Tricks.131
Description Tricks.131
These are harmless nonmemory resident encrypted (except "Tricks.142") parasitic viruses. They search for .COM files, then write themselves to the end of the file. The viruses (except "Tricks.142") use several anti-debugging tricks (one trick per virus), "Tricks.193" does that incorrect and corrupts the files while infecting them. The viruses contain the string:
*.COM
Check other viruses! Be aware! Use Antiviral Software
RP.a
Description RP.a
This is the memory resident boot virus. It hooks INT 12h, 13h and write itselfe to the MBR of the hard drive and the boot sector of the floppy disks. This virus decrypts and displays the following message on December 17th:
RP wants to say hello!
RP.b
Description RP.b
This is the memory resident boot virus. It hooks INT 12h, 13h and write itselfe to the MBR of the hard drive and the boot sector of the floppy disks. This virus decrypts and displays the following message in May:
Only bugs exist! RP 1995 Bucharest
|