Trojan.Win32.NoStart
Description Trojan.Win32.NoStart
This is a program for the Windows system. Upon being executed, it stays in the system memory and performs no actions till the moment the "Start" button is pressed. At this moment, the Trojan activates its routine, which clears the screen and halts the system. Reboot is possible only by a cold reset.
Check other viruses! Be aware! Use Antiviral Software
SI.509
Description SI.509
It is a dangerous memory resident parasitic virus. It hooks INT 1Ch, 21h, intercepts DOS calls Create/Remove/Change Directory, Create/Open File and on these calls search for .COM files in the current directory, then writes itself to the end of the file.
To detect its TSR copy the virus writes ID-word "SI" to the BIOS data area at the address 0:0472 (Warm boot flag). At 10:00 the virus reboots the computer. The virus contains the text:
*.COM
Sibylle
Description Sibylle
It is a dangerous memory resident parasitic virus. It hooks INT 21h, 2Fh and writes itself to the end of EXE files that are executed. By hooking INT 2Fh the virus detects its already installed TSR copy. Sometimes it set the file attribute to Volume Label value. Depending on the current time this virus overwrites the AUTOEXEC.BAT with the strings:
@echo off
:b
echo Looking for Sibylleall
goto b
|