VCC Virus


 Virus Name:  VCC 
 Aliases:     VCC.269 
 V Status:    New 
 Discovered:  January, 1996 
 Symptoms:    .COM file growth; file date/time changes 
 Origin:      Unknown 
 Eff Length:  269 Bytes 
 Type Code:   PNCK - Parasitic Non-Resident .COM Infector 
 Detection Method:  F-Prot, AVTK, IBMAV, ViruScan, PCScan, ChAV, 
                    NAV, NAVDX, 
                    AVTK/N, IBMAV/N, NShld, NAV/N, Innoc 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The VCC or VCC.269 virus was received in January, 1996, along with 
       many other viruses which appear to have been created with the same 
       virus creation package.  These viruses are generally non-resident 
       direct action infectors of .COM files, including COMMAND.COM.  They 
       may either be encrypted or non-encrypted.  Some of the viruses, 
       namely the ones that contain the text string "DEBUGGING IS VERY 
       ILLEGAL (NOT!)" may interfer with some debugging programs as these 
       viruses intercept or attempt to disable interrupts 01 and 03. 
 
       The VCC.269 virus infects up to five .COM files located in the 
       current directory when an infected program is executed.  Programs 
       infected with this virus will have a file length increase of 269 
       bytes with the virus being located at the end of the file.  The 
       program's date and time in the DOS disk directory listing will have 
       been updated to the current system date and time when infection 
       occurred.  The following text strings are visible within the viral 
       code: 
 
           "Test Virus #1" 
           "Hacking Hell" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[T1]" 
           "[HH]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
 
