Pac-Man Family
Description Pac-Man Family
Pac-Man.Blinky.1302
It is a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the beginning of the file. Depending on the current date it displays the message:
The Pac-Man BLINKY Ghost is watching..
It overwrites boot sectors of floppy disks with a boot virus that displays while loading from infected disk:
Non-System disk or disk error.
Replace and press any key when readyall
This virus also contains the strings:
[Blinky Ghost]
*.COM
[-Inky-]
=[-Inky!-]=
[INKY Ghost] by PacMan and Associates Inc.
Pac-Man.Clyde.1012
It is not a dangerous nonmemory resident parasitic companion virus. It searches for .EXE files, renames them to .PAC extension and overwrites original .EXE files with its copy. Depending on the current date it displays the message:
The Pac-Man CLYDE Ghost is watching..
(are we getting irritating?)
It also contains the strings:
[Clyde Ghost]
*.EXE
Check other viruses! Be aware! Use Antiviral Software
ID.166
Description ID.166
These are memory resident parasitic viruses. They copy themselves into DOS data area at address 0060:0000, hooks INT 21h and write themselves to the end of COM-files that are executed.
"ID.166" also hits EXE-files, and corrupts them. These files halt the system when executed.
"ID.248" is a harmless virus. It does not manifest itself. It contains the text strings:
ID
Fuck you
Ida.1490
Description Ida.1490
It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 1Ch, 21h and writes itself to the end of COM files that are accessed. The virus polymorphic engine is quite sophisticated: the virus decryption loop does not contain decryption key "in clear" - it tries to decrypt the virus code with different keys, calculates CRC of decrypted data and passes control to the virus code if CRC is ok. This engine has a bug and in some cases the virus cannot decrypt itself and the system halts.
The virus looks for the text "VERA" on the screen and appends "I Veronika !". The virus also contains the text:
[IDA] v0.01 Serg_Enigma
|