RBIL61 - Virus/antivirus

INT 12 - CPI-standard virusA program which attaches itself to other programs for the purpose of duplicating itself. Viruses often (but not always) contain harmful code which is triggered by some event, after a certain number of reproductions, or on a specific date. See also worm. - "FRIEND" CHECK {callout or callback} (AX=4350h/BX=4920h/CX=AB46h/DX=554Eh)
INT 13 - VIRUS - "Andropinis" - INSTALLATION CHECK (AX=5001h)
INT 13 - ScanBoot - INSTALLATION CHECK (AX=5342h/CX=0001h/DX=0000h)
INT 13 - Novell DOS 7 - SDRes v27.03 - ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=A759h)
INT 13 - VIRUS - "Tiso" - INSTALLATION CHECK (AX=EC00h)
INT 13 - VIRUS - "Neuroquila" - INSTALLATION CHECK (AH=F2h)
INT 13 - PCIBM PC Tools v8+ VSAFE, VWATCH - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. (AH=FAh/DX=5945h)
INT 13 - VIRUS - "Predator" - INSTALLATION CHECK (AX=FD50h)
INT 16 - VIRUS - "Frumble" - INSTALLATION CHECK (AH=DDh)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - INSTALLATION CHECK {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA00h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - UNINSTALL {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA01h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - GET/SET OPTIONS {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA02h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - GET ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA03h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE - GET HOTKEY DISABLE FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA04h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE - SET HOTKEY DISABLE FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA05h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - GET NETWORK DRIVES TEST FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA06h/DX=5945h)
INT 16 - PCIBM PC Tools v8+ VSAFE, VWATCH - SET NETWORK DRIVES TEST FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA07h/DX=5945h)
INT 16 - PCIBM PC Tools v9+ VWATCH v2.1 - ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=FA08h/DX=5945h)
INT 21 - VIRUS - "Susan" - INSTALLATION CHECK (AX=010Fh)
INT 21 - VIRUS - "Perfume" - INSTALLATION CHECK (AX=0B56h)
INT 21 - VIRUS - "Crazy Imp" - INSTALLATION CHECK (AX=0D20h)
INT 21 - Novell DOS 7 - SDRes v27.03 - INSTALLATION CHECK {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AH=0Eh/DL=ADh)
INT 21 - Novell DOS 7 - SDRes v27.03 - CLEAR ??? FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AH=0Eh/DL=AEh)
INT 21 - Novell DOS 7 - SDRes v27.03 - SET ??? FLAG {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AH=0Eh/DL=AFh)
INT 21 - VIRUS - "Tasha Yar" - INSTALLATION CHECK (AX=1812h)
INT 21 - VIRUS - "DS-3783" -INSTALLATION CHECK (AX=187Fh/BX=4453h)
INT 21 - VIRUS - "Pathogen:SMEG" - INSTALLATION CHECK (AX=18FFh)
