Gexa.2324
Description Gexa.2324
It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files (except COMMAND.COM) that are accessed. When the AIDSTEST anti-virus is executed, the virus displays a message in Russian. The virus uses anti-debugging tricks and halts Pentium computers. The virus also hooks INT 9 (keyboard) and checks input strings. In case of "gexa" the virus stuffs the text into keyboard buffer "- i am here!", in case of "yalta" it stuffs the text "- nice town..!".
Check other viruses! Be aware! Use Antiviral Software
Otti Family
Description Otti Family
These are very dangerous nonmemory resident encrypted parasitic viruses. They search for .COM files and write themselves to the end of the file. Depending on the system date they erase the hard drive sectors. The viruses contain the text string:
OTTI FOREVER
Otto Family
Description Otto Family
These are harmless nonmemory resident encrypted parasitic viruses. They search for the .COM files and write themselves to the end of the file. While infecting these viruses encrypt the file body as well as themselves. This viruses contain the text strings:
"Otto.415": OTTO VIRUS written by:OTTO SCHTUCK COPYRIGHT MICROSHAFT
INDUSTRIES 1992 (tm.)
"Otto.640": OTTO6 VIRUS, <<_S>>, YAM, COPYRIGHT MICROSHAFT INDUSTRIES 1992
(tm.)
"Otto.640" leaves a memory resident program that hooks INT 9 (keyboard) and when Alt-Ctrl-Del keys are pressed, it displays:
<<_S>>, YAM, MICROSHAFT INDUSTRIES (tm.) 1992!
|