Uniform
Description Uniform
It is a harmless memory resident stealth boot virus. It reserved 1KB of the DOS memory, copies itself into there and hooks INT 13h. Then the virus writes itself to the MBR of the hard disk and boot sectors of the floppy disks. The virus saves the original MBR write into Track 0, Sector 3, Head 0. On floppy disks the virus writes the original boot sector to the last sector of the root directory. It calculates last sector of root directory with use of boot sector data.
The virus contains text "UNIFORM" at the beginning of virus code. This text is used by the virus to identify already infected disks. At the end of virus code it contains text "Rajaat".
Check other viruses! Be aware! Use Antiviral Software
NKTU_LUH
Description NKTU_LUH
It is a dangerous memory resident boot virus. It copies itself at the address 8F00:0000 (it causes system crash in lot of cases), hooks INT 13h, 1Ch and writes itself into MBR of hard drive and floppy boot sectors. In some cases it erases disk sectors and displays the message:
NCTU LYH
NMSG.214
Description NMSG.214
It is a dangerous nonmemory resident parasitic virus. It searches for .EXE files, then writes itself into the file middle. The file length does not grow, but the virus may corrupt the files while infecting them. The virus contains the text string:
*.exe <<NMSG>>
While infecting the virus overwrites the area of Microsoft C error messages. That area presents in EXE files compiled with MSC compiler, and contains the text strings:
<<NMSG>>
R6000 - stack overflow
R6003 - integer divide by 0
e.t.c. While infecting the virus searches for the string
<<NMSG>>
in the file body, then overwrites that area with the virus code.
|