INT 21 - VIRUS - "New-Year" - INSTALLATION CHECK (AX=2080h)
INT 21 - VIRUS - "Maltese Amoeba" - INSTALLATION CHECK (AX=2B16h/CX=0643h)
INT 21 - VIRUS - "Anti Pode 2.0" - INSTALLATION CHECK (AH=2Ch)
INT 21 - SKUDO - INSTALLATION CHECK (AX=2C00h/CX=534Bh/DX=5544h/BX=4F21h)
INT 21 - VIRUS - "LockJaw/Proto-T" - INSTALLATION CHECK (AX=2C2Ch)
INT 21 - VIRUS - "Jackal" - INSTALLATION CHECK (AX=3000h/BX=614Ah/CX=6B63h/DX=6C61h)
INT 21 - VIRUS - "IMTC" -INSTALLATION CHECK (AX=3030h/BX=694Dh)
INT 21 - VIRUS - "Uruguay" - INSTALLATION CHECK (AX=3032h/DX=1234h)
INT 21 - VIRUS - "Possessed" - INSTALLATION CHECK (AH=30h/DX=ABCDh)
INT 21 - VIRUS - "ANDROMEDA-758" -INSTALLATION CHECK (AH=30h/SI=1234h)
INT 21 - VIRUS - "Dutch-555"/"Quit 1992" - INSTALLATION CHECK (AX=30F1h)
INT 21 - VIRUS - "Burghofer" - INSTALLATION CHECK (AX=330Fh)
INT 21 - VIRUS - "CoffeeShop" - INSTALLATION CHECK (AX=33DAh)
INT 21 - VIRUS - "CoffeeShop" - GENERATE RANDOM NUMBER (AX=33DBh)
INT 21 - VIRUS - "CoffeeShop" - DISPLAY "LEGALIZE CANNABIS" GRAPHIC (AX=33DCh)
INT 21 - VIRUS - "Oropax" - INSTALLATION CHECK (AX=33E0h)
INT 21 - VIRUS - "Agiplan"/"Month 4-6" - INSTALLATION CHECK (AX=357Fh)
INT 21 - VIRUS - "GT-SPOOF" -INSTALLATION CHECK (AX=3D76h)
INT 21 - VIRUS - "JD-448" - INSTALLATION CHECK (AX=3DFFh)
INT 21 - VIRUS - "KYZ/LieWait" - INSTALLATION CHECK (AH=3Fh/BX=FEB0h)
INT 21 - VIRUS - "Shake" - INSTALLATION CHECK (AX=4203h)
INT 21 - VIRUS - "Invader" - INSTALLATION CHECK (AX=4243h)
INT 21 - VIRUS - "Horns" - INSTALLATION CHECK (AX=44A0h)
INT 21 - VIRUS??? (AH=4Ah/BX=00B6h)
INT 21 - VIRUS??? (AH=4Ah/BX=FFFFh/CX=0568h/SI=0129h/DI=0000h)
INT 21 - VIRUS - "MG", "699"/"Thirteen Minutes" - INSTALLATION CHECK (AX=4B04h)
INT 21 - VIRUS - "Holocaust"/"Telefonica" - ??? (AX=4B20h)
INT 21 - VIRUS - "Holocaust"/"Telefonica" - ??? {callout or callback} (AX=4B21h)
INT 21 - VIRUS - "1063"/"Mono" - INSTALLATION CHECK (AX=4B25h)
INT 21 - VIRUS - "Plastique"/"AntiCad" - INSTALLATION CHECK (AX=4B40h)
INT 21 - VIRUS - "Plastique"/"AntiCad" - ??? (AX=4B41h)
INT 21 - VIRUS - "Jabberwocky" - INSTALLATION CHECK (AX=4B4Ah)
INT 21 - VIRUS - "Horse-2" - INSTALLATION CHECK (AX=4B4Bh)
INT 21 - VIRUS - "Murphy-2", "Patricia"/"Smack" - INSTALLATION CHECK (AX=4B4Dh)
INT 21 - VIRUS - "Plastique-2576"/"AntiCad-2576" - INSTALLATION CHECK (AX=4B50h)
INT 21 - VIRUS - "Horse" - INSTALLATION CHECK (AX=4B53h)
INT 21 - VIRUS - "One Half" - INSTALLATION CHECK (AX=4B53h/BX=2121h/CX=1212h/DX=0236h)
INT 21 - VIRUS - "Sparse" - INSTALLATION CHECK (AX=4B55h)
INT 21 - VIRUS - "Murphy-1", "Murphy-4" - INSTALLATION CHECK (AX=4B59h)
INT 21 - VIRUS - "Brothers" - INSTALLATION CHECK (AX=4B5Eh)
INT 21 - VIRUS - "Plastique-2576"/"AntiCad-2576" - ??? (AX=4B60h)
INT 21 - VIRUS - "Shirley" - INSTALLATION CHECK (AX=4B87h)
INT 21 - VIRUS - "Zherkov-1882" - INSTALLATION CHECK (AX=4B95h)
INT 21 - VIRUS - "1876"/"Dash-em" - INSTALLATION CHECK (AX=4BA7h)
