Rogue.1807
Description Rogue.1807
This is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and to the middle of EXE files. The virus deletes the CHKLIST.* files. Depending on the system date it also hooks INT 8 and displays the message:
Now you got a real virus! I'm the ROGUE all!
On the same date it corrupts the DBF files.
On September 29 it displays the message:
MS-DOS cheking MCB's.
Please wait...
I'am The Rogue.
Check other viruses! Be aware! Use Antiviral Software
Ekoterror
Description Ekoterror
It's a memory resident dangerous multipartite stealth virus. On execution of infected file it writes itself into MBR of hard drive (it occupies the sectors from 0/0/1 till 0/0/5 - track/head/sector) and returns the control to the host program. On loading from infected sector it hooks INT 8, 13h, then by using INT 8 it hooks INT 21h and writes itself at the beginning of the .COM-files on their creating.
Sometimes it decrypts and types:
EkoTerror (C) 1991 ATK-toimisto P.Linkola Oy
Kovalevysi on poistettu käytöstä luonnonsuojelun nimessä.
Vihreässä yhteiskunnassa ei saa olla ydinsähköllä toimivia kovalevyjä.
and then hangs up the computer. It infects incorrectly some types of hard drives, DOS hangs up on loading in these cases.
ELCN.374
Description ELCN.374
These are not dangerous nonmemory resident parasitic viruses. They search for COM files, then write themselves to the beginning of the file. "ELCN.374" does not infect the COMMAND.COM files. The viruses display the messages in Russian. They also contains the texts:
"ELCN.374": COMMAND.COM
"ELCN.424": Bryansk ELCN
|