Shish.1142
Description Shish.1142
It is a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of EXE files that are executed. Depending on the system month (before/after June) the virus stores original EXE data in different form, and restores it to original values also depending on the system date. As a result infected file do work correctly only if they were infected during the half of year (before/after June) and halt the system during another half of year. When user presses Alt-Ctrl-Del, the virus displays the message:
WARNING!
SYSTEM REPORT:
If your system does not work properly,
change the month of the current system date.
Error code #
The virus also contains the text:
[SHISH. Version 2.00]
Check other viruses! Be aware! Use Antiviral Software
GoodBye.839
Description GoodBye.839
This is a harmless memory-resident virus. It infects COM-, EXE- and OVL-files by standard way as they are loaded into the memory. On Sundays the infector plays the soviet "Nautilus Pompilius" rock group tune "Goodbye, America". The virus hooks INT 1Ch, 21h.
GoodLuck.300
Description GoodLuck.300
It is not a dangerous memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and writes itself to the beginning of COM files that are executed. Depending on its counter the virus displays the message:
Good luck!
|