;---------------------------------------------------------------------------
;%
;%              (C) Copyright 1989-1991, all rights reserved.
;%  Virus signature information file for virus scanners by Jan R. Terpstra.
;%  P.O. Box 66, 1462 ZH, Beemster, The Netherlands or FIDONET 2:512/10.0
;%  Revision:     910716  (yymmdd)
;%
;
; The info in this file is published under the following conditions:        ;
;                                                                           ;
; - you may freely distribute this file in UNMODIFIED FORM to anyone other  ;
;   person or organisation via any means of transmission.                   ;
; - you may modify this file for YOUR OWN PRIVATE or NON-COMMERCIAL USE.    ;
; - you may NOT distribute modified copies of this file.                    ;
; - Using this file for any commercial activity (sale, magazine & newspaper ;
;   publication as well as any form of paid services to third parties) is   ;
;   only allowed after obtaining a written permission from the editor.      ;
;                                                                           ;
;NOTICE: This file carries a sanity check. Do NOT change the control info   ;
;        or any of the info above the sanity check line at the end of the   ;
;        file.                                                              ;
;        If you need to add your own info to this file, do so BELOW the     ;
;        sanity control info line at the bottom of this file.               ;
;---------------------------------------------------------------------------;
; Revision history:                                                         ;
;                                                                           ;
; yymmdd   description                                                      ;
; ------   -------------------------------------------------------------    ;
; 890815   First release of this file                                       ;
; 890907   Added Palette Virus                                              ;
; 890919   Added Icelandic Virus, FuManchu Virus                            ;
; 890925   Added SYSLOCK Virus, 2930 Virus                                  ;
; 891012   Added HAHAHA Virus                                               ;
; 891017   Added VACSINA, Vienna, OGRE and 2730 Viruses                     ;
; 891019   Changed sUMsDos signature for new variety                        ;
; 891021   Added Nichols Virus                                              ;
; 891026   Added Fu Manchu B, Golden Gate and Typo Viruses                  ;
;          Changed Icelandic/Saratoga to avoid confusion                    ;
;          Renamed Palette Virus to ZERO-Bug Virus                          ;
; 891118   Added Sylvia Virus                                               ;
;          Added Lisbon 648 Virus (a newly discovered 648 variety)          ;
;                Ghost, dBASE, 867, Sunday, SURIV3, Alabama, Dark Avenger,  ;
;                Mix 1 / Mix 1B, PingPong/286 and Disk Killer               ;
;          Fixed typo in Icelandic/Saratoga II Virus signature              ;
; 891126   Added DATACRIME IIb Virus                                        ;
;          Changed 1704 and 17Y4 to a single common signature               ;
;          Changed length of some signatures to circumvent problems in      ;
;           detecting varieties of certain viruses.                         ;
; 900227   Added Dropper Trojan (Father program of Twelve Tricks Trojan)    ;
;          Added Twelve Tricks Trojan                                       ;
;          Added "OGRE" id to Disk Killer virus                             ;
; 900304   Changed OGRE signature (was double)                              ;
;          Added 4th Bulgarian (V512) virus                                 ;
; 900313   Changed Brain signature to also recognize "Shoe" variety         ;
;          Changed Ohio signature to recognize a rumoured variety           ;
;          Changed Typo signature to prevent false alarms                   ;
;          Changed PingPong/286 virus to unique identification              ;
;          Corrected error in 3066 signature                                ;
;          Added EDV, 765, Do nothing, OROPAX, W13 family, 4096, VCOMM      ;
;          Added Yankee Doodle 2772,  Devil's Dance and, 9800:0000 viruses  ;
;          Added BOOT modification signature for GHOST virus                ;
;          Added EXE2COM conversion signature for VACSINA virus             ;
; 900403   Added Groen Link virus                                           ;
;          Added SURIV1 and SURIV2 (sUMsDos variants)                       ;
;          Added 1392 Virus                                                 ;
; 900413   Added Companion (AIDS II, 8064) virus                            ;
; 900423   Changed Twelve Tricks signature to prevent false alarms          ;
; 900425   Shoe, Ashar and Brain changed to common signature                ;
; 900425   PingPong and Typo BOOT changed to common signature               ;
;          Added XA1 virus and XA1 "BOOT record zapped" signature           ;
;          Added LBC, Taiwan, December 24th, 847, KHETAPUNK, v2000. Solano  ;
;                SAT14, Pretoria, VP, Anarkia and PSQR (Wheew, don't they   ;
;                ever stop coming??)                                        ;
; 900430   Added SHAKE virus                                                ;