       Other known virus(es) created with VCC are: 
       VCC.355: Also received in January, 1996, this virus infects 
           up to two .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 355 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are visible within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           "Test Virus #5" 
           "Hacking Hell" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[T5]" 
           "[HH]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.367: Also received in January, 1996, this virus infects 
           up to two .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 367 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           "Test Virus #4" 
           "Hacking Hell" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[T4]" 
           "[HH]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.436: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 436 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as he lost his keys." 
           "Pooh5 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P5]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.437: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 437 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as he ran over Barney" 
           "Pooh6 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P6]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.438: Also received in January, 1996, this virus infects one 
           .COM file located in the current directory when an infected 
           program is executed.  Infected programs will have a file length 
           increase of 438 bytes with the virus being located at the end of 
           the file.  The program's date and time in the DOS disk directory 
           listing will have been updated to the current system date and 
           time when infection occurred.  The following text strings are 
           encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           "IT IS THEM!!!!!!!" 
           "Hope you like ants!" 
           "THEM! A Virus" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[TA]" 
           "[TP]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.440: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 440 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as the Vice Squad raided" 
           "Pooh9 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P9]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.444: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 444 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "and deleted his source code." 
           "Pooh1 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P3]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.449: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 449 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as his plane lost the last engine" 
           "Pooh7 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P7]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.450.A: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 450 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as the pin fell out of the grenade" 
           "Pooh8 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P8]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.450.B: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 450 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as he buried the corpse of Piglet." 
           "PooH2 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P2]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.451: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 451 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Oh Bother!" said Pooh" 
           "as the virus ate his hard drive!" 
           "PooH1 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[PH]" 
           "[P1]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.459: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 459 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "as the FBI surrounded the family compound." 
           "PooH10 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[p1]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.461: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed.  Infected programs will have a 
           file length increase of 461 bytes with the virus being located 
           at the end of the file.  The program's date and time in the 
           DOS disk directory listing will have been updated to the current 
           system date and time when infection occurred.  The following 
           text strings are encrypted within the viral code: 
           "DEBUGGING IS VERY ILLEGAL (NOT!)" 
           ""Bother!" said Pooh" 
           "and installed Windows 95 and Bill got richer" 
           "PooH4 Virus" 
           "RaBBiT"" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[P4]" 
           "[RB]" 
           "[IE-VCC v0.19á]" 
           "*.COM" 
           The second and third text strings above are displayed as a 
           message on the system monitor when an infected program is 
           executed. 
           Origin:  Unknown  January, 1996. 
       VCC.565: Also received in January, 1996, this virus infects up 
           to four .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Sign no more, ladies, sigh no more, 
            Men were deceivers ever; 
            One foot in sea, and one on shore, 
            To one thing constant never. 
            Then sigh not so, 
            But let them go, 
            And be you blithe and bonny, 
            Converting all your sounds of woe 
            Into Hey nonny, nonny." 
           Infected programs will have a file length increase of 565 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are encrypted 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Much Ado About Noth" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[MD]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.571: Also received in January, 1996, this virus infects one 
           .COM file located in the current directory when an infected 
           program is executed, and the following message will be displayed 
           on the system monitor, accompanied by a tone on the system 
           speaker and a system hang: 
           "Your System DNA is mutating!" 
           Infected programs will have a file length increase of 571 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are encrypted 
           within the viral code, as is the text string from the message 
           displayed by the virus: 
           "DEBUGGING IS VERY ILLIGAL (NOT!)" 
           "sPeCiEs A Virus" 
           "pANdEMiC" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[sA]" 
           "[HH]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.585: Also received in January, 1996, this virus infects up 
           to six .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Tis true; there is magic in the web of it; 
            A sibyl, that had numbered in the world 
            The sun to course two hundred compasses. 
            in her prophetic fury sewed the work; 
            The worms were hallowed that did breed the silk, 
            And it was dyed in mummy which the skilful 
            Conserved of maidens hearts" 
           Infected programs will have a file length increase of 585 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Othello" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[Oo]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.592: Also received in January, 1996, this virus infects up 
           to four .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Thou hast most traitorously corrupted the youth of the realm 
             in erecting a grammar school; and whereas, before, our 
             forefathers had no other books but the score and the talley, 
             thou hast caused printing to be used; and contrary to the king, 
             his crown and dignity, thou hast built a paper-mill." 
           Infected programs will have a file length increase of 592 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "HenryVI" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[H6]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.625: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "O Romeo, Romoe! wherefore art thou Romeo? 
            Deny thy father, and refuse the name; 
            Or, if thou wilt not, be but sworn my love, 
            And I will no longer be a Caplet. 
            What is in a name? that which we call a rose, 
            By any other name would smell as sweet. 
            Romeo and Juliet by William Shakespeare" 
           Infected programs will have a file length increase of 625 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Romeo and Juliet" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[RJ]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.667: Also received in January, 1996, this virus infects up 
           to eight .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "This England never did, nor never shall, 
            Lie at the proud foot of a conqueror, 
            BUT when it first did help to wound itself. 
            Now these her princes are come home again. 
            Come the three corners of the world in arms, 
            And we shall shock them: nought shall make us rue, 
            If England to itself do rest but true. 
            King John by William Shakespeare" 
           Infected programs will have a file length increase of 667 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "King John" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[KJ]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.735: Also received in January, 1996, this virus infects up 
           to seven .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Once more unto the breach, dear friends, once more 
            Or close the wall up with our English dead! 
            In peace theres nothing so becomes a man 
            As modest stillness and humility: 
            But when the blast of war blows in our ears, 
            Then imitate the action of the tiger; 
            Stiffen the sinews, summon up the blood, 
            Disguise fair nature with hard-favoured rage; 
            Then lend the eye a terrible aspect. 
            Henry V by Billy Bob Shakespeare" 
           Infected programs will have a file length increase of 735 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Henry V" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[HV]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.753: Also received in January, 1996, this virus infects up 
           to four .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Be innocent of knowledge, darest chuck, 
            Till thou applaud the deed. Come, seeling night 
