Stunning.1234
Description Stunning.1234
It is not a dangerous memory resident parasitic encrypted virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. It deletes *.CPS files. Depending on the system date it hooks INT 8 (timer), manifests itself by a video and sound effect and displays the message:
Stunning Blow all Running Ghost (R) v00
Check other viruses! Be aware! Use Antiviral Software
ABCD.a
Description ABCD.a
It's a harmless boot virus. On loading from infected disk, it hooks INT 13h and writes itself into boot sectors of floppy disks. It infects the hard drive on loading from infected floppy. It uses the ID-word ABCDh.
Abola.2420
Description Abola.2420
This is a very dangerous memory resident parasitic virus. It writes itself to the end of EXE and to the beginning of COM files that are terminated (on INT 22h call). The virus stays memory resident only if the XMS driver is installed. While copying its resident code, the virus patches the XMS driver, hooks INT 2Fh and leaves its code in Upper Memory.
The virus utilizes a rather unusual way of accessing the files - during INT 2Fh calls, the virus scans memory blocks and patches INT 22h (Terminate) address in programs' PSP. When these programs are terminated, the virus will infect them.
On Tuesdays, the virus overwrites the disk sectors with the string:
AbolaAbolaAbolaAbolaAbola
|