; 900505   Removed duplicate signature for Kethapunk (1392) virus           ;
;          Removed Groen Links virus, PLO/sUMsDos signature will find it    ;
;          Added 1554 as alias for 9800:0000 virus                          ;
; 900526   One time extra release including TBSCAN                          ;
; 900620   Added Anti-Pascal and Liberty virus                              ;
; 900621   Corrected blundering typo......                                  ;
; 900626   Added PrtSc, Form, ITAVIR, 333, Prudent, VIRDEM, HalloEchen,     ;
;          1971, FISH(6),                                                   ;
; 900925   Added 537/541 Virus (Thanks to Righard Zwienenberg for the info) ;
;                Filler & Armagedon viruses                                 ;
; 900927   Changed Ohio signature to recognize Ohio0 variant                ;
;          Added Joshi, Stoned/2, MicroDot, Zapper, Flip, 1253, Nothing-2,  ;
;                SlowDown, v1024, Yankee-go-Home, Flash, Jojo-1701, Staff,  ;
;                1624 and Sunday/2 viruses                                  ;
; 900028   Added ANTHRAX virus (slipped in 900927 releease)                 ;
; 901005   Added Ambulance, Fellow, News Flash and Invader viruses          ;
; 901014   Added Dark Avenger 3, Flip COM/EXE, Mirror viruses               ;
;          Changed v512 to recognize variant                                ;
; 901030   Changed Jerusalem to recognize several variants                  ;
; 901106   Added Monxla (Time), Polimer and 3445 virus                      ;
; 901125   Added TPxxVIR variants, Black monday, 5120, Aircop, DataLock     ;
;                Mardi Bros, Murphy, V-512X, Victor, Whale RAM, July13,     ;
;                333 Variant, DisCom, a list of 8 648 variants, Choinka,    ;
;                30 Whale mutants and 9800-2 virus.                         ;
;                Changed PSQR to recognize variant                          ;
; 901126   Corrected long line in this file that would render TBSCAN        ;
;          inoperable. No new signatures added.                             ;
; 901126a  Added 555 virus.                                                 ;
; 901127   Added Turbo 448 Virus                                            ;
; 910111   Added 3 additional WHALE mutants                                 ;
; 910112   Added a whole list of viruses from the USSR. Thanks to Righard   ;
;          Zwienenberg for preparing that list                              ;
; 910122   Changed ownership and copyright notice because some people were  ;
;          making a buck out of MY efforts.                                 ;
; 910124   Fixed KAMIKAZE virus to prevent false alarm.                     ;
;          Added a Sanity Check Control over the contents of this file.     ;
; 910218   Added data from the collection of RiZwi: AntiPascal I & II,      ;
;          646, 1067, 2480, Carioca, Japan Christmas, Crazy Eddie, Guppy    ;
;          Mobock, Protector, Scotts Valley, Telecom, Tiny Family, Eddie 3  ;
;          VFSI, VP, Vriest, Wisconsin & Zero Hunt. (Pheeww!!)              ;
; 910220   Fixed a few typos                                                ;
; 910308   Added Cancer, 1591 and Deicide viruses                           ;
; 910330   Added Formiche, Raubkopie, Jerk, Blood1, Blood2, Agiplan, Sediwsh;
;          Stoned, Saddam, MG Family, Directory, Tiny-B Family, Whale-B,    ;
;          648-X, Jeff, Pixel Family, 1575, V2100, Casino                   ;
; 910331   Changed signature for Resident Formiche virus                    ;
; 910416   Added Fichev and BootBuster virus                                ;
; 910418   Changed some virus names to match naming conventions, Fichev to  ;
;          903, Khetapunk to Amoeba, BootBuster to Stardot-801.             ;
;          Added Sparse, Azusa, ZK-900, Brunswick, Stardot-600 and CSSR.    ;
; 910422   Added Keypress Virus                                             ;
; 910426   Added Boys, E.T.C., Construction Kit, Naughty Hacker family and  ;
;          v123, Darth Father, Sentinel-2.                                  ;
; 910503   Added Smack, V1963, Warrier, Warrior, VVV-252.                   ;
; 910505   Complete revision of this datafile. Duplicate signatures were    ;
;          removed and some signatures were combined to "family" signatures ;
;          Major part of that job by Righard Zwienenberg and Michael Weiner ;
; 910508   Added Empire, MichelAngelo, Alberta/Stoned, Klaeren, Crash,      ;
;          Telephonica. Pentagon and P-1.                                   ;
; 910514   Added Zero Translator                                            ;
; 910620   Added 2560, G-Virus 1.3, Magnitogorsk, BadGuy, 10 past 3         ;
;          TestVirus, Tequila, Life after Death, Diabolik, Demon, Silly,    ;
;          Hungarian 482, NoInt, Den Zuk II                                 ;
; 910630   Vast amount of rework by RiZwi on several virus signatures to    ;
;          recognize new variants of lots of viruses                        ;
; 910709   Changed Telecom signature                                        ;
;          Added Ontario, 382, Lao Dungo, Yaunch, Smiley Worm, RCE1049,     ;
;          Cinderella, Cara, and Empire 2 viruses                           ;
; 910710   Removed duplicate entries for 382, RCE1049, Ontario              ;
