Boing.349
Description Boing.349
It is a harmless nonmemory resident encrypted parasitic virus. It search for .COM files and writes itself to the end of the file. It contains the string:
[BOING]
Check other viruses! Be aware! Use Antiviral Software
Fanthomas.1443
Description Fanthomas.1443
It is a harmless memory resident multipartite virus. It hooks INT 13h,1Ch,21h and writes itself to the end of COM and EXE files that are executed, and to the MBR of the hard drive while execution an infected EXE file. The virus contains the text string:
-=_FANTHOMAS vir. 1.0_(c) Szczecinek_Dla Izy W. z Bestwiny_=-
Fantom.954
Description Fantom.954
It is a harmless memory resident multipartite virus. It writes itself to the MBR of the hard drive and to the end of EXE files. It is encrypted in files. While accessing to infected MBR the virus calls its stealth routine.
When an infected file is executed, the virus infects the MBR and returns to the host program. While loading from infected MBR the virus hooks INT 8, waits for some time (to pass DOS loading process), then hooks INT 13h and INT 21h. The INT 13h handler contains only stealth routine. INT 21h handler intercepts file execution and calls infection routine. This handler also contains semi-stealth routine that is called on FindFirst/Next DOS calls.
The virus contains the text string:
FANTOM vir. 2.0 -(c)Szczecinek- Dla Malgorzaty P.
|