Heiko.2184
Description Heiko.2184
It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened.
The virus deletes the anti-virus data file CHKLIST.MS. Depending on its counter the virus erases the CMOS. Depending on the system timer the virus writes to accessed files random data. Also depending on the system timer the virus hooks INT 1Ch (timer), waits for some time and then modifies the modem settings and calls the phone number (see modem AT commands below).
The virus contains the text strings:
"Lord of the Dance";fuer Heiko, den ich fuer immer und immer liebe;
(c) Wesley;rel. 1
at s7=87s10=255dt0190332332
at s0=1
Check other viruses! Be aware! Use Antiviral Software
Edv
Description Edv
It's a memory resident dangerous MBR and Boot-sectors infector. It copies the TSR part into UMB or the video memory and hooks INT 13h, 16h. It stores the source sector at address 1/39/8 (head/track/sector) on floppy and hard drives. During access to this sector the virus emulate the disk reading error. The 5th generation of this viruses erases the disk sectors and types: "That rings a bell,no ? from Cursy". This virus contains the text "MSDOS Vers. E.D.V. EV" also.
Edwin
Description Edwin
It is a dangerous memory resident boot virus. It hooks INT 13h and writes itself to boot sectors of the floppy and the C: drives. After infecting 63 disks the virus halts the system. The virus contains the ID-word:
JB
|