FrodoSoft Family
Description FrodoSoft Family
These are harmless not memory resident parasitic viruses. "Frodo.563,6433,656" are encrypted ones. They search for COM-files and write themselves to their ends. The viruses contain the internal text string: "(c) Frodo Soft".
"FrodoSoft.590" contains the internal text string: "(c) fotos rofd". In some cases it alters file attributes, sometimes it returns to DOS without execution of host program.
"FrodoSoft.633,656" delete MKS*.EXE files.
Check other viruses! Be aware! Use Antiviral Software
Phantasmagoria
Description Phantasmagoria
It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files of the current directory and writes itself to the end of the file. Before return to the host program it decrypts and displays the message:
PHANTASMAGORIA ! Sleep Well
It set INT 20h to JMP RESET instruction and if the host program terminates by INT 20h call, the computer reboots.
Phantom.2201
Description Phantom.2201
It is a dangerous memory resident encrypted virus. It hooks INT 21h and writes itself to the end of .COM files that are opened or executed. It infects only the files that begin from JMP command. It creates the "bad" clusters in the FAT sectors, shifts and overturns the screen, displays the message:
HI ROOKIE! I`m a THESEASE! I live in YOUR computer - sorryall Thanks to
Brains in the Computer Siences!
The virus also appends to the end of .EXE, .DBF and .ARC files the texts:
The PHANTOM Was HERE - Sorry...
Copyright (c) PHANTOM -- This virus was designed in the HUNGARIAN VIRUS
DEVELOPING LABORATORY. (H.V.D.L.)v1
|