Einvolk Family
Description Einvolk Family
These are non-memory resident parasitic viruses. They search for .COM-files of the current and parent subdirectories and write themselves to the end of the files that are found. "Einvolk.521,525" are dangerous viruses. In November, they format hard drive sectors and display:
"Einvolk.521": Weimar Republik 525 VF!93
"Einvolk.525": Big brother is watching you.
Virus Factory 93
"Einvolk.640" is a harmless virus. It contains the following internal text string:
Ein volk, Ein reich, ein führer!
John.L.VF!93
Check other viruses! Be aware! Use Antiviral Software
Lunch.783
Description Lunch.783
It is not a dangerous memory resident encrypted parasitic virus. It patches INT 21h handler - searches for specific code and overwrites it with call to INT 78h (with CD78 opcode), hooks INT 78h and intercepts execution of the file and GetDiskSpace (AH=36h) function. When GetDiskSpace function is executed, the virus searches for .COM-files and writes itself to the file beginning. When the programs are executed, the virus checks the system time and at 12:00 displays:
It is TIME FOR LUNCH, Budy!
Lunch_II.404
Description Lunch_II.404
It is a harmless nonmemory resident parasitic virus. It searches for .COM files and writes itself to the end of the file. It contains the text string:
I just had your files for lunch!!!
|