Flame
Description Flame
It's a very dangerous floppy Boot and HD MBR infector. It hooks INT 13h. The old Boot-sector is saved into the sector at address 1901/01. As the result, the contents of that sector is corrupted. On MBR infection the virus overwrites it. Sometimes this infector displays the picture that looks like the tongues of flames.
Check other viruses! Be aware! Use Antiviral Software
Jerusalem.Havoc.3072
Description Jerusalem.Havoc.3072
It is a harmless memory resident virus. It hooks INT 13h, 21h. It writes itself to the end of EXE files that are accessed by FindFirst/Next FCB, to the MBR of the hard drive while executing an infected file, and to boot sectors of the floppy disks that are accessed.
This virus is related to "Jerusalem" and "Havoc".
Jerusalem.MBR
Description Jerusalem.MBR
This is a memory resident very dangerous multipartite virus. It infects COM and EXE files (except COMMAND.COM) in the same way as the "Jerusalem" virus does. it also affects the MBR sector of the hard disk and writes itself just after the MBR.
While executing an infected file the virus infects the MBR only, and then returns to the host program. While loading from infected MBR the virus decreases the size of DOS memory, hooks INT 13h and waits for INT 21h address changing. Then the virus increases the DOS memory size and hooks INT 21h which is used for file infection.
Depending on its internal counter the virus erases the disk sectors. The virus contains the text "COMMAND.COM".
|