Level3.4870
Description Level3.4870
It is not a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. While infecting it checks the file name and does not infect the files:
SCAN VSHIELD CLEAN FINDVIRU GUARD VIVERIFY TB -V
VIRSTOP NOD HIEW PASCA NETENVI F-PROT CHKDSK
While installing or terminating any program the virus checks the system memory for anti-virus monitors TBAV and VSAFE and disables them, it uses its string to locate these monitors:
TBMEMXXXTBCHKXXXTBDSKXXXTBFILXXX
Depending on its generation and system date the virus displays the message:
Welcome to the Explosion's Mutation Machine !
Dis is level 3.
It also contains the text strings:
* EMM 1.0 *
COM EXE
Check other viruses! Be aware! Use Antiviral Software
Kelly.779
Description Kelly.779
It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files, then writes itself to the end of the file. On Tuesdays 20th it hooks INT 1Ch and manifest itself by a video effect. The virus contains the text:
Just a messageall a simple message to put in a virus... argh...
what am I going to write here... yeah... maybe the name of the
virus, I am tired of those shitty names! Callme [Kelly]. OK?
Kemerovo.a
Description Kemerovo.a
These are dangerous nonmemory resident parasitic viruses. They search for .COM files of the current directory, then write themselves to the end of the file, and Jmp-Virus instructions (four bytes: XCHG AX,DX; JMP Loc_Virus) to the file header. Depending on the system timer these viruses might reboot the computer. They contain the string ".COM". On an attempt to infect they open the files and might left them opened.
|