Foma family
Description Foma family
These are not dangerous memory resident parasitic viruses. They hook INT 8, 21h and write themselves to the end of COM files that are executed or opened. When the AIDSTEST anti-virus is executed, the viruses display one the messages and halt the system:
Abnormal program termination
?KMON-F-System read failure halt 177640
Unrecognised error. DMA failure.
Depending on the system date and their counters the virus blink the screen or display messages in Russian. The viruses also contain the text strings:
"Foma.972": STIN V:1.02
"Foma.1000": STIN V:1.01
"Foma.1200": STIN V:1.00
( CGA/EGA/VGA Terminal Color Invertor ) 11-Nov-1991.
Kpy ¼ «p á½ ¡¿ á¼ ¿ ¡Ñ ½áí ¼ ¿ «ó¿ á¼ »« ó áÑ all.....
"Foma.1733": FOMA V:1.01
"Foma.1900": FOMA V:1.00
Check other viruses! Be aware! Use Antiviral Software
ByXute.1056
Description ByXute.1056
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. On 31st of any month the virus deleted files that are executed, erases boot sector on the of current drive and displays the message:
IvU
The virus also contains the text:
By XUTE!!
C0m.263
Description C0m.263
This is a non-memory resident, very dangerous virus. It searches for .COM-files and overwrites them. On Tuesday, it renames the COMMAND.COM file to a new name: COMMAND.C0M and then types:
Error reading drive C:
BillMeTuesday!
On other days, it types: "EXEC Failure".
|