BadBoy.1000.a
Description BadBoy.1000.a
This is a harmless memory resident parasitic encrypted virus. It hooks INT 21h and writes itself at the beginning of COM files are executed. This virus uses System File Table on infection. It is divided on 9 blocks of code and data (installation block, data block, INT 21h block e.t.c.). When the virus installs itself into the memory, 8 of these 9 blocks can be rearranged in any order depending on the system timer. On infection the virus saves encrypted image of its TSR copy into the file, so orders of code blocks in two infected file can be different.
This virus displays on 10th infection:
The bad boy halt your systemall
And then halts it.
The virus contains the text:
The Bad Boy virus, Copyright (C) 1991.
Check other viruses! Be aware! Use Antiviral Software
BAT.Gray.705
Description BAT.Gray.705
This is not a dangerous nonmemory resident BAT infector. It writes itself to the end of C:AUTOEXEC.BAT file only. While infecting the virus creates the C:ADINF-C.___ file and writes a copy of its code to there. If this file already exists, the virus displays the message and returns to DOS:
Gray Lord represent this new batch file virus!
BAT.HexVirus
Description BAT.HexVirus
It is a harmless nonmemory resident parasitic BAT virus. It searches for .BAT files in the current and parent directories, then writes itself to the end of the file. In infected files the virus keeps its code encoded with some BIN-to-ASCII method. When run, the virus creates temporary COM file, writes decoding routine to there, decodes its main body to temporary BAT file and executes it.
The virus code contains the text:
HexVirus!
|