Ph33r
Description Ph33r
It is a harmless memory resident parasitic virus. While executing an infected program the virus hooks INT 21h and stays memory resident. In case of DOS host file the virus uses the standard methods of the INT 21h hooking, in case of NewEXE file the virus uses DPMI calls.
While opening, execution, renaming executable files including NewEXE, and on changing the file attributes the virus writes itself at the end of the file. The virus checks the file length and infects only *.DL*, *.CO* and *.EX* files. The virus does not infect the *AV.*, *DV.*, *AN.*, *OT.* files.
While executing COM and EXE files the virus writes itself to the end of the file. While infecting a NewEXE file the virus moves NE header 8 bytes up, creates new descriptor there, and writes itself the end of the file.
The virus does not manifest itself. It contains the text strings:
=Ph33r=
Qark/VLAD
On October 21st "Ph33r.1460" displays:
Cheng Cheng:
Happy Birthday to you, HandSome Boy!
This virus also contains the text:
> Joan for Windows v1.0 of T.N.T. Taipei/Taiwan 1995/09 <
Check other viruses! Be aware! Use Antiviral Software
Karlik.1600
Description Karlik.1600
It is not a dangerous memory resident parasitic virus. It traces and hooks INT 21h, then it writes itself to the end of COM and EXE files that are executed. It disinfects the infected files that are loaded as overlays or for debugging.
The virus also hooks INT 8 (timer) and at 12:00pm it decrypts and displays the message:
Casove znameni oznami dvanact hodin.
then it beeps six times and displays:
Casove znameni oznamilo dvanact hodin.
It also contains the encrypted text:
Ja jsem Karlik2
Karol.1000
Description Karol.1000
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. While installing and infecting is uses several tricks with redirection of INT 1,8,9 (sets these INTs to subroutines of infection and calls them by INT instruction). The virus contains the text string:
KaRoLmArKs V2.3
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Breastpumps
Body Hair Loss Causes
Calling Card
Phone Cards
Slovakia Phone Cards
|