software's (*) - Intel's La (includes 1/93 - Symantec's Norton Anti- 2.1.4 (*) - McAfee Associates' NetShield 1.10V100 - Sophos' - RG Software's - McAfee Associates' 9.12V100 Note: (*) denotes the product is an NLM. PZPAPN X 9301 - Number of es and : 1,836 The entries d or merged: Shadow - Shadow entry re The descriptions , or new - 334-B - Made 1308 MSpoiler - BFD-452 Copyright - Copyright-1205 Crazy Imp - Crazy Imp-1402 Crew-2480 - Crew-2480 C Cyber - Cyber-946 DAME - DarkStar - Dark Quest Deicide - Deicide 2 Dutch - Dutch -117 Fellowship - Fellowship-B Fich - Fich-897 Friday 13th - Edge Horror - Horror-1112 - Horror-1137B Ieronim - Ieronim-512 - Ieronim-560 - Ieronim-600 - Ieronim-1581 - Ieronim-570 Intruder - Intruder-1326 - Viva Mexico Leprosy - Leprosy-5600 - Leprosy-FVHS Little Br - Little Br -300 Lycee - Lyceum - Lycee-1975 Meditation - Meditation-B - Guru Mix1 - Snow - Horse-8B Nowhere Man - Nowhere Man 1.9 - Nowhere Man 2.0 Otto6 - Otto-415 Pixel - MS-748 Polish - Polish -226 Problem - Problem-734 - Napolean Complex - Test 441 - Warez D00D Radyum - Description Semtex - Semtex-B - Semtex-C - Semtex-D Tony - Tony-203 Tormentor-205 - Tormentor-263 Tumen - Tumen V1.3 - Earthquake - Twer-1000 Voronezh-Chemist - Voronezh-650 The dnew to the Adolf Hitler Alex-368 Angarsk ARCV 330 Barrotes Breeze CLS-853 Commy Como CyberTech - CyberTech-A - CyberTech-B Dark End Egg-1000 Freddy Groove OW Gyro lDays House Ionkin - Ionkin-231 - Ionkin-2372 - Bubbles Junior Kiev 2049 KLF-356 Lippi-286 LV 1.2 Matura MindRiot Nazgul NaziPhobia Outland Play Tetris Press Reaper Repent RTL4 Ryazan SeaCat Seneca-B Shirley Signs Simple Minds Skull - Skull - Skull T-1000 Tao Cheng Terminator-2294 Terminator-3549 - Girafe TPWorm Tyst UFA-1201 Uruguay - Uruguay 3 - Uruguay 4 - Uruguay 6 VX-163 Weak Wharps Witch Wild Thing 2 Zaphod The products were 2, and detection zhas - Softech's Dr 1.07 (Note: product was a late 2against the Library, and is shown in the X9212 Note: (*) denotes the product is an NLM. PZPAPN Licensing Individual and Site Licensing Registration is requested for the use of Hyper by domestic home s. Registration can be viewed by selecting the Individual License Agree- ment link &. The registration form, _REG.DOC, has #included in the Hyper distribution Use of Hyper in a business, corporation, organization, government, or agency en ment requires a site license obtainable gthe author, or one of her authorized agents listed in Hyper Individual License Agreement Site License Agreement PZPAPN Individual License Agreement Individual License Agreement Hyper is registered to individual s for use in a domestic, home en ment. The registration fee is $30 for one year. Individual s may download s of Hyper gthe author's BBS, Excalibur!, in Santa Clara, California, USA. The phone number for Excalibur! is 1-408-244-0813. A Site License Agreement is required to use business, government, corporate, organizational, or agency en ment. Please contact the author, or an authorized agent of the author, for licensing for ments. Individual registrations gentities requiring a site license unprocessed. To provide world-wide product and sales support for an Authorized Agent was created. To license in any capacity, please contact an Authorized Agent. Authorized Agents PZPAPN Site License