Hehehe.331
Description Hehehe.331
It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. Depending on the system time it decrypts and displays the message:
HEHEHEall YOU HAVE A VIRUS!!!
Check other viruses! Be aware! Use Antiviral Software
SeeYou family
Description SeeYou family
These are very dangerous memory resident partly encrypted boot viruses, stealth. They infect the boot sector of C: drive as well as boot sector of floppy disks. While loading from infected disk they reserve a block of memory by decreasing the size of DOS memory (the word at the address 0000:0413), copy themselves to that block, hook INT 13h, wait for DOS loading process, hook INT 21h and on first execution of DOS program (usually - COMMAND.COM) they allocate a block of DOS memory, copy themselves to there and restore the original size of DOS memory. As a result they hide themselves between DOS kernel and resident copy of COMMAND.COM.
Depending on the system date they erase disk sectors and displays one of the messages:
See you later all
Happy birthday, Populizer !
Segal.552
Description Segal.552
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus does not manifest itself in any way. It contains the text:
-SEGAL(c)MM
|