Friday, August 31, 2012

Tags

List of computer viruses



To aid the fight against computer viruses and other types of malicious software, many security advisory organizations and developers of anti-virus software compile and publish lists of viruses.
The compilation of a unified list of viruses is made difficult because of naming. When a new virus appears, the rush begins to identify and understand it as well as develop appropriate counter-measures to stop its propagation. Along the way, a name is attached to the virus. As the developers of anti-virus software compete partly based on how quickly they react to the new threat, they usually study and name the viruses independently. By the time the virus is identified, many names denote the same virus.
Another source of ambiguity in names is that sometimes a virus initially identified as a completely new virus is found to be a variation of an earlier known virus, in which cases, it is often renamed. For example, the second variation of the Sobig worm was initially called "Palyh" but later renamed "Sobig.b". Again, depending on how quickly this happens, the old name may persist.

Scope

In terms of scope, there are two major variants: the list of "in-the-wild" viruses, which list viruses in active circulation, and lists of all known viruses, which also contain viruses believed not be in active circulation (also called "zoo viruses"). The sizes are vastly different, in-the-wild lists contain a hundred viruses but full lists contain tens of thousands.

List of viruses and related programs

Name Alias(es) Type Subtype Isolation Date Isolation Origin Author Notes
1260
MS-DOS
1990

Mark Washburn First virus to use polymorphic encryption
4K 4096 MS-DOS January 1990



The first virus to use stealth
5lo
MS-DOS
October 1992


Infects .EXE files only
A and A
MS-DOS
Windows 95/98






Abraxas Abraxas5 MS-DOS
Windows 95/98

April 1993 Europe
ARCV group Infects COM file. Disk directory listing will be set to the system date and time when infection occurred.
Acid Acid.670, Acid.670a, Avatar.Acid.670, Keeper.Acid.670 MS-DOS
Windows 95/98

1992

Corp-$MZU Infects COM file. Disk directory listing will not be altered.
Acme
DOS (Windows 95 MS-DOS)




Upon executing infected EXE, this infects another EXE in current directory by making a hidden COM file with same base name.
ABC ABC-2378, ABC.2378, ABC.2905 MS-DOS
October 1992


ABC causes keystrokes on the compromised machine to be repeated.
Actifed
MS-DOS





Ada
MS-DOS
October 1991
Argentina
The Ada virus mainly targets .COM files, specifically COMMAND.COM.
Agena Agena.723 MS-DOS
September 1992 Spain

Infected programs will have a file length increase of 723 to 738 bytes
AGI-Plan Month 4-6 MS-DOS

Mühlheim an der Ruhr, Germany

AGI-Plan is notable for reappearing in South Africa in what appeared to be an intentional re-release.
Ah David-1173, Tuesday MS-DOS
May 1991 Italy

Systems infected with Ah will experience frequent system hangs.
AI
MS-DOS





AIDS AIDSB, Hahaha, Taunt MS-DOS
1990

Dr. Joseph Popp AIDS is the first virus known to exploit the MS-DOS "corresponding file" vulnerability.
AIDS II







AirCop Air cop-B, Red State MS-DOS
Jan 1990


Infects the boot sector of floppy disks.
Alabama Alabama.B MS-DOS
October 1989
Hebrew University, Jerusalem
Files infected by Alabama increase in size by 1,560 bytes.
Alcon RSY, Kendesm, Ken&Desmond, Ether MS-DOS
December 1997


Overwrites random information on disk causing damage over time.
Ambulance







Anna Kournikova
Email
VBScript

February 11, 2001
Sneek, Netherlands Jan de Wit A dutch court stated that US$166,000 in damages was caused by the worm.
AntiCMOS






Due a bug in the virus code, the virus fails to erase CMOS information as intended.
ARCV-n
MS-DOS
October - November 1992
England, United Kingdom ARCV Group ARCV-n is a term for a large family of viruses written by the ARCV group.
Bad Sectors 1.2







Bomber CommanderBomber MS-DOS


Bulgaria
Polymorphic virus which infects systems by inserting fragments of its code randomly into executable files.
Brain Pakistani flu,

January 1986
Lahore, Pakistan Basit and Amjad Farooq Alvi Considered to be the first computer virus for the PC
Byte Bandit
Amiga, Bootsector virus
January 1988

Swiss Cracking Association It was one of the most feared Amiga viruses until the infamous Lamer Exterminator.
Christmas Tree







