Arianna.3375
Description Arianna.3375
This is a memory resident multipartite, encrypted and stealth virus. While executing an infected file it infects the MBR of the hard drive. While loading from infected MBR it hooks INT 1Ch, waits for DOS loading, then hooks INT 13h for stealth algorithm while accessing to infected MBR, and INT 21h to infects the files. It writes itself to the end of EXE files that are accessed. When an infected file is opened, the virus disinfects it.
Sometimes the viruses manifest themselves with a video effect and erase the original MBR sector (not first hard drive sector, but the sector containing the original MBR that was saved while infecting a disk). The viruses contain the text strings:
Coded in BARI ThanX to DOS UNDOCUMENTED
See you for a new virus release. Bye !
Check other viruses! Be aware! Use Antiviral Software
Career Family
Description Career Family
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM-files that are executed. These viruses infect the file if the first instruction of it is JMP (E9h) instruction. The 3th and 4th bytes of infected file are the word "UK". These viruses also contain the internal text string: "tenUKCareer of Evil".
Carioca.951
Description Carioca.951
It is a harmless memory resident virus. It by standard way hits .COM-files, except COMMAND.COM, when they are loaded into memory. The infector contains the text "COMMAND.COM" and hooks INT 21h.
|