; 910716   Corrected typo's, added EXE to Raubkopie data                    ;
;---------------------------------------------------------------------------;
;     ==> You may NOT distribute modified copies of this file!!! <==        ;
;                                                                           ;
; This file contains a VERIFIED list of virus signatures and should be      ;
; used as input for a suitable virus scanner. The MASTER copy of this file  ;
; and various virus scanners are maintained and available for FileRequest   ;
; or download on:                                                           ;
;                                                                           ;
;       Bamestra RBBS, The Netherlands  (FIDO 2:512/10.0)                   ;
;       phone: ++31 2998 3602 or ++31 2998 3603 (HST/CM)                    ;
;       P.O. Box 66, 1462 ZH, Beemster, The Netherlands                     ;
;                                                                           ;
; If you find a virus and want the info added to this file, leave a message ;
; on or send FIDO netmail to Sysop on Bamestra RBBS, 2:512/10.0             ;
; A working copy of the suspected virus for verification is appreciated.    ;
;                                                                           ;
; Several Bulletin Boards over the world have copies of this file and virus ;
; scanning programs available for download or file-request:                 ;
;                                                                           ;
;  VIRUSSIG.ZIP - latest VERIFIED version of VIRSCAN.DAT                    ;
;  TBSCAN*.ZIP  - Fast virus scanner with lots of options                   ;
;  TBSCNX*.ZIP  - Resident version of TBSCAN                                ;
;  HTSCAN*.ZIP  - Another good virus scanner                                ;
;                                                                           ;
; Most Bulletin Boards get a fresh copy of this file within 48 hours after  ;
; the Master Copy on 2:512/10.0 is updated.                                 ;
;                                                                           ;
; If you appreciate our efforts to keep this list up to date, then please   ;
; consider a donation to a local AIDS or cancer research foundation.        ;
; For commercial users: Contact the editor before use!                      ;
;---------------------------------------------------------------------------;
;                                                                           ;
; Instructions for use:                                                     ;
; If you find a new virus that is not in this list, you can add its         ;
; signature to this list BELOW the sanity check control line.               ;
;                                                                           ;
; NOTE: Signatures for BOOT record viruses wil sometimes trigger alarms in  ;
;       .EXE or .COM files and vice versa. Please check for proper usage of ;
;       BOOT versus .COM and EXE signatures before you yell "VIRUS!".       ;
;                                                                           ;
;           DO NOT DISTRIBUTE MODIFIED COPIES OF THIS FILE!                 ;
; Some unofficial versions of this file with wrong information, were        ;
; distributed by some individuals. These wrong versions have caused some    ;
; panic because perfectly healthy programs were accused of being infected   ;
; by a Virus. Again: DO NOT DISTRIBUTE MODIFIED COPIES OF THIS FILE!        ;
;                                                                           ;
; Format of a Virus signature entry (3 lines, no comments in between):      ;
;                                                                           ;
;   <Virus name>        (max. 30 characters)                                ;
;   <affected items>    (COM, EXE, BOOT, HIGH, LOW, separated by blanks)    ;
;   <Virus signature>   (hex string, no seperators, max 80 characters)      ;
;                                                                           ;
; Lines starting with a ';' are ignored by the virus scanners.              ;
;                                                                           ;
;NOTICE: This file carries a checksum control. Do NOT change the checksum   ;
;        and add your own info BELOW the cheksum line at the bottom of this ;
;        file.                                                              ;
;---------------------------------------------------------------------------;
; Signatures collected by Jan R. Terpstra (SysOp Bamestra BBS) with special ;
; thaks to Dave Chess, Yuval Tal, Righard Zwienenberg, Bill Arnold, Mark    ;
; Blom, John McAfee, Frans Veldman, Kenneth Walls, Carl Bretteville, Alan   ;
; Solomon and Michael Weiner.                                               ;
;---------------------------------------------------------------------------;
;
;*** BOOTSECTOR INFECTORS **************************************************
1253 Virus
BOOT
CA03562D751726813ECC03314C750E36C7068001000036
;
Aircop Virus
BOOT
DD2EFF2EC001530EE8B1FF0EBB4C00E8ADFF5BCD12
;
Anthrax Virus
BOOT
A58ED8BA270451535052CB8EC1B104BEB00583C60EAD3C80
;
Azusa Virus
BOOT
A450B8CA0050CB31C0CD1331C08EC0B80102BB00
;
Blood2 Virus
BOOT LOW
A5FF2E0F7C33C0CD130E1F33C08EC0B80102BB007C803E0A0000
;
Boot record zapped by XA1
BOOT
5B83C30D8CC88ED8E81500EBFE
;
