LordZer0 Family
Description LordZer0 Family
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed. The viruses contain the text strings:
"LordZer0.370": I LOVE YOU AMBER!Virus: Amber.3A
"LordZer0.372": Swedish Warrior v1.0 by Lord Zer0.
"LordZer0.374": Virus: CheeseAuthor: Velveta [FLooD]
Check other viruses! Be aware! Use Antiviral Software
Cruel
Description Cruel
It is dangerous memory resident boot virus. It hooks INT 13h and writes itself into boot sectors of hard drive and floppies, in some cases it corrupts the boot code while infection. Depending on the system date it erases the CMOS memory. It contains the internal text string:
CRUE(L)
Crusade.3072
Description Crusade.3072
Crusade.3072 is a not dangerous memory resident multipartite stealth virus. While executing of infected file the virus traces INT 13h, infects MBR of the hard drive, then it hooks INT 21h and writes itself to the end of COM- and EXE-files that are accessed. The virus does not infect the file it the file name contains the symbols:
MM ID SC RG WE VI AD
While loading from infected MBR the virus also hooks INT 13h (stealth routine) and INT 1Ch (trigger routine). The trigger routine is executed in 5 hours after booting from infected hard drive. That routine decrypts and displays the message:
+--------------------+
¦ LIVE `N` LET LIVE! ¦
+--------------------+
The virus also contains the encrypted text string:
Take care of soft war or Last Crusade.
|