Mity.1982
Description Mity.1982
It is not a dangerous memory resident multipartite virus. When an infected file is executed, the virus writes its code to the last sectors of C: drive and modifies the disk partition table in such way, that active boot sector address points to the virus code (see "Starship" virus). The virus then returns to the host program.
While booting from infected disk the virus hooks INT 13h, waits for DOS loading process, hooks INT 21h and then infects COM and EXE files that are executed. The virus writes itself to the beginning of COM file and to the middle of EXE files.
Depending on its counters the virus displays the text:
XXXX XXXX XXXXXXXX XXXXXXXXXX XXX XXX
XXXXXX XXXXXX XXXXXXXX XXXXXXXXXX XXXXX XXXXX
XXXXXXXXXXXXXXX XXXX XXXX XXXXXXXXX
XXXX XXX XXXX XXXX XXXX XXXX
XXXX XXXX XXXX XXXX XXXXX
XXXX XXXX XXXX XXXX XXXXX
Check other viruses! Be aware! Use Antiviral Software
Deflo.2048
Description Deflo.2048
This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or opened. On the 2nd an 18th day of each month, the virus writes a Trojan program to the hard drive MBR sector. The virus contains the text strings:
Defloration complete! Katia D/?Mickey is still loving you//
_Deflorator_06_
Dei.1456
Description Dei.1456
These are not dangerous memory resident parasitic encrypted stealth viruses. They hook INT 21h and write themselves at the end of COM- and EXE-files are executed or opened. Depending on the system time they create or delete DEI.COM file in root directory of current disk. On execution of that file it displays the message:
Devils & Evangels, Inc. [DEI] MnemoniX
These viruses contains text string "DEI.COM" also and:
"Dei.1502": v1.50
"Dei.1634": v1.99
"Dei.1680,1792": v2.00
"Dei.1948": v2.50
|