Tashkent Family
Description Tashkent Family
These are not dangerous nonmemory resident parasitic viruses. They search for .COM files and write themselves to the end of the file. "Tashkent.509" increases the file length by 509+nn bytes where 'nn' is the "generation" of that virus. Depending on the system timer they decrypt and display the messages in Russian. These viruses contain the text string:
*.COM Æá_¬Ñ¡_(æ) 91ú
Check other viruses! Be aware! Use Antiviral Software
Cd.2161
Description Cd.2161
It's a memory resident not dangerous encrypted virus which hooks INT 21h and infects by standard way COM- and EXE-files. It contains the text string: "SCAN CLEAN VIR ARJ FLU COMMAND". The virus doesn't infect these files. It also contains the strings ".COM.EXE" and sometimes types:
VirCheck V1.2 (C)1991
Be aware of those worms out there, violating
your machine on Friday 13th - it's tomorrow!
Special thanks to Ross M. Greenberg,
Patricia M. Hoffmann and John McAfee
Press any key to continueall
CD_Joke.848
Description CD_Joke.848
It is not a dangerous memory resident parasitic virus. It is encrypted in files as well as in the system memory. It hooks INT 21h and writes itself to the beginning of COM files (except COMMAND.COM) that are executed. To detect its TSR copy the virus calls INT 21h with EAX='PiVO' and compares the returned EAX with 'OUi!'.
If there is a CD drive installed, the virus also hooks INT 16h and depending on its keystrokes counter ejects or closes CD drive.
The virus contains the text string:
CD Joke II by NemO.
|