Brain, Shoe or Ashar Virus
BOOT
F4A113042D0700A31304B106D3E08EC0BE007C
;
Brunswick Virus
BOOT
A6C35152565706E8D4FFE8E7FF74252EC606290100B80103
;
Telephonica Virus
BOOT LOW
9E74645152B408CD137220FEC68836EA008AD186E9
;
Den Zuk Virus
BOOT
FA8CC88ED88ED0BC00F0FB?8*3C?
;
Disk Killer (OGRE) Virus
BOOT
D2F7361A0088163F01A34101C3A14101
;
EDV Virus
BOOT
DB8ED8C7078118813F8118740D2D00103D00B875ECB800A8
;
Empire virus
BOOT LOW
A5B8010331DB41E823FFA0A801403C16720230C0A2A801
;
Empire 2 Virus
BOOT LOW
AAE2F9E9F7FECD1A3A16AF01751ABEE30189F7B91B00
;
Empire-B Virus
BOOT
AAE2F9E9F7FECD1A3A16AF01751ABEE30189F7B91B00
;
Falling Letters Virus.
BOOT
31C0CD13B80202B90627BA0001BB00208EC3BB0001CD139A00010020
;
FILLER Virus
BOOT
26813F5224740BCD13
;
Flip Virus BOOT
BOOT
FBB80300E81F0006B8420050B8C007
;
Form Virus
BOOT
B9FF00FCF3A506B89A0050BBFE01B80102
;
Golden Gate Virus version C
BOOT
A717800FADBDAD5507173384
;
Golden Gate Virus version C2
BOOT
A717DDAFF001233907173385
;
Ghostballs Virus
BOOT
7D83EA247211800EF77D0156579090905F5E8026F77DFE
;
Invader Related Virus
BOOT
1304B106D3E08ED8833E400EFE751AB8??0F1E
;
Joshi Virus
BOOT
022D2100BF0000BE007C03F003F8B979012BC8
;
LDV Virus
BOOT
A406B8330150CBBB4C008B0F8B5702
;
Liberty-Boot Virus
BOOT
3F2833D2CD13C333C08ED8A14C002EA30A08A14E002EA30C08
;
Mardi Bros Virus
BOOT
FA8CC88ED88ED0BC00F0FBE82700FA31C08ED8A113042D0700
;
MichelAngelo Virus
BOOT
AD3B47027435B80103B601B103807F15FD7402B10E890E0800
;
MicroDot Virus
BOOT
010000C706D9010800C606DB0102B9040051
;
Nichols Virus
BOOT
DD0DDF0FDD0FFF0A000ABA00
;
NoInt virus
BOOT LOW
AB004848A31304B106D3E08EC036A38C00B8DA00A34C00
;
Ohio Virus
BOOT
B106D3E08EC0BE007C33FFB90410FCF3A406B8000450
;
Pentagon Virus
BOOT
806C723CCD0342FC8045FCFE000F586C43FC8242738045CAFCE2FB00
;
PingPong or Typo Boot Virus
BOOT
8ED8A113042D0200A31304B106D3E02DC0078EC0BE007C8BFEB90001
;
PingPong/286 Virus
BOOT
7D807426BEBE81B90400807C0401740C807C04047406
;
PtrSc Virus
BOOT
DBB801038A365F01B90100CD6DE824005A595F5E5B
;
Stoned Related Virus
BOOT
750E33C08ED8A03F04A8017503E80700
;
Alberta/Stoned Virus
BOOT
A42EFF2E0D0031C090CD1333C08EC0B80102BB
;
Swedish Stoned Virus
BOOT LOW
A4072BF68BFEB90002F3A4B8F3000650CB2BC0CD132BC08EC0
;
Tequila Virus (Part.Table)
LOW HIGH BOOT
B106D3E08EC006B82A0250B805028B0E307C418B16327C
;
Twelve Tricks Trojan
BOOT
8CC88ED0BC007C8BF48EC08ED850
;
Yale Virus
BOOT
BB40008EDBA11300F7E32DE0078EC00E1F81FF56347504FF0EF87D
;
Zapper Virus
BOOT
FC02721780FC04731222D2750E33C08ED8A03F04A8017503
;
;*** FILE INFECTORS *******************************************************
;
10 Past 3 Virus
COM
C7060001E9DCC60602010333C08ED8813EAC01464275
;
144 Virus
COM
44017416B440CDB4B8004233
;
405 Virus
COM EXE
B8000026A2490226A24B0226A28B0250B419CD2126A24902B4470401
;
483 Virus
COM EXE
00E82E00B440B91800BAE303CD50B002
;
512 Related Virus
COM
CF8EC33B158E1D8B154A8EDA8BF18BD7B1??F3A58EDB
;
903 Virus
COM
B80325BA5501CD21BB3101BA3A0090B91C03BE6B01BF6B01CC
;
1008 (Suomi) Virus
COM
DDBFA80390EB03*38B87EE03EB02*281C34400EB04*43101EB03
;
1024PSCR Virus
COM EXE
00012EA30300B4400E1FBA0004B90004E8E8007230
;
1067 Virus
COM EXE
B80242E88C00B440B92B0490BA0001CD217214
;
1210 (Prudent) Virus
EXE
2F040175D00E0E1F07BED3042BC92E8A0446410AC0
;
1253 Virus
COM
CA03562D751726813ECC03314C750E36C7068001000036
;
1381 Virus
EXE
3FB91C008B1E27008D160900CD217211813E1B004D5A7409A11700
;
1392 (Amoeba) Virus
COM EXE
2F01C3E80700E83A00E86600C3BF0001A10301
;
1554 Virus
COM EXE
9B00FFFF7203A39B00A19B003DFFFF741FB000
;
1575 Virus
COM EXE LOW HIGH
1FB800015033C0CBBE0600AD3D920174DD3D79
;
1591 Virus
COM EXE
0E8CC805??50B8000150CB
;
2730 Virus
COM EXE
9177917AA4B7570056000000
;
3445 Virus
COM EXE
5983E91F8CC8*5F7E303C183D200
;
4096 Virus
COM EXE LOW
875EECFCC383C30381FBCC0272E95BE8890AE421
;
5120 Virus
COM EXE
FBA10C002EA30001A10E002EA302018C1E2200
;
Adolph Virus
COM
F8F9B912B8BE1FD933FFF5F9F8FC
;
Agiplan Virus
COM EXE
AE263A2575F9BA0042263B550175F0B6BA263A75FB75E883F900
;
Aids (Taunt) Virus
COM
2A546869732046696C6520486173204265656E20496E66656374656420427920
;
Aids II (Companion) Virus
COM EXE
5589E581EC0202BFCA050E57BF3E011E57
;
Akuku Virus
COM EXE
89540433D2B97603B440CD2172608BD683C214B440B90400CD21
;
Alabama Virus
COM EXE LOW HIGH
C606F900013CD375062EC606F90000BB40008EDB33DB8A4717240C3C0C7541
;
Ambulance Car Virus
COM
BDF0FFBA0000B91000E83F0042E2FAE81600E87B00
;
Amstrad Related Virus
COM
B44E%1CD2172??BA??0?B8023D%1CD21%6061F%1BA??0?%1B9FFFF%1B43FCD21
;
Anthrax Virus
COM EXE
A58ED8BA270451535052CB8EC1B104BEB00583C60EAD3C80
;
Anti-Pascal I Related Virus
COM
33D2B80242CD21507230B9*2908D940601B440CD217222
;
Anti-Pascal II Related Virus
COM
1F3B06070174??50B000E8C0FFB440BA00018B0E??01CD21
;
Armagedon Virus
COM
3DDADA7503E999000E1F
;
Attention Virus
COM
31D2B440CD218BD1B979010E1FB440CD21
;
BadGuy Related Virus
COM
EB02EB??B42ACD213C0174??EB??90
;
Bebe Virus
COM
B8004233C933D28B1E1C00CD21B4408D160000B90E00
;
Best Wishes Related Virus
COM EXE
B8004231C931D2E8??00B440C7C2*25981C1*2E8??00
;
Black Monday Virus
EXE COM
AC009C0650EA0000000033C08ED88F0602008F060000FB
;
Blood Virus
COM
B202B40ECD21B41ABA0C0003D5CD21BA040003D5B44E
;
Boys Related Virus
COM
CD217303E9BD005E5683C625AD3D00FD
;
Burger Related Virus
COM EXE
B90200B600CD26
;
Carioca Virus
COM
B490CD2180FC017513B905002E8B360301BF0001
;
Cascade Related Virus
COM
F6872A0101740F8DB74D01BC
;
Christmas in Japan Virus
COM
53B4408B8E040481C158028BD581C20005CD21
;
Christmas (XA1) Virus
COM
FA8BEC5832C08946028146002800
;
