Ultimate.982
Description Ultimate.982
This is a very dangerous non memory-resident encrypted parasitic virus. It searches for COM files, then writes itself to the end of the file. The virus decryption loop is placed at the file beginning.
Each month starting from June, from 20th till 31th the virus displays the message and format the hard drive:
I twist de truth, I rule the world.
This virus also disables several anti-virus memory resident monitors and deletes the anti-virus data files:
CHKLIST.MS
ANTIVIR.DAT
TBUTIL.DAT
CHKLIST.CPS
NAV_._NO
MSAV.CHK
CHKLIST.TAV
SMARTCHK.CPS
AV.CRC
AVP.CRC
IM.PRM
IV.INI
IVB.INI
IVB.NTZ
The virus also contains the text string:
TBMEMXXXTBCHKXXXTBDSKXXXTBFILXXX
[Ultimate Evil III] by Vecna.
Check other viruses! Be aware! Use Antiviral Software
Chris.463
Description Chris.463
It's a not dangerous memory resident parasitic virus. It copies itself into the interrupt vector table, hooks INT 21h and writes itself to the end of .COM-files that are executed. Sometimes it decrypts and types the message: "Mary,all. ti AMO!". It also contains the internal text string: "", the word "inf" is placed at the end of infected files.
Christ.483
Description Christ.483
This infector is harmless and memory-resident. It writes itself into COM-, EXE- and OVL-files by standard manner. The virus hooks INT 21h. On April, 1st the virus displays the text (in Russian), saying that the "Christ raises from the dead!".
|