Mr_Gu Family
Description Mr_Gu Family
These are memory resident parasitic viruses. They hook INT 21h and on ChDir DOS call (INT 21h, AH=3Bh) they search for COM files and write themselves at the end of the file. They contain the text strings:
*.com
Mr.Gu
Mr_Gu.545
It is not a dangerous virus, while infecting it changes the color of the screen border.
Mr_Gu.635
It is a harmless encrypted virus. It also infects COM files that are executed. It infects the COMMAND.COM file of only DOS version, the virus inserts itself into middle of that file, and file length does not grow.
Check other viruses! Be aware! Use Antiviral Software
Fear.1823
Description Fear.1823
It's a memory resident encrypted parasitic virus. It hooks INT 21h (for infection) and INT 2Fh (for "Are you here?" call). It writes itself to the end of .COM-files on their execution. The files can be encrypted wrong, they hang up the computer and are not recovered. Sometimes it formats the HD sectors and displays:
February12.1167
Description February12.1167
It is a possibly dangerous (see below) memory resident parasitic virus. While installing memory resident it traces INT 13h, 21h, then patches DOS kernel to hook INT 21h. The virus then writes itself to the end of COM and EXE files that are executed. On February 12th the virus disables keyboard and accurately reads all hard drive sectors. It seems that this is a debug version of the virus, and the "final release" will have WriteDisk calls instead of ReadDisk.
|