INT 21 - VIRUS - "Nomenklatura" - INSTALLATION CHECK (AX=4BAAh)
INT 21 - VIRUS - "948"/"Screenplus1", "Magnitogorsk" - INSTALLATION CHECK (AX=4BAFh)
INT 21 - VIRUS - "UZZY" -INSTALLATION CHECK (AX=4BB1h)
INT 21 - VIRUS - "Lozinsky"/"Zherkov" - INSTALLATION CHECK (AX=4BDDh)
INT 21 - F-DRIVER.SYS v1.14+ - GRAB INT 21 (AX=4BEEh)
INT 21 - VIRUS - "Jerusalem 2" - INSTALLATION CHECK (AX=4BF1h)
INT 21 - VIRUS - "Hitchcock", "Dark Avenger-1028", "1193" - INSTALLATION CHECK (AX=4BFEh)
INT 21 - VIRUS - "USSR-707", "Justice", "Europe 92" - INSTALLATION CHECK (AX=4BFFh)
INT 21 - VIRUS - "Cascade" - INSTALLATION CHECK (AX=4BFFh/SI=0000h/DI=0000h)
INT 21 - VIRUS - "Predator 2" - INSTALLATION CHECK (AX=50FDh)
INT 21 - VIRUS - "516"/"Leapfrog" - INSTALLATION CHECK (AX=5252h)
INT 21 - VIRUS - "Dudley" - INSTALLATION CHECK (AX=5454h)
INT 21 - VIRUS - "Dual_GtM"/"Ganeu" - INSTALLATION CHECK (AH=54h/BX=4475h/CX=616Ch)
INT 21 - VIRUS - "PS-MPC.Gold" - INSTALLATION CHECK (AX=5643h)
INT 21 - VIRUS - "WARP" -INSTALLATION CHECK (AX=5741h)
INT 21 - VIRUS - "1067"/"Headcrash" - INSTALLATION CHECK (AX=58CCh)
INT 21 - VIRUS - "1067"/"Headcrash" - GET ORIGINAL INT 21h VECTOR (AX=58DDh)
INT 21 - VIRUS - "DOS IDLE" - INSTALLATION CHECK (AX=6303h)
INT 21 - VIRUS - "Replicator" - INSTALLATION CHECK (AX=6304h)
INT 21 - VIRUS - "Rape-747" - INSTALLATION CHECK (AX=6969h)
INT 21 - VIRUS - "1205" - INSTALLATION CHECK (AH=71h)
INT 21 - VIRUS - "LEGO" -INSTALLATION CHECK (AX=7575h)
INT 21 - VIRUS - "Klaeren"/"Hate" - INSTALLATION CHECK (AH=76h)
INT 21 - VIRUS - "Growing Block" - INSTALLATION CHECK (AX=7700h)
INT 21 - VIRUS - "Whisper"/"Taipan" - INSTALLATION CHECK (AX=7BCEh)
INT 21 - VIRUS - "Tai-Pan.666"/"Doom II Death" - INSTALLATION CHECK (AX=7BCFh)
INT 21 - VIRUS - "OffSpring" - INSTALLATION CHECK (AH=7Dh)
INT 21 - VIRUS - "Squeaker","ASeXual" - INSTALLATION CHECK (AH=7Fh)
INT 21 - VIRUS - "SVC" - INSTALLATION CHECK (AH=83h)
INT 21 - VIRUS - "SVC 5.0" or "SVC 6.0" - INSTALLATION CHECK (AH=84h)
INT 21 - VIRUS - "Vriest" - INSTALLATION CHECK (AH=89h)
INT 21 - VIRUS - "Carioca" - INSTALLATION CHECK (AH=90h)
INT 21 - VIRUS - "Nina" - INSTALLATION CHECK (AX=9753h)
INT 21 - VIRUS - "Massacre/Beavis" - INSTALLATION CHECK (AX=9AD5h)
INT 21 - VIRUS - "789"/"Filehider" - INSTALLATION CHECK (AX=A1D5h)
INT 21 - VIRUS - "Eddie-2" - INSTALLATION CHECK (AX=A55Ah)
INT 21 - VIRUS - "Blinker" - INSTALLATION CHECK (AX=AA00h)
INT 21 - VIRUS - "Backtime" - INSTALLATION CHECK (AX=AA03h)
INT 21 - VIRUS - "600" or "Voronezh"-family - INSTALLATION CHECK (AH=ABh)
INT 21 - VIRUS - Major BBS - INSTALLATION CHECK (AX=ABCDh)
INT 21 - VIRUS - "Requires" - INSTALLATION CHECK (AH=B3h)
INT 21 - VIRUS - "Tracker" - INSTALLATION CHECK (AX=B974h)
INT 21 - VIRUS - "Hey You" - INSTALLATION CHECK (AX=BBBBh)
INT 21 - VIRUS - "Datalock" - INSTALLATION CHECK (AH=BEh)
