Lenin.943
Description Lenin.943
It is not a dangerous nonmemory resident parasitic virus. It searches for EXE files and writes itself to the end of the file. While infecting it does not alter the EXE entry registers, but inserts CALL FAR instruction into file entry point and alters EXE relocation table. Depending on its internal counters it displays the messages on Russian. It also contains the strings:
*.EXE
PATH=
Check other viruses! Be aware! Use Antiviral Software
Lyby.612
Description Lyby.612
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of COM files that are executed. On Thursday 1st it displays the picture:
? ?
/|/|¦ ¦
The virus contains the text strings:
Matrix V2.04 by LyByYy,COPYRIGHT (C) 1992
Lyceum Family
Description Lyceum Family
These are not dangerous memory resident parasitic viruses. They hook INT 8, 9, 21h and write themselves to the end of COM and EXE files ("Lyceum.1975" infects COM files only).
If the keys were not pressed during a long time, these viruses display a message in Russian. "Lyceum.1832" contains the text:
Welcome to Lycee of Information Technologies !
"Lyceum.1888,1950" display:
+------------------------------------------------------------------+
¦ You are welcome ! ¦
¦ Moscow Institute of Radioengineering, Electronics and Automation ¦
¦ Moscow ¦
¦ Vernadsky Avenue 78 ¦
¦ Phone of MIREA: 433-00-66 ¦
+------------------------------------------------------------------+
"Lyceum.703" depending on its internal counter creates the README.!!! file and writes to there a message in Russian.
"Lyceum.944" depending on the current date encrypts MBR of hard drive.
|