Theta.527
Description Theta.527
It is a harmless memory resident multipartite virus. While executing an infected file the virus infects the MBR of the hard drive. While loading from infected disk it hooks INT 13h, intercepts the first execution of an EXE file, hooks INT 21h and then writes itself to the end of COM files that are executed. The virus does not manifest itself in any way.
Check other viruses! Be aware! Use Antiviral Software
Ionkin Family
Description Ionkin Family
These are harmless nonmemory resident parasitic viruses. They search for x*.COM files ('x' is a random selected letter from 'A' till 'Z', the virus gets that letter depending on the system timer) and then writes itself to the end of the file.
"Ionkin.2372" creates the IONKIN.COM file, writes a trigger routine to that file, and executes it. Being executed this file stays memory resident and from time to time displays (in Russian):
+-------------- The virus by Valery Ionkin is workingall----------+
¦ Insert 10 roubles into drive A:, please, or I format diskette ! ¦
+-----------------------------------------------------------------+
Iotm.1009
Description Iotm.1009
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of COM and to the end of EXE files (except COMMAND.COM) that are accessed. The virus also calls infection subroutine when disk files are searched. On infecting COM files the virus encrypts first 1009 bytes if the file. The virus contains the text string:
Hi, I`m [IOtm] virus$
|