Klf.356
Description Klf.356
It is a memory resident harmless virus. It copies itself to Interrupt Vectors Table at address 0000:0200, hooks INT 21h and writes itself to the end of COM files that are executed. The virus contains the text:
The KLF
Check other viruses! Be aware! Use Antiviral Software
Piaf.1859
Description Piaf.1859
It is not a dangerous memory resident parasitic encrypted virus. It hooks INT 21h and infects COM and EXE files that are executed, opened or renamed. It writes itself to the beginning of COM files and to the end of EXE files. It does not infect the files with the names which begins with two symbols that present in the string:
NDIOOSUVRAIVFP
I.e. the virus does not infect the files ND*.*, IO*.*, etc.
If this virus cannot install its TSR copy, it displays the message "Incorrect DOS version" and returns to DOS. While installing it traces INT 13h, 21h and searches for specific code in DOS code area, that information is used while infecting the file to disable antiviral monitors.
Some infected files display when they are executed:
<PIAF> Copyright (c) 1991-1992 by Xxxxx III!
This virus also contains the text strings:
PIAF
EXECOM
Piazzolla.874
Description Piazzolla.874
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files (except COMMAND.COM) that are executed. While infecting it creates the file PIAZZOLL.$$$ and writes into this file its body and then the body of the file, then it deletes original COM file and copies the file PIAZZOLL.$$$ into that file, and then deletes the PIAZZOLL.$$$ file. The virus contains the text strings:
Piazzolla
COMMANDCOM
Piazzoll.$$$
|