JindraBoot
Description JindraBoot
It is a very dangerous memory resident boot virus. It hooks INT 13h and writes itself to boot sectors of floppy disks and C: drive. On 101st infection the virus erases disk sectors and the CMOS. The virus contains the text:
JINDRA_0
Check other viruses! Be aware! Use Antiviral Software
Crusade.3072
Description Crusade.3072
Crusade.3072 is a not dangerous memory resident multipartite stealth virus. While executing of infected file the virus traces INT 13h, infects MBR of the hard drive, then it hooks INT 21h and writes itself to the end of COM- and EXE-files that are accessed. The virus does not infect the file it the file name contains the symbols:
MM ID SC RG WE VI AD
While loading from infected MBR the virus also hooks INT 13h (stealth routine) and INT 1Ch (trigger routine). The trigger routine is executed in 5 hours after booting from infected hard drive. That routine decrypts and displays the message:
+--------------------+
¦ LIVE `N` LET LIVE! ¦
+--------------------+
The virus also contains the encrypted text string:
Take care of soft war or Last Crusade.
Crusher.a
Description Crusher.a
It's a not dangerous memory resident stealth multipartite virus. On execution it writes itself into the MBR of the hard drive, then hooks INT 21h and writes itself at the beginnings of EXE-files are copied or moved. On loading from infected MBR it hooks INT 1Ch, waits for DOS loading, then restores INT 1Ch, hooks INT 21h and starts to infection.
If there's no free memory for the virus installation, it types: "Insufficient memory" and returns to DOS. On execution CHKDSK utility the virus sometimes displays:
Crusher
You are damned
Bit Addict / Trident
----------------------
|