Gift.553
Description Gift.553
These are not dangerous memory resident parasitic viruses. "Gift.724" is encrypted. They hook INT 21h and write themselves to the beginning of COM files that are searched. While installing memory resident the viruses allocate a 64Kb block of DOS memory that may decrease the system performance.
The most interesting feature of these viruses is their structure: it follows the standard ZIP archives binary format. The beginning of virus code is very similar to ZIP header, and to the end of infected files a block of data is written that is similar to ZIP "end-of-archive" data. Despite on this, when infected files are run, these data are executed as a sequence of legal assembler instructions that pass control to the main virus code. As a result, the infected files can be not only executed as DOS programs, but also can be accessed as ZIP archives. These "archives" contains just one file named "SMF_Gift.com". Being "extracted" this file is the same as original contents of infected file.
Check other viruses! Be aware! Use Antiviral Software
Kai.301
Description Kai.301
This is a harmless nonmemory resident parasitic virus. It searches for COM files and writes itself to the end of the file. The virus contains the text string:
AVS v1.0(c)1997 'KAI
Kak.391
Description Kak.391
It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files and writes itself to the end of the file. Depending on the system times it displays the message in Russian and beeps by system speaker.
|