Bishkek.319
Description Bishkek.319
This is a very dangerous non-memory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. On the 31st of any month, it erases the MBR of the hard drive. On the 22nd of any month, it decrypts and displays the following message:
Scorpions by Sch(5) in Bishkek
Bishkek.559
This is a harmless non-memory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. The virus contains the text string:
Bishkek software *.* My rights reserved 23.08.1994. *.com
Check other viruses! Be aware! Use Antiviral Software
ShuHard.386
Description ShuHard.386
It is not a dangerous(?) memory resident parasitic virus. It copies itself to Interrupt Vectors Table, hooks INT 21h and writes itself to the end of COM files (except COMMAND.COM) that are closed. While infecting a file the virus uses not documented DOS calls and System File Tables.
When files are executed the virus scans the command line for "doom" text. If it is found, the virus modifies the i386 register CR0 - it sets on the reserved bit (CR0 OR 40000000h). The virus also reverses that bit when any program is executed.
The virus contains the text strings:
doom
VM
DOOM MD! R.ShuHard 1997
Shutdown.644
Description Shutdown.644
This is a dangerous non-memory resident parasitic virus. It searches for COM files, and writes itself to the beginning of the file. In March, it erases the disk sectors and displays the following:
Computers must be shutdown to dedicate my sister!
|