Rasek.1492
Description Rasek.1492
This is a dangerous memory resident multipartite encrypted virus. While executing an infected file it writes itself to the MBR of the hard drive and hooks INT 13h, 12h. By hooking INT 13h this virus releases the stealth mechanism on reading the infected MBR. It also writes a trojan program to the floppy disk boot sectors. That program erases the hard drive FAT while loading from that floppy. Sometimes the virus also erases the FAT on loading from infected MBR.
By hooking INT 21h the virus infects COM and EXE files that are executed, it writes itself to the end of the files. The virus contains the text string "AND.COM" and does not infect the files that contains that string in their names (COMMAND.COM). The virus also contains the text strings:
"RáseK" v3.1,from La Coruña(SPAIN).Ap93
Check other viruses! Be aware! Use Antiviral Software
Kaos4.697
Description Kaos4.697
It is a harmless nonmemory resident parasitic virus. It searches for COM and EXE files and writes itself to the end of the file. It contains the text string:
KAOS4 / Köhntark
Kara.739
Description Kara.739
It is not a dangerous memory resident parasitic virus. It hooks INT 13h, 21h and writes itself to the end of .COM files that are accessed. Depending on the system conditions (if a part of memory is occupied in virus-like way) the virus displays the message:
May bayrus sa memorya
Klandistino
Awto
Reproduktibo
Antibayrus
On reading data from floppy disks the virus checks their boot sector for some code (boot viruses?). If this code is found, the virus replaces it with a program that displays the message:
Ang disk mo ay inpektado
I-boot mo uli
The header of infected files contains the text:
KARA
|