Macro01.2170
Description Macro01.2170
It is not a dangerous memory resident parasitic virus. It hooks INT 13h, 28h and on INT 28h calls searches for COM- and EXE-files, and then writes itself to the end of the file. Depending on its internal counters the virus decrypts and displays the messages:
CRIS-HARDWARE
Ai un virus foarte rau
Pentru anti-virus scrieti la
FAC. de CALCULATOARE din TIMISOARA
Daca in 20 de secunde nu opresti
PC-ul am sa-ti fac praf
HARD-DISKUL
The virus also contains the ID-string:
Macro01
Check other viruses! Be aware! Use Antiviral Software
Pcflu.802
Description Pcflu.802
This is a dangerous memory resident parasitic virus. It copies itself to the system memory at the address 9A00:XXXX, and does not fix MCB list. That may halt a PC. The virus also looks in the memory for TSR antiviral monitors, and tries to bypass them. Then it hooks INT 21h and writes itself to the end of COM files that are executed or opened.
Pcvrs.1904
Description Pcvrs.1904
This is a very dangerous memory-resident parasitic virus. It hooks INT 21h and 16h (keyboard), and writes itself to the beginning of .COM (except COMMAND.COM) and to the end of .EXE files that are executed or opened.
Some time after activation, the virus starts to delete files that are opened. On Monday 23, the virus formats the hard disk and displays:
PcVrsDs Version 1.00 Copyright (C) VirOP 1990.
and changes every 13th key that is pressed. The virus also contains the ID-string:
PcDos
|