Nomenclatura
Description Nomenclatura
This is a very dangerous memory resident parasitic virus. It hooks iNT 13h, 21h and writes itself to the end of COM and EXE files. It mixes the words in the FAT sectors. The virus contains the text:
Nomenclatura
and a phrase in Bulgarian.
Check other viruses! Be aware! Use Antiviral Software
Lunch.1756
Description Lunch.1756
It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files (except COMMAND.COM) of current directory and overwrites them. Depending on the system timer it "shakes" the screen or displays one of the messages:
It's 12:00, time for lunch!
It's 17:00, time to go home!
On Saturday, 14th it launches "April1st.COM.b2" virus: it creates the CLEAN.COM file with the copy of this virus.
Lunch.783
Description Lunch.783
It is not a dangerous memory resident encrypted parasitic virus. It patches INT 21h handler - searches for specific code and overwrites it with call to INT 78h (with CD78 opcode), hooks INT 78h and intercepts execution of the file and GetDiskSpace (AH=36h) function. When GetDiskSpace function is executed, the virus searches for .COM-files and writes itself to the file beginning. When the programs are executed, the virus checks the system time and at 12:00 displays:
It is TIME FOR LUNCH, Budy!
|