V3b.699
Description V3b.699
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of COM and EXE files that are executed. The virus contains the encrypted string:
7.11.V3b
Check other viruses! Be aware! Use Antiviral Software
Rager.1383
Description Rager.1383
These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of EXE files that are executed. On executing the LOGIN utility the virus depending on the system timer decrypts and displays the message, and then reboots the computer:
********** Warning ! **********
Novell NetWare report : Hardware A30 error detected.
Registers :
AX :2134 BX :3C23 CX :1841 DX :5421
CS :2451 DS :2023 ES :538A SS :6C8B
SI :46AE DI :94B4 SP :4541 BP :491C
Try restart file-server,if it will not give effect,
switch off your network and call trained service-people.
Press any key to restart this computer.
The virus also contains the text:
NetWare virus from Avenge (tm) family .
(C)Rager , Simferopol State University
Raiden.1433
Description Raiden.1433
It is not a dangerous memory resident multipartite virus. When an infected file is executed, the virus infects the MBR of the hard drive. While loading from infected MBR the virus hooks INT 13h, 1Ch, 4Fh, waits for DOS loading process and hooks INT 21h. By hooking INT 21h the virus intercepts EXE files execution and opening, and writes itself to the end of the file. By hooking INT 13h the virus intercepts accessing to infected MBR and calls stealth routine.
In some cases (depending on the command line) the virus disinfects the host file. On INT 4Fh AX=666h calls the virus displays the message:
+---------------------------------------+
¦ MBR VIRUS V.01 NECROSOFT CORPORATION ¦
¦ WRITEN BY RAIDEN COPYRIGHT (C) 1996 ¦
+---------------------------------------+
|