Babilon.1000
Description Babilon.1000
It is a harmless memory resident parasitic stealth virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. While opening an infected file or under debugger the virus disinfects it. The virus contains the text string:
BABILON
Check other viruses! Be aware! Use Antiviral Software
Nax.1402
Description Nax.1402
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 9, 21h, 4Bh and writes itself to the end of COM and EXE files that are executed. INT 4Bh is used for "Are you here?" call when the virus installs itself memory resident. By hooking INT 9 (keyboard) the virus depending on its counters replaces the keystrokes:
<-> /
: <-> ;
< <-> >
( <-> )
[ <-> ]
, <-> .
9 <-> 0
F5, F6 -> F8
F8 -> F6
Nazgul Family
Description Nazgul Family
These are harmless nonmemory resident parasitic viruses. They search for .COM files, then write themselves to the beginning of the file. The viruses contain the texts:
"Nazgul.209": *.COM
"Nazgul.266": *.COM Nazgûl
|