Commwarrior
Symbian Bluetooth worm




Famous for being the first worm to spread via MSS and Bluetooth.
Creeper
TENEX operating system
1971

Bob Thomas An experimental self-replicating program which gained access via the ARPANET and copied itself to the remote system.
Eliza
MS-DOS
Dec 1991



Elk Cloner
Apple II
1982 Mt. Lebanon, Pennsylvania, United States Mt. Lebanon, Pennsylvania, United States Rich Skrenta The first virus observed "in the wild"
Graybird Graybird P






Hare
MS-DOS
Windows 95, Windows 98

August 1996


Famous for press coverage which blew its destructiveness out of proportion
ILOVEYOU


May 5 2000
Manila, Philippines Reomel Ramores, Onel de Guzman A computer worm that attacked tens of millions of Windows personal computers
INIT 1984
Mac OS
13-3-1992


Malicious, triggered on Friday the 13th. Shows a message "fuck this PC."
Jeefo







Jerusalem
DOS
October 1987


Jerusalem was initially very common and spawned a large number of variants.
Kama Sutra Blackworm, Nyxem, and Blackmal

January 16, 2006


Designed to destroy common files such as Microsoft Word, Excel, and PowerPoint documents.
Koko
DOS March 1991



The payload of this virus activates on July 29 and February 15 and may erase data on the users hard drive
Lamer Exterminator
Amiga, Boot sector virus
October 1989
Germany
Random encryption, fills random sector with "LAMER"
MacMag Drew, Bradow, Aldus, Peace

12-1987

MDEF Garfield, Top Cat

5-1990



Melissa Mailissa, Simpsons, Kwyjibo, Kwejeebo Microsoft Word macro virus
March 26, 1999
New Jersey, United States David L. Smith Part macro virus and part worm
Michelangelo
MS-DOS
February 4 1991 Australia

Ran March 6 (Michelangelo's birthday)
Navidad


December 2000



Natas
Multipartite, stealth, Polymorphic
1994

"Priest"
nVIR MODM, nCAM, nFLU, kOOL, SHIT, prod, Fuck, Hpat, Jude Mac OS
1987


nVIR has been known to 'hybridize' with different variants of nVIR on the same machine.
OneHalf Slovak Bomber, Freelove or Explosion-II MS-DOS
1994
Slovakia Vyvojar It is also known as one of the first viruses to implement a technique of "patchy infection"
Ontario.1024







Ontario.2048







Ontario SBC MS-DOS
July 1990
Ontario, Canada
Death Angel
Pikachu virus


June 28, 2000
Asia
The Pikachu virus is believed to be the first computer virus geared at children.
Ping-pong Boot, Bouncing Ball, Bouncing Dot, Italian, Italian-A, VeraCruz Boot sector virus




Harmless to most computers

RavMonE.exe RJump.A, Rajump, Jisx Worm
2006-06-20


Once distributed in Apple iPods, but a Windows-only virus
SCA
Amiga, Boot sector virus
November 1987
Switzerland Swiss Cracking Association Puts a message on screen. Harmless except it might destroy a legitimate non-standard boot block.
Scores Eric, Vult, NASA, San Jose Flu Mac OS
Spring 1988


Designed to attack two specific applications which were never released.
Scott's Valley
MS-DOS
September 1990 Scotts Valley, California, United States

Infected files will contain the seemingly meaningless hex string 5E8BDE909081C63200B912082E.
SevenDust 666, MDEF, 9806, Graphics Accelerator, SevenD Mac OS
1998



Shankar's Virus W97M.Marker.o Polymorphic Virus
June 3, 1999

Sam Rogers Infects Word Documents
Shoerec
Windows 32
Simile Etap, MetaPHOR Windows Polymorphic


The Mental Driller The metamorphic code accounts for around 90% of the virus' code
Stoned


1987 Wellington, New Zealand

One of the earliest and most prevalent boot sector viruses
Sunday
MS-DOS Jerusalem.Sunday November 1989 Seattle, Washington, United States

Because of an error in coding, the virus fails to execute its payload.
TDL-4
Botnet

JD virus


Techno
MS-DOS




The virus plays a tune that was created by the author of the virus
Whale
MS-DOS Polymorphic July 1, 1990
Hamburg, Germany R Homer At 9216 bytes, was for its time the largest virus ever discovered.
ZMist ZMistfall, Zombie.Mistfall Zombie.Mistfall



Z0mbie It was the first virus to use a technique known as "code integration".