Tag Archives: 1990s

DotEater, Virus/Trojan (1998)

Ambulance or Ambulance Car virus (Germany, 1990).
When an infected file is executed, an ASCII ambulance can be seen moving across the screen and a siren start to sound displaying a alert message like : BOOM!. Ambulance is not a destructive virus; it simply spreads itself around and shows off its payload once in a while.

Hellraiser’s version of the Leprosy virus. He was a member of the prolific virus group Phalcon/Skism. They released an e-zine between 1991 and 1998 called 40hex.

Virus.DOS.Burma (1997) is written by Bulgarian virus writer Dark Avenger. This virus is a non-resident overwriting virus which permanently corrupts the programs it infects.

During the 1994 Lillehammer Olympic games a Swedish virus writing group got some coverage for their Olympic-themed virus, known as Virus.DOS.VCL.Olympic.1440.

Toadie virus (1999).
A relocating virus-worm. It is encrypted and non-memory resident. This virus was posted to several newsgroups as a cell phone cloning application on 15th of August 1999. The virus was in CELLCRK.ZIP file. When the CELLCRK.EXE program that was inside that ZIP is run it displays a rhyme and a copyright string of Symantec.

Your PC has been infected by the Suicide virus.
I will now kill myself. Press D to disinfect.

The Suicide Virus by Phalcon/Skism (1992), via.

4k is a computer virus which infects COM files and EXE files.

The virus was one of the first to employ stealth tactics. Infected systems will hang, after September 22 every year, which is also the date of birth Bilbo Baggins (The Lord of the Rings).

The code was intended to display the message “Frodo Lives”, but hangs in all known variants. This virus was spread without the aid of the Internet. It was ported between systems by floppy disks.

Hymn virus (1990).
When the date and month correspond in number (January 1st, February 2nd,…), this virus destroys a part of the system information in the C: disk boot sector, then it plays the former USSR national anthem, and decrypts and displays the picture.

V-Sign is a boot sector virus from 1992. It is slightly polymorphic and displays an image after infecting 64 diskettes.