Sauron-1.375
Description Sauron-1.375
It is a harmless memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and writes itself to the end of COM files that are executed or opened. It contains the text string:
SAURON-1
Check other viruses! Be aware! Use Antiviral Software
Mand.1061
Description Mand.1061
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files (except COMMAND.COM) that are accessed. The virus does not manifest itself in any way. There are two text word in the virus body that are used by the virus to detect the COMMAND.COM file:
MA ND
These words are the only reason to name that virus.
Mandra family
Description Mandra family
These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed.
Depending on the system timer the viruses display the messages:
"Mandra.533": Mandragore for president !!!
"Mandra.562": Mandragore'z sPirIt haunts ur computah !
"Mandra.664,669": BEER and TEQUILA forever !'
The viruses also contain the text strings:
"Mandra.533": Mandragore [Mdrg v3.7]
"Mandra.562": Mandragore [Mdrg v4]
"Mandra.664,669": Mandragore [Mdrg v5]
Error 8869: processor drunk 8*)
Eddy iz still alive somwhere in time all...
Mandra.866,886
These are memory resident encrypted viruses infecting EXE files that are opened or executed. The viruses write themselves to the end of files while infecting them. The viruses use not documented DOS calls, and have a bug in this part of code: these functions are called incorrectly. As a result, if there are several files opened, or a file is executed when some other files are opened, the viruses can use wrong file offsets and corrupt files.
The viruses call a video effect - running cow. The viruses also contain the strings:
[MAD COW]
Mandragore
|