Alla.1281
Description Alla.1281
This is a dangerous memory resident multipartite virus. It hooks INT 13h, 21h and writes itself to the MBR of the hard drive and boot sectors of floppy disks as well as to the end of COM files that are accessed.
The virus have a bug and may corrupt 1.4Mb floppy disks while infecting them.
The virus contains the text strings:
Alla 1.0
Wild W0rker /RSA
Check other viruses! Be aware! Use Antiviral Software
Freedom Family
Description Freedom Family
These are very dangerous memory resident encrypted parasitic viruses. They hook INT 3, 21h and write themselves to the end of COM and EXE files (except COMMAND.* and AIDS*.*) that are accessed with FindFirst/Next DOS functions. The viruses also intercept Write DOS call (AH=40h), and compare the data buffer with the strings in Russian "military", "soldier", "weapon". If these strings are found, the viruses erase hard drive sectors, CMOS, and display the message:
F R E E D O M
"Freedom.3600" also hooks Read functions AH=3Fh and check the data while reading as well as while writing.
The viruses also contain the text strings:
"Freedom.2248":
COMMAND AIDS .EXE .COM
* 1.45/2/01.02.1995
"Freedom.3600":
COMMAND AIDS ADINF WEB .EXE .COM
* 2.15/3/09.05.1995
Under debugger "Freedom.2248" corrupts the data and displays the message in the same way.
Freemun.200
Description Freemun.200
It is a harmless nonmemory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. The virus does not manifest itself in any way, it contains the text:
*.com 3¼ ¡
|