Construction Kit Virus
COM
AAE2FAC35E81EE030156E8E3FF
;
Crash Virus
COM EXE LOW HIGH
A4C38CC02E03441A051000502EFF7418CB061E8CD8488EC0
;
Crazy Eddie Virus
COM EXE
B80242CCB440CC33D2B80042CC8BD6B118B440CC
;
Crew 2480 Virus
COM
A48BCE81E904005F5E5681C61C00B800003904770F
;
CSSR 528 Virus
COM
7303EB25903D0300751F8BDE
;
Dark Avenger Virus
COM EXE
49CD21*5CD2181EBE700727B8CC1F913CB
;
Darth Vader Related
COM EXE
505351%256578?%FB82012CD2F268A1DB81612CD2F
;
Datacrime (1168) Virus
COM
8B36010183EE038BC63D00007503E9FE00
;
Datacrime II Virus
COM EXE
5E81EE030183FE00742A2E8A94
;
Datacrime IIb Virus
COM EXE
2E8A0732C2D0CA2E880743E2F3
;
Datacrime B (1280) Virus
COM
8B36010183EE038BC63D00007503E90201
;
DataLock Virus
COM EXE
680001C3B4BECD213D3412C31EA12C00508CD8488ED8812E
;
dBASE Virus
COM
FB750A86E09DCFE9CE06E9810381FF0AFB742E3D004B
;
Define Related Virus
COM EXE SYS
BA9E00CD2193B440*4CD21C3
;
Deicide Virus
COM
B95000BA0000CD26B409BA0301CD21EBFE8AD0B40E
;
Demon Related Virus
COM
BAB201B44EB90B11CD21%17302EB11E84900
;
Destructor V4.00 Virus
COM EXE
BAA204E8CFFD72CBE858FF2EC7460C00012E81660E00002E8166030000
;
Devil's Dance Virus
COM
AD03F3A426C706000003015E1E068CC048
;
Dir Virus
COM
B4402E8B1E7D03B90600BA9503CD21B802422E8B1E7D0331C931D2CD21
;
DisCom Virus
COM EXE
6B008CC88ED88EC0B43FCD21498BFABE0500F3A67507B43E
;
Do Nothing Related Virus
COM
C21ECD707219A36F??B442B0028B1E6F??B90000
;
Doom-II Virus
EXE
B9AF04BF29012EA00B012E803E0A014574052E033E0301
;
Dot Killer Virus
COM
03BA0001B440CD21E8BF02B440B90300BAA704CD21B801
;
Dutch 555 Virus
COM EXE
884600C60600004DB92300290E
;
Eight Tunes (1971) Virus
COM EXE
B7003B445B7219B8907EE8C800B80835CD21895C5D
;
Enigma Related Virus
COM EXE
81EE*203F38904BE*281
;
E.T.C. 3.00 Virus
COM
B9FFFFE2FEA1FC00A30001A1FE00A30201
;
Fellowship Virus
COM EXE
FB039C0650EA0000000033C08ED88F0600008F060200FB
;
Fish (6) Virus
COM EXE
8F06DB0E2E8326DB0EFE2E803EDA0E0075112EFF36DB0E
;
Flash Virus
COM EXE
4ACD218CDA03D3428EC2B455CD2156BF000183EE080E1FB9D002
;
Flip Virus COM/EXE
COM EXE
0EBB*21FB9*2B2??81C1*2EB
;
Flip Virus - RAM Resident
LOW HIGH
505152B402CD1A80FD1075
;
Formiche Virus
COM EXE
BCD21746313431244C75F8
;
Formiche Virus Resident
LOW HIGH
BFAA552EC40637018CCACF
;
Friday the 13th Virus
COM EXE
1E8BECC746100001E80000582DD700B104D3E88CCB03C32D100050
;
Frogs Related Virus
COM
E8E404A1%505000126A3*2268C
;
F-Word Related Virus
COM
B43FCD2129C85875DDFFE0B440EBF3
;
G-Virus 1.3 Virus
COM EXE HIGH
5F83EF03E800005E81EE87002E89845900
;
Gergana Related Virus
COM
16AD013BCA74E1B8024233C933D2CD21A3AB01B4
;
Guppy Virus
COM
B8024233D233C9CD2197B440B19889F283EA40CD21
;
Halloechen Virus
COM EXE
4B00C7065B005555BA4900C706FB003000E8A1FEFF064A01
;
Happy New Year Virus
COM EXE
E81CFD72EF50B91000F7F15052B940068D940001B440E806FD
;
Holand Girl Virus
COM EXE
8D36030133C933C0AC3C1A7404
;
Hero Virus
COM
33D2CD21B440B91800BAFA03CD21
;
Hungarian 482 Virus
COM EXE
D2CD21B9E20190BA0000B440CD21B801
;
Hybryd Virus
COM
B440B91A058BD681EA8D02CD21??505683EE51908BFEB99202
;
Hymn Virus
COM EXE
33D2B9490790B440E877FE722733C875238BD1B80042E869FE
;
Icelandic/Saratoga Virus
COM EXE
A3030003D8438EC333F633FF0E1FB9D007
;
Icelandic/Saratoga II Virus
COM EXE
26C6067F03FFB452CD212E8C066D02268B47FE8EC026030603004040
;
Icelandic III Virus
EXE
6803A32400A16A03051000A31C0090
;
InCom Virus
COM
528BFA8B4D028BDF2BD983C31783E92C301F43
;
Int 13 Virus
COM EXE
B80242B9FFFF8BD1CD9EB43FB2538BFAF7D9CD9E
;
Invader Related Virus
COM EXE
1304B106D3E08ED8833E400EFE751AB8??0F1E
;
Itavir Virus
COM EXE
9B00908A16D70B80FA02741B1E52B41CCD218A075A
;
Jeff Virus
COM
A4C6069D02B8B89BFF8EC0B93F0033D232E48BD9268A0701C2
;
Jerk (Talentless) Virus
COM
A4B41ABA3E0501EA89969402CD21B419CD218886F804BBFFFF
;
Jerusalem Related Virus
COM EXE LOW HIGH
26C6%3CB580510008EC00E1FB9
;
JoJo (1701) Virus
COM
6DB42CCD2180FD13720AB8CD20A3000153E9C702
;
Joker Virus
EXE
1B35CD21891EA9478C06AB471E0E1FBA7A01B81B25
;
July 13th Virus
EXE
A012003490BE1200B9B1042E300446E2FA
;
June 16th (Pretoria) Virus
COM
C933D2E85BFFE81200B440BA0001
;
Justice Virus
COM
B440B9DA049C0EE870FC723881FEDDDD750A2EC7063D000155EB0F
;
Kamikaze Virus
EXE
BAEB008EDA8C063E0033ED8BC4051300
;
Kemerovo Virus
COM
BA0100B80242CD2172D15A5283EA04B90001B440CD21
;
Kennedy (333) Virus
COM
9452028BFAB90300CD21803DE97405E87E00F8
;
Keypress Virus
COM EXE
A4F8C3061FC706BE020000B81C35CD21891EEA028C06EC
;
Kiev Related Virus
COM
0153B440BAD50101DAB903008BDFCD215B72
;
Klaeren Virus
COM EXE
9CFF1EEB045351E800005B81EBAF03B9A5038037??43E2FA
;
Leech Virus
COM EXE
A0FF0730044681FEFF0772F7595AB440E85B00
;
Lehigh Virus
COM
505380FC4B740880FC4E7403E977018BDA807F013A75058A07EB07
;
Liberty Virus
COM EXE
93E8CD0072C2BB13012E813F4D5A7505
;
Liberty-Boot Virus
COM EXE
3F2833D2CD13C333C08ED8A14C002EA30A08A14E002EA30C08
;
LoveChild Virus or Trojan
COM EXE
1003CD13FECE79F7B603FEC5EBF14C6F76
;
Lozinsky (AidsTest) Virus
COM
B90100BAC900CD217303E988002EA0B7032E3806C900747DB80242
;
Magnitogorsk Virus
COM
BE3E0003F7B9C2092E00042EF6AD070046E2F5
;
MG Related Virus
COM
CDFF7213B8004231D28BCACDFFB440B90300BA????CDFF
;
MGTU Virus
COM
B4408D0E0D028D1600012BCA8BD581C20001CD21B440B904008D160901
;
Minimal Related Virus
COM
0001B92D00B440CD21B43E
;
Mirror Virus
COM EXE
CD215A59B80157CD21B43ECD21B82135CD21
;
Mix I Related Virus
COM EXE
33C08EC02680261704
;
Mix II Related Virus
COM EXE
6A1700752A1FB440CD211F3BC17419833E02FC00
;
Murphy Related Virus
COM EXE
0000B8??4B%1CD21%17203E92?015E56%18BFE33C0501FC4064C002E8984??F?2E8C84??F?
