Ilja.1704
Description Ilja.1704
It is a dangerous memory resident parasitic virus. It hooks INT 16h, 21h and writes itself to the end of .COM files that are executed. There is the word "CR" at the beginning of infected files. By hooking INT 16h this virus checks the keys that are pressed. If the word "ilja" is entered, the virus reboots the computer.
Check other viruses! Be aware! Use Antiviral Software
BadSectors.3150
Description BadSectors.3150
These are dangerous memory resident parasitic viruses. They hook INT 8, 16h, 21h, 25h, 26h. On DOS calls FindFirst/FindNext FCB/ASCII they search for COM and EXE files and write themselves to the end of the file. They also infect the files that are opened, executed or renamed. The viruses do not infect the SCAN.* files. Sometimes they mark the disk clusters as bad ones by manipulation with FAT sectors. By hooking INT 16h these viruses joke with keyboard. These viruses contain the internal text strings:
COMEXE
SCAN
and:
"BadSectors.3150": BadSectors 1.0
"BadSectors.3422": BadSectors 1.1
"BadSectors.3428": BadSectors 1.2
"BadSectors.3627:: BadSectors 1.3
BadSize.369
Description BadSize.369
It is not a dangerous nonmemory resident parasitic virus. It searches for .COM-files, then writes itself to the end of the file. While infecting the files the virus displays the file name and one of the messages:
- infected
- already infected
- bad size to infect
The virus also displays:
Frodo lives !!!
|