not-a-virus:RiskWare.Tool.RegPatch.a
Description not-a-virus:RiskWare.Tool.RegPatch.a
This program is approximately 5KB in size (when packed) and packed using UPX. It is designed to change system registry values. The file overlay contains an encrypted (xor 90h) .REG file. When launched, the file is saved in C:ParaTemp.reg using the following command: regedit.exe -s C:ParaTemp.regall.
Check other viruses! Be aware! Use Antiviral Software
Fyodor.145
Description Fyodor.145
It is a very dangerous nonmemory resident overwriting virus. It searches for .COM files, then overwrites them, displays the message "Bad command or file name" and returns to DOS. The only interesting feature of this virus: it has PKZip file format, i.e. the header of file has the same ID-stamp and fields that PKZip archives have. The virus also contains the text strings:
*.com
fyodor
Gad-Fly Family
Description Gad-Fly Family
These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the middle of the COMMAND.COM file when the system is executing or opening that file. The viruses contain the internal text strings:
"Gad-Fly.629": Gad-fly
"Gad-Fly.646": The Revenger
Gad-Fly.629
While installing into the system memory, or while opening *.CAL or *.PRG files, and depending on the system timer the virus hooks INT 10h and upper-cases the symbols that are displayed. The virus also may delete the *.CAL and *.PRG files.
Gad-Fly.646
Depending on its counter and the system timer that virus erases the disk sectors.
|