INT 21 - VIRUS - "USSR-1049" - INSTALLATION CHECK (AX=BE00h)
INT 21 - VIRUS - "Slow"/"Zerotime", "Solano" - INSTALLATION CHECK (AH=C0h)
INT 21 - VIRUS - "QUICKY" - INSTALLATION CHECK (AX=C000h)
INT 21 - VIRUS - "QUICKY" - TURN INFECTION OFF (AX=C001h)
INT 21 - VIRUS - "QUICKY" - TURN INFECTION ON (AX=C002h)
INT 21 - VIRUS - "Solano" - ??? (AH=C1h)
INT 21 - VIRUS - "Scott's Valley" - ??? (AH=C2h)
INT 21 - VIRUS - "905"/"Backfont" - INSTALLATION CHECK (AX=C301h/DX=F1F1h)
INT 21 - VIRUS - "Sverdlov" - INSTALLATION CHECK (AX=C500h)
INT 21 - VIRUS - "Socha" - INSTALLATION CHECK (AH=C6h)
INT 21 - VIRUS - "Yankee Doodle" or "MLTI" - INSTALLATION CHECK (AX=C603h/BX=002Dh)
INT 21 - VIRUS - "MH-757" - INSTALLATION CHECK (AX=C700h)
INT 21 - VIRUS - "Piter" - ??? (AX=CA15h)
INT 21 - VIRUS - "Milous" - INSTALLATION CHECK (AH=CBh)
INT 21 - VIRUS - "Witcode" - INSTALLATION CHECK (AX=CB02h)
INT 21 - VIRUS - "Westwood" - INSTALLATION CHECK (AH=CCh)
INT 21 - VIRUS - "Westwood" - ??? (AH=CDh)
INT 21 - VIRUS - "MALAGA" - INSTALLATION CHECK (AH=D0h)
INT 21 - VIRUS - "Fellowship" - INSTALLATION CHECK (AX=D000h)
INT 21 - VIRUS??? (AH=D2h)
INT 21 - VIRUS - "Carfield" - ??? (AH=D5h)
INT 21 - VIRUS - "Diamond-A", "Diamond-B" - INSTALLATION CHECK (AX=D5AAh)
INT 21 - VIRUS - "Dir" - INSTALLATION CHECK (AX=D5AAh/BP=DEAAh)
INT 21 - VIRUS - "Gotcha" - INSTALLATION CHECK (AX=DADAh)
INT 21 - VIRUS - "Plovdiv 1.3" - INSTALLATION CHECK (AX=DAFEh)
INT 21 - VIRUS - "Monika" - INSTALLATION CHECK (AX=DC28h)
INT 21 - VIRUS - "Red Spider" - INSTALLATION CHECK (AX=DCBAh)
INT 21 - VIRUS - "Jerusalem"-family - RELOCATE VIRUS??? (AH=DDh)
INT 21 - VIRUS- "GOLGI" - INSTALLATION CHECK (AX=DDEFh)
INT 21 - VIRUS - "Durban" - INSTALLATION CHECK (AH=DEh)
INT 21 - VIRUS - "90210" - INSTALLATION CHECK (AX=DEADh)
INT 21 - VIRUS - "Brothers" - INSTALLATION CHECK (AX=DEDEh)
INT 21 - VIRUS - "Maze" - INSTALLATION CHECK (AX=DEFEh)
INT 21 - VIRUS - "Jerusalem", "Armagedon" - INSTALLATION CHECK (AH=E0h)
INT 21 - VIRUS - "8-tunes" - INSTALLATION CHECK (AX=E00Fh)
INT 21 - VIRUS - "Mendoza", "Fu Manchu" - INSTALLATION CHECK (AH=E1h)
INT 21 - VIRUS - "Anarkia" - INSTALLATION CHECK (AH=E4h)
INT 21 - VIRUS - "Spyer"/"Kiev" - INSTALLATION CHECK (AH=E7h)
INT 21 - VIRUS - "Dark End" - INSTALLATION CHECK (AX=E900h)
INT 21 - VIRUS - "Halloween.1839" - INSTALLATION CHECK (AX=EC27h)
INT 21 - VIRUS - "Terror" - INSTALLATION CHECK (AX=EC59h)
INT 21 - VIRUS - "Jerusalem-G", "Pregnant", "Barrotes" - INSTALLATION CHECK (AH=EEh)
INT 21 - VIRUS - "GingerBread" - INSTALLATION CHECK (AX=EEE7h)
INT 21 - VIRUS - "Mabuhay"/"June 12th" - INSTALLATION CHECK (AH=EFh)
INT 21 - VIRUS - "Frere Jacques" - INSTALLATION CHECK (AH=F0h)
INT 21 - VIRUS - "Burgler/H" - INSTALLATION CHECK (AX=F078h)
INT 21 - VIRUS - "F1-337" - ??? (AH=F1h)
INT 21 - VIRUS - "Tremor" - INSTALLATION CHECK (AX=F1E9h)
