Horsa.1230
Description Horsa.1230
These are harmless nonmemory resident parasitic viruses. They search for .COM files and write themselves to the end of the file. To infect the files the viruses use direct read/write calls via INT 25h/26h. The viruses contain the text string:
*mand.com
"Horsa.1230" also contains the text:
> Joan v2.10 Virus By KiKo for test in 1995 <
Check other viruses! Be aware! Use Antiviral Software
Microbi.312
Description Microbi.312
It is not a dangerous memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and writes itself to the end of COM files that are executed. It displays/contains the text strings:
Microbi is here!
4991 uhcyzrK
MidInfector.760
Description MidInfector.760
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes "JMP VirusCode" instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with "JMP VirusCode".
|