Agreement Site License Agreement A Site License Agreement is required to use business, government, corporate, organizational, or agency en ment. To provide world-wide product and sales support for an Authorized Agent was created. Prospective s desiring to obtain a Site License should contact an Authorized Agent to receive a complete zpackage. Authorized Agents PZPAPN Authorized Agents Authorized agents are listed by continent or major geographic area. If is no agent in your country, to request a license author, or for zabout becoming a Authorized Agent, please contact: Patricia M. Hoffman - or - Susan Lynch North America Mexico & South America Far East & Asia Australia & New Zealand PZPAPN HSales North American HLicensing Inquires, as well as requests for zon the Domestic US Authorized Agent , should be addressed to: Patricia M. Hoffman 3 Bowers Ave, Suite 130 Telephone: 1 (408) 988-3773 Santa Clara, CA 95054 Fax: 1 (408) 988-2438 USA International HLicensing Inquiries, as well as requests for zon the International Authorized Agent , should be addressed to: Susan Lynch, International Marketing Manager c/o Patricia M. Hoffman 3 Bowers Ave, Suite 130 Telephone: 1 (408) 971-3576 Santa Clara, CA 95054 Fax: 1 (408) 971-3578 USA PZPAPN Agents - North America Advanced Computer Networks Contact: Lazer Milstein 260 Old Nyack Turnpike Telephone: 1 (914) 425-5858 Spring Valley, NY 10977 Fax: 1 (914) 425-4306 USA # BBS: 1 (914) 425-2304 David C. Shook Contact: David Shook 744 Fox Hunt Trail Telephone: 1 (708) 940-0843 Dearfield, IL 60015 Fax: 1 (708) 940-0854 USA James C. Shaeffer & Associates Contact: Jim Shaeffer 5025 Venture Telephone: 1 (313) 741-9527 Ann Arbor, MI 48108 or: 1 (800) 968-9527 USA # Fax: 1 (313) 741-9528 ) BBS: 1 (313) 741-9529 National Computer Security Assoc Contact: Paul Gates (NCSA/US) Telephone: 1 (717) 258-1816 10 S. Courthouse Avenue, Ste C or: 1 (800) 488-4595 Carlisle, PA 17013 Fax: 1 (717) 243-8642 USA Card & VISA Accepted NHNA " Contact: Norman Hirsch 577 Isham St. Suite 2B Telephone: 1 (212) 304-9660 New York, NY 10034 Fax: 1 (212) 304-9759 USA # BBS: 1 (212) 304-9759 Vacci Contact: Roger Aucoin 84 Hammond Street Telephone: 1 (617) 893-8282 Waltham, MA 02154 Fax: 1 (617) 893-3770 USA Canada: Asgard Technologies Contact: Michael Cameron 175 Hunter Street East, Ste 313 Telephone: 1 (416) 529-9284 Hamilton, Ontario L8N 4E7 Canada Dolfin Developments Ltd. Contact: John Reid 2904 South Sheridan Way Telephone: 1 (416) 829-4344 Oakville, Ontario or: 1 (800) 668-7434 L6J 7L7 Canada Fax: 1 (416) 829-4380 Dolfin Developments - Montreal Contact: Simon Borduas 2690B Pitfield, Bureau 100 Telephone: 1 (514) 333-7240 Ville St-Laurent (Mtl), Quebec Fax: 1 (514) 333-7165 H4S 1G9 Canada Dolfin Developments - West Contact: Terry O'Hearn 1842 - 14th Street SW Telephone: 1 (403) 229-3454 Calgary, Alberta Fax: 1 (403) 229-3507 T2T 3S9 Canada PZPAPN Agents - Mexico & South America Argentina: RAN Ingenieria de Sistemas Contact: Marie Jose Alvarez Hamelin Cosquin 10-5o. C Telephone: +54 (1) 642-3689 Buenos Aires 1408 Fax: +54 (1) 334-7802 Argentina Brazil: Maple Informatica Ltda. Contact: David Rotenberg R. Maranhao, 554 cj. 26 Telephone: +55 (11) 825-9390 01240 Sao Paulo, SP Fax: +55 (11) 826-5375 Brazil Chile: Rigg S.A. Contact: Ricardo Gutierrez