FCL.2044
Description FCL.2044
This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are accessed. The virus does not infect files with names HW*, V3*, etc. according to the string (two bytes per name):
HWV3F-J2T2TKTVTBWCCODEVIFIGIRAFEMTBRWI
On December 25, or if the system date is December 3rd 1997, or depending on some system conditions (if some memory resident anti-virus is installed?) the virus erases the CMOS.
The virus contains the text strings:
[FCL virus ] Nice Meet You See Again
NO WORK LAW
Check other viruses! Be aware! Use Antiviral Software
Ramesy.336
Description Ramesy.336
It is a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. Because of error it corrupts COM files of small length. It contains the text string:
[RAMESY] Coaxial Karma/94 *.COM
Ramones.a
Description Ramones.a
It is a very dangerous memory resident multipartite virus. It hooks INT 13h and writes itself to the boot sectors of the floppy disks and to the MBR of the hard drive. The virus encrypts the original boot and MBR sectors before saving them on disk.
The virus also overwrites EXE files that are accessed. When such file is executed, the virus infects the MBR of the hard drive, displays the message and returns to DOS:
Incorrect DOS Version.
The virus also contains the text:
[RamonesMania] by Evil One.
|