Hail.673
Description Hail.673
This is a harmless memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM files that are executed. On April 5th, the virus displays the following message:
We say retribution
We say vengance is bliss
We say revolution
With a cast iron fist
Hail and Kill 98
Check other viruses! Be aware! Use Antiviral Software
Crazy.1402
Description Crazy.1402
These are harmless memory-resident stealth viruses that infect COM-files as a program is terminated (the Exit and Keep DOS functions), files are being searched (FindFirst and FindNext) or a file is closed. The viruses decreases the memory area allocated for DOS (the word at the address 0000:0413). They hook 12 DOS functions and use stealth mechanism: recover infected files as they are accessed. Upon installation the viruses create in RAM two own copies: operational and backup ones. On every call to the 1Ch interrupt (Timer Tick) "Crazy" viruses write their backup copies at the address of its operational copies and in such a way gets rid of debuggers. The viruses hook INT 1Ch, 21h and contain the text:
"Crazy.1402" - Crazy imp. v1.5
"Crazy.1445" - Crazy imp. v2.0
CrazyBoot
Description CrazyBoot
It's a dangerous memory resident stealth virus. It hooks INT 13h and hits MBR of hard drive and boot sectors of floppies. On infection of floppies it saves virus body on wrong address and corrupts data files. Depending on its internal counters it displays the message:
Don't PLAY with the PC !
Otherwise you will get in 'DEEP,DEEP' trouble !all
Crazy Boot Ver. 1.0
|