TrojanSpy.Win32.KIM
Description TrojanSpy.Win32.KIM
This trojan horse works under Windows and hidden saves all opening windows and pressing button.
When the run install to system three files:
%WinDir%SystemKrnl40.dll %WinDir%heak.exe %WinDir%ki.ini
It creates log-file with a name "key.dl" in directory when Windows installed.
Check other viruses! Be aware! Use Antiviral Software
Disruptor.1129
Description Disruptor.1129
It is not a dangerous memory resident encrypted parasitic virus. It writes itself to the end of EXE files. When an infected file is executed, the virus creates and infects virus-dropping files: STARTME.EXE file in the current directory and README.EXE file in the root directory of the current drive. The virus then returns back to the host program. When STARTME.EXE or README.EXE are executed, the virus displays the message:
SYSERR1764: Not enogh memory to start this program. Try again!
It then hooks INT 21h, stays memory resident and infects EXE files that are executed.
The virus also creates the hidden ION.DAT file in the root directory of the current drive, saves its counter in there and increases this counter on each execution of infected program. If that counter reaches 120, the virus halts the computer (because of a bug this counter never reaches 120). When this counter reaches 60, the virus stays memory resident not only from droppers, but from any infected file.
The virus disables file deleting and subdirectory removing DOS calls. The virus also contains the text strings:
Sector Disruptor II 1001
SDII
Dith.1502
Description Dith.1502
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus does not manifest itself, it contains the text string:
AL-DITH FOREVER
|