Spellbound
Description Spellbound
It is not a dangerous nonmemory resident parasitic polymorphic virus. It searches for .COM files and writes itself to the beginning of the file. On 1st of any month it shifts the screen (on CGA and EGA monitors) and displays the message:
Prime Evil! (C) Spellbound, Line Noise 1992.
Coded in Stockholm, Sweden.
Please spell my name right!
Check other viruses! Be aware! Use Antiviral Software
MotherShip.655
Description MotherShip.655
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. The virus does not manifest itself in any way, it contains the text string:
MoTHER MotherShip (c) 1994 Stormbringer
Mpei.4772
Description Mpei.4772
This is a relatively harmless memory resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed, created or opened. The virus uses anti-debugging tricks.
If Novell network is installed, the virus, depending on its counter, sends a message in Russian to all workstations in the net. On Fridays, this virus drops a program to the MBR of the hard drive that looks like a stealth boot virus, but without an infection routine, i.e., the code does all that other boot viruses do; installs itself into the memory, hooks INT 13h, and runs a stealth routine. The only exception in this code is that it does not contain an infection routine.
The virus contains the following text strings in Russian and English:
COMSPEC=
NAME: MPEI
Windows 95 MUST DIE !!!
Copyleft (c) Down'niloff Corp.,2000. All Lefts Preserved.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Comercio Electrónico
Roofing Austin
Cheap Used Cars
Womens Robes
Radiobloggen
|