Uploaded May 2014 | Updated September 2026, 2 weeks ago
Here are some Croatian DOS viruses as not many of them exist. Their payload is trashing hard disk and showing message "Croatia must be free! (c) Inquisitor 1995".
This virus had one purpose if I'm not wrong: To spread the message.
No one would care about it if it shows message. That's why it's possible that it was trashing hard drive to show how this virus (or actual message to people) is important.
Back in 90s, due to Croatian Independence and fall of Yugoslavia, a Croatian War of Independence began and it lasted for about 4 years and 7 months. No one wants to see such war to ever happen again in here.
Payload dates:
12th of Febuary (CroVir.556, Croatia_II.560)
30th of March (CroVir.625, Croatian Parliament Day since 2001, before it was Croatian Statehood Day)
Aliases (Croatia_II.560):
Virus.DOS.Croatia_II.560 (Kaspersky Lab)
Croatia_II.560 (ClamAV)
Croatia_II.560 (Panda)
Croatia_II.560 (FPROT)
Virus:DOS/Croatia_II.560 (MS(OneCare))
Croatia.560 (DrWeb)
Croatia_II.560 (VirusBuster)
Crotia-560 (AVAST)
Virus.DOS.Croatia_II.560 (Ikarus)
.TSR (AVG)
Univ/a (NAI)
CROATIA.560 (PCCIL)
Virus.Dos.Croatia_II.560 (Rising)
Aliases (CroVir.625):
CroVir.625 (Kaspersky Lab)
Virus: Univ/a (McAfee)
CroVir.625 (ClamAV)
Inquisitor.625 (Panda)
Inquisitor.625 (FPROT)
Virus:DOS/Inquisitor.625 (MS(OneCare))
Inquisitor.625 (DrWeb)
Inquisitor.625 (BitDef7)
Inquisitor.625 (VirusBuster)
Inquisitor-625 (AVAST)
Virus.DOS.CroVir.625 (Ikarus)
Inquisitor (AVG)
Univ/a (NAI)
CROVIR.625-C (PCCIL)
Virus.Dos.CroVir.625 (Rising)
Aliases (CroVir.556):
TODO (Otherwise it should be the same thing as version 625.)
Here are some Croatian DOS viruses as not many of them exist. Their payload is trashing hard disk and showing message "Croatia must be free! (c) Inquisitor 1995".
This virus had one purpose if I'm not wrong: To spread the message.
No one would care about it if it shows message. That's why it's possible that it was trashing hard drive to show how this virus (or actual message to people) is important.
Back in 90s, due to Croatian Independence and fall of Yugoslavia, a Croatian War of Independence began and it lasted for about 4 years and 7 months. No one wants to see such war to ever happen again in here.
Payload dates:
12th of Febuary (CroVir.556, Croatia_II.560)
30th of March (CroVir.625, Croatian Parliament Day since 2001, before it was Croatian Statehood Day)
Aliases (Croatia_II.560):
Virus.DOS.Croatia_II.560 (Kaspersky Lab)
Croatia_II.560 (ClamAV)
Croatia_II.560 (Panda)
Croatia_II.560 (FPROT)
Virus:DOS/Croatia_II.560 (MS(OneCare))
Croatia.560 (DrWeb)
Croatia_II.560 (VirusBuster)
Crotia-560 (AVAST)
Virus.DOS.Croatia_II.560 (Ikarus)
.TSR (AVG)
Univ/a (NAI)
CROATIA.560 (PCCIL)
Virus.Dos.Croatia_II.560 (Rising)
Aliases (CroVir.625):
CroVir.625 (Kaspersky Lab)
Virus: Univ/a (McAfee)
CroVir.625 (ClamAV)
Inquisitor.625 (Panda)
Inquisitor.625 (FPROT)
Virus:DOS/Inquisitor.625 (MS(OneCare))
Inquisitor.625 (DrWeb)
Inquisitor.625 (BitDef7)
Inquisitor.625 (VirusBuster)
Inquisitor-625 (AVAST)
Virus.DOS.CroVir.625 (Ikarus)
Inquisitor (AVG)
Univ/a (NAI)
CROVIR.625-C (PCCIL)
Virus.Dos.CroVir.625 (Rising)
Aliases (CroVir.556):
TODO (Otherwise it should be the same thing as version 625.)
![Trojan Horse (Windows): Macur
In general it drops itself to %windir% with filename pic.exe, edits a line in Win.ini to load that file at every boot (load=pic.exe), and then it creates about 1,410 folders named with zeros, ones, twos, threes, fours and fives, and it keeps stacking number by number using this pattern:
0
00
000
...
00000000000000000000000000000000... (Its pretty much difficult to count...)
After it came to maximum, it continues to next number (1):
1
11
111
...
Another interesting thing is that it checks the folder name of current folder with specific pattern. If the 1st letter is W or 5th letter is O and 6th letter is W, it will not show fake error message. Note that it does check even parent folders as far its noticed when trojan was launched on desktop.
Aliases:
Trojan.Win32.Macur (Kaspersky Lab)
Trojan: Macur (McAfee)
Troj/Macur (Sophos)
Trj/Macur (Panda)
W32/Trojan!028f (FPROT)
Trojan:Win32/Macur (MS(OneCare))
Trojan.Macur (DrWeb)
Win32/Macur trojan (Nod32)
Trojan.Win32.Macur (BitDef7)
Trojan.Macur.B (VirusBuster)
Win32:Trojan-gen (AVAST)
Trojan.Win32.Macur (Ikarus)
Generic.KSI (AVG)
TR/Macur.A (AVIRA)
Trojan.Macur (NAV)
W32/Macur.A (Norman)
Macur (NAI)
TROJ_MACUR.A (PCCIL)
Trojan.Macur (Rising)
Trojan.Win32.Macur [AVP] (FSecure)
TROJ_MACUR.A (TrendMicro)
Trojan.Macur.B (VirusBusterBeta) Trojan Horse (Windows): Macur](https://i.ytimg.com/vi/_apjJyW5TSc/mqdefault.jpg)









