Unknown_II.5559
Description Unknown_II.5559
It is a harmless memory resident polymorphic and stealth parasitic virus. When and infected file is executed, the virus decrypts itself, hooks INT 21h, 22h and executed the host file. To hook INT 21h the virus scans the DOS kernel, patches INT 21h DOS handler with bytes CDh 29h (INT 29h call) and patches INT 29h DOS handler with "JMP FAR Virus" instruction.
The virus traces INT 13h, 21h, 40h, gets their original addresses and uses them while infecting files. The virus infects COM and EXE files (except IBMBIO.COM and IBMDOS.COM) that are accessed. While infecting the virus writes itself to the end of files. On opening an infected file the virus disinfects it.
The virus contains the text strings:
IBMBIO IBMDOS
Unknown 1.0
Check other viruses! Be aware! Use Antiviral Software
Fitria.825
Description Fitria.825
This is a relatively harmless, memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. On the 13th of each month, the virus prints the following message:
[LOVE 2]
-< FITRIA'98 >-
I MISS YOU FOREVER.
NO BODY ELSE IN MY HEART
Contact me at: (021) 9153929
or e-mail: syvatex_96@mailcity.com
(c) 1999 SØvatex LOVE you Forever
Flagyll Family
Description Flagyll Family
These are dangerous memory resident viruses. They hook INT 21h and overwrite .EXE-files that are executed. They contain the internal text strings: "-=[Crypt Newsletter 13]=-", "EXE COM" and
"Flagyll.316,318": Flagyll
"Flagyll.369,371": Flagyll-Z
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Ayala Homes
310-2874
Darlehen Vergleich
Zu Den Zeitschriften Abos
Slovakia Phone Cards
|