INT 21 - VIRUS - "PcVrsDs" - INSTALLATION CHECK (AX=F2AAh)
INT 21 - VIRUS - "Carfield" - INSTALLATION CHECK (AH=F3h)
INT 21 - VIRUS - "GP1" - INSTALLATION CHECK (AH=F7h)
INT 21 - VIRUS - "Satans-Bug" - INSTALLATION CHECK (AH=F9h)
INT 21 - VIRUS - "Cinderella 2" - INSTALLATION CHECK (AH=FAh)
INT 21 - PCIBM PC Tools v7+ VDEFEND, VSAFE, VWATCH - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AH=FAh/DX=5945h)
INT 21 - VIRUS - "Cinderella" - INSTALLATION CHECK (AH=FBh)
INT 21 - VIRUS - "dBASE" - INSTALLATION CHECK (AX=FB0Ah)
INT 21 - VIRUS - "Groove" - INSTALLATION CHECK (AX=FBA0h)
INT 21 - VIRUS - "Dir.1367" - INSTALLATION CHECK (AX=FBFBh)
INT 21 - VIRUS - "Troi" - INSTALLATION CHECK (AH=FCh)
INT 21 - VIRUS - "Invisible" - INSTALLATION CHECK (AX=FC03h)
INT 21 - VIRUS - "Border" - INSTALLATION CHECK (AH=FDh)
INT 21 - VIRUS - "Delwin" - INSTALLATION CHECK (AX=FDACh)
INT 21 - VIRUS - "483" - INSTALLATION CHECK (AH=FEh)
INT 21 - VIRUS - "Flip" - INSTALLATION CHECK (AX=FE01h)
INT 21 - VIRUS - "2468"/"Tequila" - INSTALLATION CHECK (AX=FE02h)
INT 21 - VIRUS - "2468"/"Tequila" - DISPLAY VIRUS MESSAGE (AX=FE03h)
INT 21 - VIRUS - "Shifting Objective" - INSTALLATION CHECK (AX=FEADh)
INT 21 - VIRUS - "Black Monday" - INSTALLATION CHECK (AX=FEDCh)
INT 21 - VIRUS - "CIDER" - INSTALLATION CHECK (AX=FEFEh)
INT 21 - VIRUS - "Sunday", "Tumen 0.5", "Hero" - INSTALLATION CHECK (AH=FFh)
INT 21 - VIRUS - "Drop" - INSTALLATION CHECK (AX=FF01h)
INT 21 - FLU_SHOT+ v1.83 - INSTALLATION CHECK (AX=FF0Fh)
INT 21 - VIRUS - "Twins" - INSTALLATION CHECK (AX=FF10h)
INT 21 - VIRUS - "08/15"/"Many Fingers" - INSTALLATION CHECK (AX=FFFEh)
INT 21 - VIRUS - "Anti-Thunderbyte/LEMMING" - INSTALLATION CHECK (AX=FFFEh/BX=0000h)
INT 21 - VIRUS - "Ontario", "Year 1992"/"B1M92" - INSTALLATION CHECK (AX=FFFFh)
INT 21 - VIRUS - "Revenge" - INSTALLATION CHECK (AX=FFFFh/CX=0000h)
INT 2F - F-PROT v1.x only - F-LOCK.EXE - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. (AX=4653h/CX=0002h)
INT 2F - F-PROT v1.x only - F-XCHK.EXE - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. (AX=4653h/CX=0003h)
INT 2F - F-PROT v1.x only - F-POPUP.EXE - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. (AX=4653h/CX=0004h)
INT 2F - F-PROT v1.x only - F-DLOCK.EXE - API(Application Program[ming] Interface) The defined set of calls which a program may make to interact with or request services of the operating system or environment under which it is running. Because the inputs and outputs of the calls are well-defined, a program using the API can continue using the identical calls even if the internal organization of the program providing the API changes. (AX=4653h/CX=0005h)
INT 2F - PCIBM PC Tools v7.0+ VDEFEND, VSAFE, VWATCH, DATAMON - SET ??? ADDRESS {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6282h/DI=0000h)
INT 2F - PCIBM PC Tools v7-8 DATAMON, v9+ DPROTECT - INSTALLATION CHECK {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6284h/BX=0000h/CX=0000h)
