Rasek.1489.b
Description Rasek.1489.b
This is a dangerous memory resident multipartite encrypted virus. While executing an infected file it writes itself to the MBR of the hard drive and hooks INT 13h, 12h. By hooking INT 13h this virus releases the stealth mechanism on reading the infected MBR. It also writes a trojan program to the floppy disk boot sectors. That program erases the hard drive FAT while loading from that floppy. Sometimes the virus also erases the FAT on loading from infected MBR.
By hooking INT 21h the virus infects COM and EXE files that are executed, it writes itself to the end of the files. The virus contains the text string "AND.COM" and does not infect the files that contains that string in their names (COMMAND.COM). The virus also contains the text strings:
"RASEK" v3.0,from La Coruña(SPAIN).Ap93
Check other viruses! Be aware! Use Antiviral Software
Dima.1024
Description Dima.1024
It is a non dangerous non memory resident virus which scans the subdirectory tree and hits .COM- and .EXE-files it finds. At 21:00 Dima types: "9pm". It also contains the texts: "The -9pm-. Call the Dima & Dima corporation if it will be difficult.", ".com", ".exe".
DirDropper.1575
Description DirDropper.1575
This is a dangerous, non-memory resident parasitic virus. It searches for COM files (except COMMAND.COM) and writes itself to their beginnings.
It searches for other executable files also, and replaces them with a copy of the DIR_II virus.
In October, this virus erases disk sectors and halts the PC.
|