Reverse.948
Description Reverse.948
These are harmless memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed. They contain the strings which are the file names written backward: "moc.dnammoc exe.niamcn" (NCMAIN.EXE and COMMAND.COM). The virus compares these names with the file name before infection and does not infect NCMAIN.EXE. While infecting COMMAND.COM the virus writes itself to zero-bytes area in that file (see "Lehigh" virus), and the length of COMMAND.COM file does not grow. The viruses also contain the text strings:
"Reverse.948": Reverse-948 i +. Created by Renata G. from Lubin City in
Sept 1993
"Reverse.948.b": Red Spider Virus created by Garfield from Zielona Gora in
Feb 1993
Check other viruses! Be aware! Use Antiviral Software
HLLP.Mutant
Description HLLP.Mutant
It is a dangerous memory resident parasitic virus, it writes itself to the beginning of DOS EXE files. When and infected file is run, the virus installs itself into the DOS memory and hooks INT 9, 13h, 1Ch, 28h. On INT 28h calls (DOS idle) the virus looks for EXE-files in the current directory and infect them. The infection routine is also activated depending on the timer ticks (INT 1Ch).
Because of a bug the virus corrupts files that have size less than 7489 bytes. While infecting the virus adds the "A_FOREVER" string to the end of the file. The virus also contains the text string:
POPUP *.exe MUTANT.EXE COMMAND.COM
HLLP.Nover.7712
Description HLLP.Nover.7712
This is a harmless non-resident virus, 7712 bytes in size, written in Turbo Pascal.
It searches the C: and D: disks for .EXE and .COM files. It also searches directories listed in %path% for these files, and writes itself to the beginning of the files found. Files infected by the virus will contain the text strings
omret
Aria
|