Picket Family
Description Picket Family
These are very dangerous memory resident encrypted parasitic viruses. They hooks INT 21h ("Picket.1034" hooks INT 1Ch also) and write themselves to the end or to the middle of COM files.
While inserting into the middle of the file they search for the data area that contains the constant byte, then store that byte and overwrite that area with the virus copy. That routine contains several errors, and the file size can grow more than 64K while infecting, and the file stays corrupted.
These viruses contain text strings in Russian.
Check other viruses! Be aware! Use Antiviral Software
Quake.960.a
Description Quake.960.a
It's a not memory resident not dangerous encrypted virus. It searches for a COM- and EXE-files and infects them by a standard manner. This virus is not memory resident but it can leave the small memory resident program in memory. This program hooks INT 8 (timer) and sometimes 'shakes' the screen. This virus also contains the text strings:
[Quake-O]
By Dark Angel of PHALCON/SKISM '92
Assistance by Demogorgon on Quake-O routines
.. *.exe *.com
Quandary
Description Quandary
It is a harmless memory resident stealth boot virus. The code of the virus is partly encrypted. The virus hooks INT 13h and writes itself to the MBR of the hard drive and boot sectors of the 1.44M floppy disks. The virus checks the disks for some program (boot driver? some other boot virus?), and infects these disks without alteration of the original boot sectors.
|