            Scarf up the tender eye pitiful day, 
            And with thy bloody and invisible hand. 
            Cancel and tear to pieces that great bond, 
            Which keeps me pale! Light thickens, and the crow 
            Makes wing to the rooky wood; 
            Good things of the daybegin to droop and drowse, 
            Whiles nights black agents to their prays do rouse. 
            Macbeth by William Shakespeare" 
           Infected programs will have a file length increase of 753 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Macbeth" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[Mb]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.793: Also received in January, 1996, this virus infects up 
           to five .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Hath not a Jew eyes? hath not a Jew hands, organs, 
            dimensions, senses, affections, passions? fed with the 
            same food, hurt with the same weapons, subject to the 
            same diseases, healed by the same means, warned and 
            cooled by the same winter and summer, as a Christian 
            is? If you prick us, do we not bleed? If you tickle us 
            do we not laugh? If you poison us, do we not die? and 
            if you wrong us, shall we not revenge? If we are like you 
            in the rest, we will resemble you in that." 
           Infected programs will have a file length increase of 793 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Merchant of Venice" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[MV]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.813: Also received in January, 1996, this virus infects up 
           to eight .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Question your desires 
            Know your youth, examine well your blood 
            Whether, if you yield not to your fathers choice, 
            You can endure the livery of a nun, 
            For aye to be in shady cloister mewed, 
            To live a barren sister all your life, 
            Chanting faint hymns to the cold fruitest moon. 
            Thrice blessed they that master so their blood, 
            To undergo such maiden pilgrimage; 
            But earthier happy is a rose distilled, 
            Than that which withering on the virgin thorn, 
            Grows, lives, and dies, in single blessedness." 
           Infected programs will have a file length increase of 813 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Midsummer Night" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[MD]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.857: Also received in January, 1996, this virus infects up 
           to six .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "O Sleep! O gentle sleep 
            Natures soft nurse, how have I frighted thee 
            That thou no more wilt weigh mine eyelids down 
            And steep my senses in forgetfulness? 
            Why rather, sleep, liest thou in smoky cribs, 
            Upon uneasy pallets stretching thee, 
            And hushed with buzzing night-flies to thy slumber, 
            Than in the perfumed chambers of the great, 
            Under the canopies of costly state. 
            And lulled with sound of sweetest melody? 
            Then, happy low, lie down! 
            Uneasy lies the head that wears a crown." 
           Infected programs will have a file length increase of 857 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "HenryVI" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[Hy]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.867: Also received in January, 1996, this virus infects up 
           to four .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Friends, Romans, countrymen, lend me yours ears 
            I come to bury Caesar, not to praise him 
            The evil that men do lives after them 
            The good is oft interred with their bones 
            So let it be with Caesar. The noble Brutus 
            Hath told you Caesar was ambitious 
            If it were so, it was a grievous fault 
            And grievously hath Caesar answered it 
            Here  under leave of Brutus and the rest, 
            For Brutus is an honorable man 
            So are they all, all honourable men 
            Come I to speak in Caesars funeral 
            Julius Caesar by William Shakespeare" 
           Infected programs will have a file length increase of 867 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Julius Caesar" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[JC]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.917: Also received in January, 1996, this virus infects up 
           to five .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Come, lets away to prison; 
            We two alone will sing like birds in the cage; 
            When thou dost ask me blessing I will kneel down, 
            And ask of thee forgiveness; and we will live, 
            And pray, and sing, and tell olde tales, and laugh, 
            At gilded butterflies, and hear poor rogues 
            Talk of court news; and we will talk with them too, 
            Who loses, and who wins; who is in, who is out; 
            And take upons the mystery of things, 
            As if we were Gods spies; and we will wear out, 
            In a walled prison, packs and sets of great ones 
            That ebb and flow by the moon. 
            King Lear by William Shakespeare" 
           Infected programs will have a file length increase of 917 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "King Lear" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[KL]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.1144: Also received in January, 1996, this virus infects up 
           to four .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "To be, or not to be: that is the question: 
            Whether tis nobler in the mind to suffer 
            The slings and arrows of outrageous fortune, 
            Or to take arms against a sea of troubles, 
            And by opposing end them? To die: to sleep:, 
            No more; and by a sleep to say we end 
            the heart-ache and the thousand natural shocks 
            That fresh is heir to, tis a consummation 
            Devoutly to be wished To die, to sleep: 
            To sleep; perchance to dream: ay, theres the rub; 
            For in that sleep of death what dreams may come 
            When we have shuffled off this mortal coil 
            Must give us pause. Theres the respect 
            That makes calamity of so long life; 
            For who would bear the whips and scorns of time, 
            The oppressors wrong, the proud man continuely, 
            The pangs of disprized love, the laws delay. 
            Hamlet by Willie Shakespeare" 
           Infected programs will have a file length increase of 1,144 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Hamlet" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[Hl]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.1198: Also received in January, 1996, this virus infects up 
           to eight .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "But love, first learned in a ladys eyes, 
            Lives not alone immured in the brain, 
            But, with the motion of all elements, 
            Courses as swift as thought in every power, 
            And gives to every power a double power, 
            Above their functions and their offices. 
            It adds a precious seeing to the eye; 
            A lovers eyes will gaze an eagle blind; 
            A lovers ears will hear the lowest sound. 
            When the suspicious head of theft is stopped: 
            Loves feeling is more soft and sensible 
            Than are the tender horns of cockled snails: 
            Loves tongue proves dainty Bacchus gross in taste. 
            For valour, is not love a Hercules, 
            Still climbing treesin the Hesperides? 
            Subtle as Sphinx; as sweet any musical 
            And when Love speaks, the voice of all the gods 
            Makes heaven drowsy with the harmony. 
            Never durst poet tiuch a pen to write 
            Until his ink were tempered with Loves sighs. 
            Loves Labours Lost by William Shakespeare" 
           Infected programs will have a file length increase of 1,198 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Love" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[LL]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 
       VCC.1263: Also received in January, 1996, this virus infects up 
           to five .COM files located in the current directory when an 
           infected program is executed, and the following message will 
           be displayed on the system monitor: 
           "Farewell! a long farewell, to all my greatness! 
            This is the state of man: to-day he puts forth 
            The tender leaves of hope; to-morrow blossoms, 
            And bears his blushing honours thick upon him; 
            The third day comes a frost, a killing frost; 
            And, when he thinks, good easy man, full surely 
            His greatness is a-ripening, nips his roof, 
            And then he falls, as I do. I have ventured, 
            Like little wanton boys that swim on bladdrs, 
            This many summers in a sea of glory, 
            But far beyond my depth; my high-blown pride 
            At length broke under me, and noe has left me 
            Weary and old with service, to the mercy 
            Of a rude stream that must for ever hide me. 
            Vain pomp and glory of this world, I hate ye: 
            I feel my heart new opened. O how wretched 
            Is that poor man that hangs on princes favours! 
            there is , betwixt that smile we would aspire to, 
            That sweet aspect of princes, and their ruin. 
            Henry VIII by William Shakespeare" 
           Infected programs will have a file length increase of 1,263 bytes 
           with the virus being located at the end of the file.  The 
           program's date and time in the DOS disk directory listing will 
           have been updated to the current system date and time when 
           infection occurred.  The following text strings are visible 
           within the viral code, as are the text strings from the message 
           displayed by the virus: 
           "Henry 8" 
           "Thespian" 
           "I-EAS Virus Creation Centre v0.19á]" 
           "[H8]" 
           "[Th]" 
           "[IE-VCC v0.19á]" 
           "+.COM" 
           Origin:  Unknown  January, 1996. 

Show viruses from discovered during that infect .

Main Page