INT 2F - PCIBM PC Tools v7-8 DATAMON, v9+ DPROTECT - GET ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6284h/BX=0001h/CX=0001h)
INT 2F - PCIBM PC Tools v7-8 DATAMON, v9+ DPROTECT - GET OPTIONS {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6284h/BX=0002h/CX=0002h)
INT 2F - PCIBM PC Tools v7-8 DATAMON, v9+ DPROTECT - SET OPTION??? FLAGS {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6284h/BX=0003h)
INT 2F - PCIBM PC Tools v8 DATAMON, v9+ DPROTECT - ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=6284h/BX=0004h/CX=0004h)
INT 2F - AMIAmerican Megatrends, Inc.(American Megatrends, Inc.) A hardware, software and firmware company founded in 1985. IAM.SYS - INSTALL ??? CALLBACK {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=C080h)
INT 2F - AMIAmerican Megatrends, Inc.(American Megatrends, Inc.) A hardware, software and firmware company founded in 1985. IAM.SYS - CLEAR ??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=C081h)
INT 2F - ThunderByte??? - INSTALLATION CHECK {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=C900h/BP=0000h)
INT 2F - ThunderByte??? - DISINFECT FILE??? {undocumentedInformation about a product which is not publicly available from the manufacturer, and must be determined by reverse-engineering (disassembly, trial-and-error, etc.). Undocumented information tends to change -- often dramatically -- between successive revisions of a product, since the manufacturer has no obligation to maintain compatibility in behavior which is not explicitly stated.} (AX=C987h)
INT 2F - ThunderByte TBLOG - WRITE STRING TO LOG (AX=C9FDh)
INT 2F - TBSCANX - INSTALLATION CHECK (AX=CA00h/BX=5442h)
INT 2F - TBSCANX - GET STATUS (AX=CA01h)
INT 2F - TBSCANX - SET STATE (AX=CA02h)
INT 2F - TBSCANX - SCAN BUFFER (AX=CA03h)
INT 2F - TBSCANX - SCAN FILE (AX=CA04h)
INT 31 - VIRUS - "Vacsina" series - INSTALLATION CHECK (NOT A VECTOR!)
INT 32 - VIRUS - "Tiny" Viruses - ORIGINAL INT 21h VECTOR
INT 44 - VIRUS - "Lehigh" - ORIGINAL INT 21h VECTOR
INT 60 - VIRUS - "Zero Bug" - INSTALLATION CHECK
INT 61 - VIRUS - "SEMTEX"/"Screen Trasher" - INT 21h SUBSTITUTE
INT 6B - VIRUS - "Saddam" - ORIGINAL INT 21h VECTOR
INT 70 - VIRUS - "Stupid" - ORIGINAL INT 21h VECTOR
INT 87 - VIRUS - "ZeroHunt" - VIRAL CODE (NOT A VECTOR!)
INT 8B - VIRUS - "ZeroHunt" - INSTALLATION CHECK (NOT A VECTOR!)
INT 9C - VIRUS - "INT13" - ORIGINAL INT 13h VECTOR
INT 9D - VIRUS - "INT13" - ROM(Read-Only Memory) A memory for program storage which may not be changed by the program as it runs. INT 13h ENTRY POINT
INT 9E - VIRUS - "INT13" - ORIGINAL INT 21h VECTOR
INT 9F - VIRUS - "INT13" - STORAGE FOR USER INT 13h VECTOR
INT D3 - VIRUS - "Antiexe" - RELOCATED INT 13
INT E0 - VIRUS - "Micro-128" - ???
INT F1 - VIRUS - "Violetta" - ???
INT FF - VIRUS - "Violetta" - ???