;
Mutant Related Virus
COM
CD2105??00813E??0144497413
;
Naughty Hacker Related Virus
COM EXE
53B82012%3268A1DB81612%35B83C711
;
News Flash Virus
COM
B43BCD21463B36ED027CE1803EF00200740AB8BA0250
;
News Flash-B Virus
COM EXE
01B440CD21E80100C3BB31018A2732260601882743
;
Nobock (440) Virus
COM
B80242CD218D95CC09B9B80190B440CD215A59
;
Nomenclatura Related Virus
COM EXE
4401B440B90300CD21C333C08EC0BE1505BF9000B9
;
Number One Virus
COM
E878F9073C536D696C653EE832E0
;
Nycrophilic Related Virus
COM EXE
BE26018BFE8B0E08018B160201B8770150FCAD33C2AB
;
Ontario Related Virus
COM EXE
562E8A84E801B9E801F6D02E300446E2F8C3
;
Oropax Virus
COM LOW
8200C7069C007D098C0E9E00C7068400EE088C0E8600FB2E803E070100
;
P-1 Related Virus
COM EXE
0001??03??8B??33*533??22*4F8??31??22*4F8
;
Paris Related Virus
COM EXE
59B4408D16A0028D3686028B1CCD218D36B0028904
;
Perfume (765) Virus
COM
EF408EC70E1FB90004FCBF0000F3A481EC0004
;
Phantom Virus
COM
00C3B440E80D00C3B43EE80700C3B43FE80100
;
Plague Related Virus
COM EXE
BB34018A273226060188274381FB8303
;
Polimer Virus
COM
8B0E6C018CD80500108ED8B440CD21
;
Polish 217 Virus
COM
0300B440CD21E825008BD681C20001B9D900
;
Polish 529 Virus
COM
0503B440CD217215B8004233D28BCACD21
;
Raubkopie Virus
COM EXE
BE12018BFEB98102D1E9
;
Red Diavolyata Virus
COM
B440B93E030E1F33D2CD21FA5A1F7200B43ECD21FA
;
Russian Mirror Virus
COM
2EA3BE015B53B9E201BA0000B440CD21B800425B53B90000BA0000CD21
;
Saddam Virus
COM
6B7226EBEDA1E40225E0FF051F00A3E402B43DB0028CCA8EDA
;
Saterday 14th (Durban) Virus
COM EXE
9D02A4E2FD06B82135CD211F891E5302
;
Scotts Valley Virus
COM EXE
5E8BDE909081C63200B912082E
;
Sentinel Related Virus
COM EXE
F?89EC5DC202005589E583EC128C5EF?55E81?F?
;
Shake Virus
COM
5E50E800005EB80342CD213D34??7503
;
Slowdown Virus
COM EXE
DE909081C61B00B990062E8034
;
Solano 2000 Virus
COM
175858BF00012E893E2101582EA32301
;
Staff Virus
COM
E80AFFBA8F02E820FFE801FFB80057CD215152B000
;
Sparse Virus
COM
061F17BB000106538CC64E8EDE8C0601008CC6
;
StarDot-600 Virus
COM EXE
6803B43BCD21B42ACD21FEC08B16410383E2073AC2
;
StarDot-801 Virus
COM EXE
268B1E6C04891E720407
;
Suriv 1.01 Virus
COM
81F9C407721B81FA0104
;
Suriv 2.01 Virus
EXE
81F9C407722881FA0104
;
Sverdlov Virus
COM EXE
5EEB02*283EE082E8A840C00B97D07BF2D0003FE
;
SVir Virus
EXE
E788261900A11D00A32100A11B00A32300C7061B000000
;
Syslock Virus
COM EXE
D1E98AE18AC13306140031044646E2F25E5958C3
;
Taiwan Related Virus
COM
B90800BE??03BF00F8FCF3A4B9??028B36??01
;
Telecom Virus #1
COM EXE
DB7420B6??BE5500B9740EB6??03F58A1C80F3??32D80ADCB2??B2??
