Lithium.4113
Description Lithium.4113
It is not a dangerous memory resident multipartite polymorphic and stealth virus. It infects COM, EXE files, the MBR of the hard drive and boot sector on floppy disks. When an infected file is executed, the virus infects the MBR and returns control to the host program. While loading from infected disk the virus hooks INT 13h, waits for DOS loading, then hooks INT 21h. By hooking INT 13h the virus infects floppy disk boot sector and run its stealth routine while accessing to the infected disks. By hooking INT 21h the virus also runs its stealth routine as well as affects DOS executable files that are accessed. The virus disables its stealth routines when PKZIP or BACKUP utilities are active. The virus also checks the file names and does not infect several anti-viruses and utilities according to the list:
CHKD F- VIR SCAN CLEAN VSHI ITAV SKUD AVIR MSAV CPAV VSAF VWAT NAV THS TB
VI- FLU ATP DOO WOLF QUA
Depending on the system date the virus runs some video effect. The virus contains the text strings:
Lithium
Nuotando nel miele
Accecati dalla luce
Oppressi dalla liberta'
Nauseati dai falsi e facili sorrisi
Lottiamo per trovare qualcosa in cui credere.
Le note della rabbia e dell'instabilita'
sono il detonatore della voglia di proseguireall
...'CAUSE WE'RE ALIVE!
You'llKnowWhatNITROMeans!
byATPY
GENOCIDEYouthEnergy
Check other viruses! Be aware! Use Antiviral Software
Sparse.3840.a
Description Sparse.3840.a
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files that are executed. The major part of the virus (approximately 3K) contains only zero bytes that are never used. The part of actual virus code is divided by 3 areas which are 'sparsed' in the virus body.
Spartak.1100
Description Spartak.1100
It is a dangerous memory resident parasitic virus. It hook INT 13h, 21h and writes itself to the end of EXE files. Depending on the system timer the virus erases the CMOS and displays the message:
Spartak Moskow v1. 0 02/06/97 18: 38: 30.
|