Avda, Salvador 1068 Telephone: +56 (2) 225-0222 P.O. Box 10.295 Fax: +56 (2) 225-0240 Santiago Chile Mexico: McAfee Associates, Mexico SA de CV Contact: Arturo De la Mora Carrasco Av. Nuevo Leon No. 253, 5 piso Telephone: +(52) 5 273-0954 Col. Escadon C.P. 11800 Fax: +(52) 5 273-1019 Mexico D. F. PZPAPN! Agents - Australia & New Zealand Australia: Computerware For Micros Contact: Priestly Hillam 23 Magill Road, Stepney Telephone (Main): +61 (08) 362-8200 Adelaide 5096 (Main): +61 (08) 363-1974 Australia (Main): +61 (08) 362-4293 ! Telephone (Sydney): +61 (02) 661-6832 ! BBS (Sydney): +61 (02) 661-7120 ! National Toll- 008 882-875 Computer Clinic Contact: Colin Keeble P.O. Box 106 Telephone (Sydney): +61 (02) 822-4303 Moorebank, 2170 NSW (Sydney): +61 (02) 822-4304 Australia Telephone (Melbourne): +61 (03) 335-3777 ! Fax (Melbourne): +61 (03) 335-3747 ! Telephone (Queensland): +61 (07) 341-9991 Doctor M(Perth Office) Contact: Rob Edwards 77 Bulwer Street Telephone (Main): +61 (09) 328-2011 Perth WA 6000 (Main): +61 (09) 328-9661 Australia Telephone (Toll- (008) 999-755 ! Telephone (Sydney): +61 (02) 281-2099 ! Telephone (Melbourne): +61 (03) 690-9100 ! Telephone (Brisbane): +61 (07) 831-0151 ! Telephone (Adelaide): +61 (08) 332-2354 New Zealand: Computer Software Library Contact: Mr. Bill Strauss of New Zealand Limited Telephone: +(64) 3 615-9333 P.O. Box 162 Fax: +(64) 3 615-9303 Timaru 8600 BBS: +(64) 3 615-9313 New Zealand $ & +(64) 3 615-9413 PZPAPN Agents - Austria: ComIn Terramar Handelsgesmbh Contact: Ronald Schmutzer Nikolsdorfergasse 8/8 Telephone: +43 (1) 543-731 A-1050 Wien " or: +43 (1) 543-337 Austria Fax: +43 (1) 543-339 ) BBS: +43 (1) 543-338 Belgium: Impakt nv Contact: Frank Lateur Ham 64 Telephone: +32-91-25-35-49 B-9000 Gent Fax: +32-91-33-00-78 Belgium SoftServe Distributors Contact: Arthur Schrey Dynamicalaan 16 b20 Telephone: +32 (3) 830-59-92 B-2601 Wilrijk Fax: +32 (3) 830-25-92 Belgium Czechoslovakia: AEC Ltd. Contact: Jiri Mrnustik MSc. Sumavska 33 Telephone: +42-5-7112 line 502 612 64 Brno Fax: +42-5-744-948 Czechoslovakia Denmark: Danadata A/S Contact: Steen Pedersen Vestergade 58 Telephone: +45 (86) 18-28-44 8100 Aarhus Fax: +45 (86) 18-28-92 Denmark BBS: +45 (86) 13-89-83 England (United Kingdom) International Data Security Contact: Oliver Mills 9 & 10 Alfred Place Telephone: +(44) 71-631 0548 London WC1E 7EB $ +(44) 71-436 2244 England Fax: +(44) 71-580 1466 ) BBS: +(44) 71-580 4800 Finland: ICL Data Oy, Contact: Erkki Mustonen P. S. Help Desk (Kayttotuki) Telephone: +358-0-567-4248 P.O. Box 458 Fax: +358-0-567-4160 SF-00101 Helsinki Finland SAFECO OY Contact: Hannu Ohrling Kirvuntie 22 Telephone: +358-0-512110 02140 Espoo Fax: +358-0-515151 Finland France: VIF "La Pepiniere" Contact: Pascal Jour 111, avenue de LODEVE Telephone: +(33)67-58-18-36 34000 Montpellier Fax: +(33)67-58-26-61 Germany: K.-H. Kitroschat, Contact: Karl-Heinz Kitroschat Engineering Office Telephone: +49 2104-48626 Naabstr. 9 Fax: +49 2104-449555 W 4006 Erkrath Germany Kirschbaum Software, GmbH Contact: Josef Kirschbaum Kronau 15 Telephone: +49 (0) 8067-1016 W 8091 Emmering b,. Wbg. Fax: +49 (0) 8067-1053 Germany perComp-Verlag GmbH Contact: Guenter Musstopf Holzmuehlenstr. 