Simbioz.331
Description Simbioz.331
It is a harmless nonmemory resident parasitic virus. It searches for .COM files in the current directory, then writes itself to the end of the file. The virus writes CALL_Virus instruction to the middle of the file. To do that it scans the file for the B4h ?? CDh 21h bytes (MOV AH,?? ; INT 21h call) and replaces these bytes with CALL_Virus code. Before return to the host program the virus restores these bytes.
The virus does not manifest itself in any way. It contains the text strings:
*.com [Simbioz.Inside]
Check other viruses! Be aware! Use Antiviral Software
Magick.412
Description Magick.412
It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files while reading from them (DOS function Read, AH=3Fh). While infecting a file the virus uses undocumented System File Tables. The virus has bugs and may corrupt files while infecting them. The virus contains the text string:
Quantum Magick
Mail
Description Mail
It's a not dangerous memory resident boot virus. It hooks INT 8, 9, 13h and writes itself into MBR of hard drive and floppy boot sectors. Depending on its internal counters it disables keyboard, overwrites CMOS, displays the picture:
+------------------- Help for users E-Mail ----------------------+
¦ Send/Receive Mail Manual page 137 ¦
+----------------------------------------------------------------+
¦ This command starts Commander Mail and sends any messages in ¦
¦ the OUT directory via MCI Mail. It also copies any new ¦
¦ messages from MCI Mail to the IN directory. ¦
¦ ¦
¦ Use the commander maiL command if you just want to browse ¦
¦ through messages in your IN directory, or if you want to ¦
¦ create new messages. ¦
¦ ¦
¦ Use the Send files item in the Files menu if you want to send ¦
¦ files to someone via MCI Mail. ¦
¦ ¦
¦ Note: This function is provided by the MCI.EXE and ¦
¦ MCIDRIVR.EXE programs, which must be in the same ¦
¦ directory as the Norton Commander (NC.EXE). ¦
+----------------------------------------------------------------+
|