Rubbit.3839
Description Rubbit.3839
This is a benign memory resident parasitic encrypted stealth virus. It searches for original address of INT 21h handler in DOS area, hooks INT 21h and writes itself to the end of the files. This virus uses a method of MCBs correction and KEEP DOS function.
This virus infects COM and EXE files that are executed. While infecting they rename the file to "RUBBIT.$$$", infect it and then rename back to original name.
On September, 9th the virus displays the message:
## !! RuBBit Version 2.0 !! ##
## << How do you do >> ##
## !! Today is My Birthday !! ##
$$ OH! YES! Happy Birthday To You ! $$
This virus also contains the texts:
RuBBit
Check other viruses! Be aware! Use Antiviral Software
Moctezuma Family
Description Moctezuma Family
These are memory resident dangerous polymorphic viruses. They hook INT 8, 13h, 21h and infect .COM and .EXE files that are executed. They write themselves to the end of EXE files and to the beginning of COM files. These viruses contain the text:
Moctezuma's Revenge
sometimes they exchange the bytes in the disk sectors.
"Moctezuma.2208" delays, and shift a part of the screen on the INT 8 (timer) calls.
Moctezuma.2208
Description Moctezuma.2208
This is a memory resident dangerous polymorphic virus. It hooks INT 8, 13h, 21h and infects COM and EXE files that are executed. It writes itself to the end of EXE files and to the beginning of COM files.
This virus contains the text:
Moctezuma's Revenge
Sometimes it exchanges the bytes in the disk sectors.
The virus delays and shifts a part of the screen on the INT 8 (timer) calls.
|