;
Telecom Virus #2
COM EXE
B20083FB007418BF5500B2??B9740E03FD8A1D80C3??32D8881D
;
Tequila Virus (Signature A)
EXE
B96009%48A17%44643%281FB*272??%2BB*2%4E2??%2E9
;
Tequila Virus (Signature B)
EXE
B96009%48A14%44643%281FE*272??%2BE*2%4E2??%2E9
;
Terror Related Virus
COM EXE
50B859ECCD213BE8753E0E1F582E8E06??0?E8D5FF7410B90D00
;
TestVir Virus
COM
3C31742E3C35740B3C397424EBEEE8A101721D
;
The Rat Virus
EXE
FFB440E833FFB80042BA8000E837FFB98001BA100A
;
Tiny Related Virus
COM
3D004B75??5053%7B8023D
;
Tiny (163) Virus
COM
8984AB01B4408D940501B9A300CD217215
;
TP Worm
COM EXE
E9D3DD558BEC8B5604B80043CD21720FF64606027409F6C1017404B8000DF9E9A1DD
;
Traceback (3066) Virus
COM EXE
7106E82806B419CD2189B451018184510184088C8C5301
;
Traceback II (2930) Virus
COM EXE
2906E8E005B419CD218884E300E8CE048A95E2000E1F7509
;
Tumen Related Virus
COM EXE
4D5A74??5131D2B9*2B440CD2131C931D2B80042
;
Turbo 448 Virus
COM LOW HIGH
B80242B900008BD1E81F00BA0001B9C001B440E81400
;
Turbo Kukac Virus
COM
83EE03BAC10281EA000103F28B1C8B4C02
;
Twelve Tricks Trojan Dropper
COM EXE
BE640231944201D1C24E79F7
;
Typo (867) Virus
COM
D681C2050033C9B44FCD2173EF
;
USSR 311 Virus
COM
B80157B9705A8B55FACD21B43ECD21B801435932ED8BD7CD21
;
USSR 492 Virus
COM
032BC8BA2A02B440CD217248B440B9EC01BA0001CD21
;
USSR 516 Virus
COM
B80242E8FFFEA3A900B90402B440E8F4FE722E2BC8752A
;
USSR 600 Virus
COM
B44051BB58038A0734BB880743E2F7595B53BA5803CD21
;
USSR 707 Virus
COM
B8004233C933D2E8A100B440B903008BD783C217E89400
;
USSR 711 Virus
COM
2E8B0EB20083E10F83C1058CC88ED833D2B80040CD217234
;
USSR 948 Virus
COM EXE
8B4C04B80042CD212BD28BCEB440CD215A59B80157CD21
;
USSR 696 Virus
COM
BA0001B9B802B440CD2159880EB5031F33C933D2B80042CD21
;
USSR 1049 Virus
COM EXE
B440EB02B43FE8090072023BC1C332C0B4422E8B1E3E00
;
USSR 1064 Virus
COM EXE
33D2B92804B80040E84CFE3D2804751833C933D2B80042E83DFE
;
USSR 1689 Virus
COM EXE
33D2B99906B80040E8F7FD72203D9906751B33C933D2B80042E8E6FD
;
USSR 2144 Virus
COM EXE
C43F50268B05D1E83598122E038415005883C304E2EA2EC684B70030
;
V-2 related Virus
COM EXE SYS
5E81EE*2065733FF8EC726C706F004
;
V-905 Virus
EXE
8B161200F6D63AD674B4B8024233C933D2CD21
;
V270 Related Virus
COM EXE
BE00015631FFB90B01F3A4BD2301B9E600FA87EC5B5831D85049E2F8
;
V651 (Eddie 3) Virus
COM EXE
B440CD2172F52BC875F18BD1B80042CD2172E8A1A002
;
V800 Related Virus
COM
E800005E83C619??8BFE33D2
;
V1024 Related Virus
COM EXE
4A8EC233FFB9??008B55022BD13BD0723CFA26294D03895502
;
V1963 Virus
COM EXE LOW
0E07BB04098BFBABB080AB8CC8ABB85C00AB8CC8ABB86C00AB8CC8AB
;
V2000 Virus
COM EXE LOW
B413CD2F5A1F2E8994A7072E8C9CA9072E
;
V2100 Related Virus
COM EXE LOW
EE0AA5A55E33D2B92408B440CD21721733C87517
;
Vacsina Related Virus
COM EXE
B801438E5E0E8B56062E8B0E??00
;
VACSINA EXE2COM conversion
COM EXE
03C8894FFB%28B0E160103C8894FF7%28B0E1001894F*28B
;
VComm Virus
EXE
7D02B440CD21E83E00A19B02A33602A19D02A334021E
;
VFSI (Happy Day) Virus
COM
588BD0350F0005020003C88CD8488ED8B80040CD215A59B80157CD21
;
Victor Virus
COM EXE LOW HIGH
BCF308B42CCD2189167200B42CCD218ACA80E10FD3067200
;
Vienna Related Virus
COM
AC3C3B74??3C007403AAEBF4**1F89**B05CAA89
;
Vienna Related virus
COM
8BD681C60000FCB90300BF0001F3A48BFAB430CD213C007503
;
Virdem Related Virus
COM
B200B40ECD21B43B8D16??03CD21EB4C90B43B8D16??03
;
Virus-90
COM
C5030133C033DBB909008D561289D6030043
;
Virus-101
COM EXE
B303B4??03F3B4??8CC8B7??8CDBB5??39C3B4??7411B4??BE0010
;
VP Virus
COM
E2B97D03CD218CC28EDAB457B0018B1E20038B0EDC028B16DE02CD21
;
Voronezh Virus
COM EXE
31C9B800425B53CD218B0E58078D164007B440CD21
;
Vriest Virus
COM
8BD82EFE0E260251521E0E1FB440B90005BA0001C70627020000CD21
;
VVV-252 Related Virus
COM
8BD8B4408B0EFC00030EFA008B16F800CD21
;
Warrier Related Virus
COM EXE
8BD7E8D50080ECFD2E3B060200720ABA00038BCAB440
;
Warrior Related Virus
EXE
028944FEB900045A5281E20F00B440CD219C
;
Whale Virus
LOW HIGH
