LoveMe family
Description LoveMe family
These are not dangerous(?) memory resident encrypted parasitic viruses. They hook INT 21h and when any program is executed or current directory is changed, the viruses search for EXE files and write themselves to the end of the file. On opening some files (if full file name has "LO" characters at position 31, or "T$" at position 19) the viruses write some date (file name?) to the files:
"LoveMe.610": vol2:usr95034 love.me
"LoveMe.804": vol2:usr95225!$.$
The viruses also contain the text strings:
"LoveMe.610": (Jestem Rumburak)
"LoveMe.712": (Dr.Agon & SPERM 2.0)
"LoveMe.804": (I'm merry SPERM v2.5)
Check other viruses! Be aware! Use Antiviral Software
HNYS.770
Description HNYS.770
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. From 1st till 7th of January the virus displays the message:
HAPPY NEW YEAR,SLOVAKIA
Hob
Description Hob
This is a harmless memory resident stealth boot virus. It hooks INT 13h and infects the MBR of the hard drive and floppy disk boot sector in the A: drive. The virus checks the CMOS fields and in case of AWARD infects the MBR only in case the BIOS VirusWarning protection is disabled. The virus contains the text string:
h0b13BzZ
|