QDao.1589
Description QDao.1589
It is not a dangerous memory resident encrypted parasitic virus. When an infected file is executed, the virus writes its code to the reserved track on the hard drive (track/head 0/0) and copies its INT 21h handler (3Eh bytes) to the Interrupt Vectors Table at the address 0000:0300. This handler intercepts file termination, then searches for EXE files, reads complete virus code from the hard drive sectors and writes it to the end of the file. As a result 1.5K virus needs only 3Eh bytes of the system memory.
On November 12, the virus displays messages in Chinese.
Check other viruses! Be aware! Use Antiviral Software
Omega.440
Description Omega.440
It is a very dangerous nonmemory resident parasitic virus. It searches for .COM-files, then writes itself to the end of the file. On Friday, 13th the virus displays the Omega character (EAh ASCII), and erases the hard drive sectors.
Omi.986
Description Omi.986
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .EXE files that are executed. On every 16th installation the virus fills the screen with the text: "OMI".
|