Shin
Description Shin
It's a not dangerous memory resident encrypted boot virus. It hooks INT 8, 13h and writes itself into the MBR of hard drive and floppy boot sectors. It contains the routine of executable files infection, but that routine never receives the control. INT 8 is used to disable debugging. The virus displays the message:
[DarkElf]v2.0 Shin
Check other viruses! Be aware! Use Antiviral Software
Andromeda.1140
Description Andromeda.1140
It is a dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files (except COMMAND.COM) and writes itself to the beginning of the file. It contains the internal text strings:
-< The Andromeda Strain >- Version 1.00 By : Crypt Keeper
Mission Completeall Have fun with your virus(es)
ANDROM.SEC *.COM
RUNME.COM COMMAND.COM
SCAN.EXE CLEAN.EXE NAV.EXE NAV_._NO
The first and the second strings are displayed when the virus creates the file RUNME.COM and executes it, the last string contains the names of the files which are deleted by the virus when the virus is executed.
Andromeda.758
Description Andromeda.758
It's a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself at the end of .COM-files (except COMMAND.COM). It searches for the files for infection on execution of any program. On infection it uses FCB functions of file reading/writing. On October, 5th it erases the FAT of A: drive. It contains the internal text string "[ANDROMEDA V1.1] BUDAPEST HUNGARY".
|