Jd Family
Description Jd Family
These are memory resident parasitic viruses. They copy themselves to the system memory at the address 0043:0100, hook INT 21h and write themselves to the end of COM files that are executed or opened.
Some of these viruses detect their already installed TSR copy with "Are you here?" call (INT 21h, AX=3FFFh), the TSR part returns 4A44h ('JD') in AX register.
Sometimes "Jd.448,460" delete the files instead of opening them.
Check other viruses! Be aware! Use Antiviral Software
Davis
Description Davis
It's a not dangerous memory resident encrypted parasitic virus. It hooks INT 21h and INT 8 (timer). It infects EXE-files only on their execution. Sometimes it beeps several times and types the message:
+--------------------------------------+
¦ DAVIS VIRUS V1.01¦
+--------------------------------------¦
¦ Author : Davis ¦
¦ Date : JUNE/23/1990 ¦
¦ ¦
¦ VIRUS STATION COPY RIGHT (C) ¦
+--------------------------------------+
""" Hi ! How are you today ? Don't worry about ! """
""" DAVIS VIRUS will follow you forever and ever ! """
""" Don't care me! I really do not damage your disk or data. """
""" Butall.......................make Funny to you sometime. """
Day2.1472
Description Day2.1472
This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 13h and 21h, and writes itself to the end of COM and EXE files (except COMMAND.COM) that are executed. On the 2nd of January, February and March, the virus overwrites the hard drive MBR with a Trojan program that erases the disk sectors while booting from this hard drive. On the same days, the virus changes digits in data that are saved on disk.
|