252E890E64255B2E8B0783C3025389C132ED2E302743E2FA
;
Whale Mutant #1
COM EXE
2907E2FA5B59EB2A5BFC53C30E1FE8F7FF81EBA323B9C111
;
Whale Mutant #2
COM EXE
371083C301E2F8585B5956BE6625F8FF14F85E43E82900
;
Whale Mutant #3
COM EXE
37261383C303E2F78BCB598BD959B460EB1D56E80200
;
Whale Mutant #4
COM EXE
3786F283C301E2F55AFB5B59FF166625E803004033DE
;
Whale Mutant #5
COM EXE
37964083C303E2F78CC0588BD859B450EB1E56FDE80200
;
Whale Mutant #6
COM EXE
49434975F7FF3666258F0699255B59EB03E82F00FF16
;
Whale Mutant #7
COM EXE
4983C30249C35AE8F4FF742EEBF9520E1FE8230081EA
;
Whale Mutant #8
COM EXE
49F61F83C30249C35DE8F4FF7430EBF9550EF81FE82300
;
Whale Mutant #9
COM EXE
5B415956BE6625FF14F85E42505A90E80100F85B81EB9F23
;
Whale Mutant #10
COM EXE
5B5955FF3666255D3EFFD55DE80000B984235B81EBB623
;
Whale Mutant #11
COM EXE
5B59B440E8BA01EB0C5B530E1FC3E82A0075FBEBEBE8F1FF
;
Whale Mutant #12
COM EXE
5BB44059E8BA01EB0C5B0E1F53C3E8290075FBEBEBE8F1FF
;
Whale Mutant #13
COM EXE
67254EFF14E8020033DE81F676185B5E81EB9F23B98523
;
Whale Mutant #14
COM EXE
852381EBA923FE0F43E2FB558BEB81C58E0033C03E807E0001
;
Whale Mutant #15
COM EXE
91FF166625EBEE5BB985230E81EB9F231F8A47FFFEC8
;
Whale Mutant #16
COM EXE
9383EB1DB9C3118A072847FF4B4BE2F7803E3324017416
;
Whale Mutant #17
COM EXE
93B9C31183EB1E8A170057FF4BF54BE2F6803E3324017415
;
Whale Mutant #18
COM EXE
CA8EDAE80300D7EBF65A81EA9D23F987DAB98A2CF881F10F0F
;
Whale Mutant #19
COM EXE
D7585B59FF166625E80300BB01565B81EB9F23B93489
;
Whale Mutant #20
COM EXE
DB1F81C361DCE81E00BA02008137060403DAE2F881C38D00
;
Whale Mutant #21
COM EXE
DB1F81C361DCE81F00B8020081379A239001C3E2F781C38D00
;
Whale Mutant #22
COM EXE
DB5B81EB9F23E81E00B802008137380101C3E2F881C38D00
;
Whale Mutant #23
COM EXE
DC5901CB0EB9C4111FFEC943812FFE0043E2F85689DE81C68D00
;
Whale Mutant #24
COM EXE
DC5958935891B43FFEC4E8810158EBD28CCB8EDB5A52C3
;
Whale Mutant #25
COM EXE
DCB986230E33C81F8037E801C32BC875F781C38F00FE0F
;
Whale Mutant #26
COM EXE
DCB9C1118B0743430107E2FA81C39200807F010174E106
;
Whale Mutant #27
COM EXE
DDEB2AE80100C359BB61DC01CB0EB9C3101FFEC5290F
;
Whale Mutant #28
COM EXE
DFE82B0087D381C361DCB9C311E8E0FFF6063324FE74E1
;
Whale Mutant #29
COM EXE
E6FF75FB585BFB59FF3666258F069A25FF169A25E80000
;
Whale Mutant #30
COM EXE
F9595B87CBE8B501EB078CC88ED8E80200EBF7582D9C23
;
Whale-B Mutant #31
COM EXE
FE0743E2FB5B59FF166625E800000E1F5B81EB9F23B985
;
Whale-B Mutant #32
COM EXE
FF16662590E800009C9D0E50581F265B240581EB9F2324
;
Whale-B Mutant #33
COM EXE
E8000095930E93951FFC5B161781EB9F23FC36B988239C802F03F8
;
Whale-B Mutant #34
COM EXE
920E921F365B575081EBA023585FB9842350280F5158435991
;
Whale-B mutant #35
COM EXE
9543E2F89D5B555D59FF166625FCE8000095930E93951FFC
;
Whale-B mutant #36
COM EXE
FB81EB9F23FCB98523528037415A4390E2F750FE8F8E00
;
Wisconsin Virus
COM
B4402E8E1E2B012E8B1E31018BCF33D2CD21
;
Wolfman Virus
COM EXE
1800CD21B802428BCACD21B440590E1FBA0001CD21B4
;
WWT Related Virus
COM
01B44EB90100CD217302EB1?%EE80F00BA8000B44F
;
Yankee Doodle Related Virus
COM EXE
53BB??00F8B803C?CD215B7?
;
Zero Bug Virus
COM
5A45CD602EC606250601902E803E2606
;
Zero Hunt related Virus
COM
A483EB0426891E020026C7060000F5E9BFCFCFC53690
;
Zero Translator Virus
COM LOW HIGH
5657B800B88ED8BB00008A073C307502B04F88074343
;
ZK-900 Virus
COM EXE
A450B8CA0050CB31C0CD1331C08EC0B80102BB007C0E
;
Cinderella Virus
COM LOW
CF9C80FCFB750432E49DCF80FCFC750E9D1E075FBF0001
;
Lao Doungo Virus
BOOT
A5A5A34E00B8CF7CA34C00061FF6C2807539BB007EBA8001
;
Yaunch Virus
EXE
5C012BDB8A058A2032C48805473BFA730A4383FB0A72ED
;
Cara Virus
COM
A4061FC606B2020190E84F00B86221E85D00B86320
;
Smiley Worm Virus
BOOT
01E82400E83B008BF1CB07BB007C53B9030051
;
;           DO NOT DISTRIBUTE MODIFIED COPIES OF THIS FILE!
;This file carries a sanity check. Do NOT change the checksum! Add your own
;info BELOW the cheksum line at the bottom of this file.
;TITCV˙A6D0