84 Telephone: +49 (0) 40 693-20-33 D-22041 Hamburg Fax: +49 (0) 40 695-99-91 Germany BTX: +49 (0) 40 693-20-33 ) E-Mail: percomp@infohh.rmi.de Hungary: PiK-SYS Co. Ltd. Contact: Maria Pistar Szentmiklosi Ut. 18 Telephone: +36 (1) 276-0864 H-1213 Budapest Fax: +36 (1) 276-5714 Hungary Ireland: house Technology Group Ltd. Contact: Dermot 39-40 Upper Mount Street or: Stephen Kearon Dublin 2 Telephone: +353 (1) 615-445 Ireland Fax: +353 (1) 615-323 ) BBS: +353 (1) 288-5634 ) BBS (HST): +353 (1) 283-1908 Italy: Ultimo ,Editrice, SRL Contact: Adalberto Fontana Via A. Manuzio, 15 Telephone: +39-2-655-5306 20124 Milano Fax: +39-2-659-7693 Italy Norway: Data-Utvikling AS Contact: Mr. Dag Bjornaes Vestre Rosten 81 Telephone: +(07) 890020 7075 Tiller Fax: +(07) 890021 Norway PDI Group/PDI Gruppen Contact: Datasecurity Department POBox 246, 1411 Kolbotn Telephone: +(02) 806622 Rosenbolmvelen 40, 1410 Kolbotn Fax: +(02) 806670 Norway BBS: +(02) 295626 Spain: Datamon S.A. Central Contact: Carmen M. Mestres Corcega, 485 Telephone: +34 (3) 207-2704 08025 Barcelona Fax: +34 (3) 457-1370 Spain Datamon S.A. - Macroservice Contact: Diego Saez Infanta Mercedes, 83 Telephone: +34 (1) 571-5200 28020 Madrid Fax: +34 (1) 571-1911 Spain Sweden: Help Center - Main Office Contact: Mikael Larsson Box 7018 Telephone: +46 (0) 26-100518 S 811 07 Sandviken Fax: +46 (0) 26-275720 Sweden BBS: +46 (0) 26-275710 ) FidoNet: 2:205/204 ) VirNet: 9:461/101 ) InterNet: vhc@abacus.hgs.se Help Center - Gavle Office Contact: Ola Larsson Box 1237 Telephone: +46 (0) 26-100518 S 801 37 Gavle Fax: +46 (0) 26-275720 Sweden Mobile Ph: +46 (0) 10-295 5552 ) FidoNet: 2:205/212 ) VirNet: 9:461/112 ) Internet: vhcola@abacus.hgs.se Switzerland: Dasikon AG Contact: Marcus Laeubli Computer C Telephone: +(41) 1 945-5970 Sandbuelstrasse 6 Fax: +(41) 1 946-0545 8604 Volketswil Switzerland The CPU Communications Contact: Rick Wezenaar & Productions United C.V. Telephone: +(31) 73-141252 Predikheerenpoort 8 Fax: +(31) 73-140437 5211 NK Den Bosch BBS: +(31) 73-130204 The CPU Communications Contact: Fred Janssen & Productions United C.V., Telephone: +(31) 10-4863510 Technical Support Center Fax: +(31) 10-4863640 P.O. Box 5011 BBS: +(31) 10-4863771 3008 AA Rotterdam The PZPAPN Agents - Far East & Asia Indonesia: P. T. Yakin Aman Contact: M. A. Sunardi #15-16, Block FX-1 Telephone: +62 (21) 451-0072 Jalan Kelapa Gading Boulevard +62 (21) 451-2729 Jakarta 14240 $ +62 (21) 451-2880 Indonesia Fax: +62 (21) 451-2880 4 +62 (21) 451-2731 Japan: LINK Co. Ltd. Contact: Akira Watanabe (formerly Lonrho Int'l Networks Ltd) Telephone: +(81)3 3493 5850 (Japan Computer Association) Fax: +(81)3 3493 5188 Rosebay Gotanda Building 10F BBS: +(81)3 3493 9739 8-8-15 Nishi-Gotanda Shinagawa-Ku Tokyo 141 Japan Malaysia: MCSB (M) Sdn Bhd Contact: Mr. M. F. Leong 17th Floor Menara Bousted Telephone: +(60)3 241 7400 Jalan Raja Chulan Fax: +(60)3 248 8010 50200 Kuala Lumpur Malaysia Singapore: MCSB (S) Pte Ltd Contact: Mr. M. F. Leong 1302 Lorong 1 TOA Payoh #01-08 Telephone: +(65) 353 5300 Siong Hoe Industrial Building Fax: +(65) 258 9945 Singapore 1231 PZPAPN The 7summarizes the ' normal behavioral characteristics. A brief description follows entry on the page; however, by applying the definitions, a more complete 7description ! = /and/or . a, compressing the b, so the usually be smaller A = xall B = C = D = xDOS E = F = Floppy (360K) G = Generic Detection Category K = N = O = P = R = &640k - segment A000) a - in unused portion of al Pnot , such as in CLI stack space or unused Example: Lehigh f - in Pnot prevent Example: Icelandic h - in high (Resides in high , right &TOM. is al so it won't be accidently Example: Flash s - in low ( /TSR) (reduces , typically uses a normal Int 21/Int 28 TSR) Example: t - TOM but &640k (moves Int 12 (Reduces Example: Brain 640k) b - in BIOS/Video/Shadow RAM area (segment A000 - e - in extended/expanded 1 Meg) S = Spawning or companion creates an bon the :the actual Example: AIDS II T = Manipulation of the Example: Dir-2 X = (Record (ie. Example: Z = Example: Dir-2 PZPAPN (s) Cross-Reference is a cross-reference of s and corresponding cross-reference should alleviate of the confusion created by the same %referred to to by different s by different products and researchers. The column on the left lists the s in ASCII sort order. It's like alphabetical order, but includes numbers and special 6, too. The column on the right lists the corresponding you enter the columns, the HyperLink cursor be on the right. You should position the HyperLink cursor across the left-hand column you desire to cross-reference. Select by pressing the mouse button or the ENTER key. Presto! The power of Hyper is at your PZPAPN +Cross-Reference is a cross-reference of effective corresponding cross-reference should be useful confronted and the effective but the of the The column on the left indicates the effective +. Where are two numbers separated by a hyphen, it is a range of effective s. The column on the right lists the corresponding you enter the columns, the HyperLink cursor be on the right. You should position the HyperLink cursor across the left-hand effective you wish to cross-reference. Select by pressing the mouse button or the ENTER key. PZPAPN Country of Country of Cross-Reference is a cross-reference of the country of es, or location, back to the (s). If the , it be used. If it is not , the location is The in the Country of Cross-Reference lists countries. Selecting one of the countries a list Nof the country. PZPAPN No Usable Sample NO USABLE SAMPLE OF THIS VIRUS HAS BEEN RECEIVED FOR EVALUATION. If you ma replicating copy of or if you know one who P, PLEASE upload it to: The Excalibur! BBS 1-408-244-0813 Excalibur! is in Santa Clara, California, USA. Samples may sending them on to the daddress: Patricia M. Hoffman 3 Bowers Avenue Suite 130 Santa Clara, CA 95054 PZPAPN Not Done Yet FILL= The requested topic has not been written yet. Press Esc to Return to the Previous Topic PZPAPN Unable To Locate Topic FILL= The requested topic (or the file it's in) can't be found. Tip Pick an Option To ensure that all hypertext files are searched, put: Try again: Search all hypertext SET XVIEWPATH=d:\path files for a different topic. in your AUTOEXEC.BAT Search this file for any text. View the Index of this file. View the Home page of this file. See the list of hypertext files. Esc to Backtrack PZPAPN Unable to Display FILL= Sorry, but that topic cannot be displayed. This hypertext viewer is not capable of displaying graphics images on your video system. -OR- That link can't be accessed while in TSR mode. Press Esc to Return to the Previous Topic