Headache.269.a
Description Headache.269.a
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are closed. While infecting a file they use undocumented System File Tables.
"Headache.624" disinfect infected files, if they are opened. This virus contains the string:
Headache
Check other viruses! Be aware! Use Antiviral Software
Knight.1136
Description Knight.1136
It is a dangerous nonmemory resident overwriting virus. It searches for .COM files and overwrites them. This virus uses several levels of decryption, some parts of code are encrypted up to seven times. This virus uses anti-debug tricks, it contains the text strings and displays some of them:
Aspettami che arrivo
all you can be anything you want to be ...
*.COM
-KNIGHT-
Ko.360
Description Ko.360
These are memory resident parasitic viruses. They copy the TSR-parts into the Interrupt Vectors Table, hook INT 21h, then write themselves to the end of .COM files that are executed. These viruses contain the word "Ko".
"Ko.408" corrupt the files that do not have JMP NEAR (E9h) opcode at the beginning of the file. Sometimes it overwrite the files with RET instruction. On every 33rd infection "Ko.408.b" displays:
Birdie Hop!
On every 50th infection "Ko.407" overwrites the file with the random data.
|