RingWorm.303
Description RingWorm.303
It is a very dangerous nonmemory resident encrypted virus. It searches for .COM files, then overwrites them. The virus contains the text string:
[ringworm] (c) 1997 gothmog *.txt
Check other viruses! Be aware! Use Antiviral Software
RavenSys.1324
Description RavenSys.1324
It is not a dangerous memory resident parasitic virus. It writes itself to the end of SYS files (device drivers). The header of the virus contains the text: "RAVEN00X". The virus hooks INT 21h, intercepts Exec DOS call (4Bh) and on executing any program searches for SYS files and infects them.
When an infected driver is loaded into the memory, the virus hooks INT 21h and stays memory resident. It does it in two different ways depending on the system conditions. In case of first way, the virus leaves its TSR copy at the same addresses as being loaded. Then it waits for DOS system ChangeMemory call (AH=4Ah), allocates new block of memory and copies itself to there. In case of second way the virus writes its code on the first track of the hard drive (not used sectors) and copies its "loader's" (90 bytes) code to Interrupt Vectors Table. Then it, the same as in case of first way, waits for ChangeMemory DOS call, allocates a block of memory, and reads to there its code from the hard drive.
While installing memory resident the virus displays the message:
+-+---·-· · · Raven Sys Infector 1.0 · · ·----+-+
+-+-----------------------------------------------------------------+-+
+-¦-+ Created By Stone Shadow +-:-¦
+-:-+ Copyright (c) 1995 - 96 By COEAC Viral System Development. +-¦-¦
+-+-----------------------------------------------------------------+-+
+-+--- ·· · · Creatures Of Electronic Anti Christ · · ·· ---+-+
Raving.2300
Description Raving.2300
It is a dangerous nonmemory resident overwriting virus. It searches for .COM files and overwrites them. It displays the message:
I DON'T THINK YOU WOULD LIKE TO SMILE, BECAUSE I HAVE INFECTED A FILE!!!
HAVE YOU HEARD OF A RAVING VIRUS MC, YES YOU GUESSED IT THAT IS ME!!!
YOU WONT SEE ANOTHER RHYME UNTIL IT IS INFECTING TIME!!!
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
TYCO THERMAL CONTROLS NORDIC AB
DANIELSSONS BUSSTRAFIK AB
TAXI DALARNA AB
DAILY SPORTS AB
WALTER HANSSON EL. AB
|