Ntit.1254
Description Ntit.1254
These are harmless nonmemory resident parasitic viruses. They search for .COM files and writes themselves to the beginning of the file. While infecting "Ntit.1578" renames the file to XXXXXXXX.VIR, then infects it, and renames back to original name. These viruses contain the text strings:
NTIT-4IM2
*.COM
and "Ntit.1578":
xxxxxxxx.vir
A-T-T-E-N-T-I-O-N: VIRUS FOR RESEARCH ONLY ! (C)1994 By Lin
Tzuoh-yi,National Taiwan Inst. of Tech.,Dept. of Information
Management,e-mail:b8109006@cs.ntit.edu.tw
Check other viruses! Be aware! Use Antiviral Software
Munich.2355
Description Munich.2355
It is a very dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files and writes itself to the end of the file. It changes the first 12h bytes of files with Jmp-Virus routine. It contains the text "*.COM *.*" and sometimes erases the disk sectors, and then displays:
Are you sure? Y
Fast Winchester-Format (SZKI (c) 1988) Started
Control-number of 10 cylinder per units:
C O M P L E T E D all
Üdvözli Önt a Münnich Ferenc Társaság!
Unrecoverable system error, system halted
ROM-error at F000:018B during low DMA, please contact your
system engineer or local dealer - system halted
Warning: some memory segments have been overwritten!
System crashed by unauthorized access, explosion DANGER!!!
Muny family
Description Muny family
These are dangerous memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed.
Muny.969
After infecting 33 files the virus displays a message in Russian, then creates a new file with the name of currently executed file and with extension '.$'.
Muny.1870
The virus encrypts 256 bytes in the header of affected files. After infecting 50 files the virus calls its trojan routine that corrupts files and displays messages in Russian.
|