Win32.Rufoll.1432
Description Win32.Rufoll.1432
This is a relatively harmless, non-memory resident parasitic Win32 virus. It searches for Win32 EXE applications (PE EXE files) in the current directory, Windows directory, and Windows system directory, then infects them. While infecting, the virus writes itself to the end of the file.
On Saturdays, the virus displays the following message box:
then "shakes" the desktop and displays another message box:
Check other viruses! Be aware! Use Antiviral Software
June8.1919
Description June8.1919
It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 9, 1Ch, 21h and writes itself to the end of COM and EXE files that are opened or renamed. Under debugger, or on June 8th it erases disk sectors. When Alt-Ctrl-Del keys are pressed at the same time and depending on its counters the virus plays a (Chinese?) tune. The virus contains the text string:
EXECOM
Junior.224
Description Junior.224
It is a harmless memory resident parasitic virus. Being executed it copies itself into Interrupt Vectors Table, hooks INT AEh and inserts instruction CD AE (call to INT AEh) into resident portion of COMMAND.COM instead of original INT 21h call. As a result, the virus receives the control when any program is executed. Then the virus writes itself to the end of COM files. The virus contains the text string:
Junior
|