04h Family
Description 04h Family
These are harmless memory resident parasitic viruses. They hook INT 21h. On DOS calls FindFirst (AH=4Eh), they search for COM files and write themselves to the beginning of the file. The viruses contain the encrypted text strings:
"04h.609": 04h Virus, (c) Enrico*.com
"04h.635": 04h Virus*.com
Check other viruses! Be aware! Use Antiviral Software
Khizhnjak.306
Description Khizhnjak.306
These are nonmemory resident parasitic viruses. They search for .COM file(s) of current directory and write themselves to the end of the file. Some of these viruses search for the files of current directory of A: and C: drives.
These viruses are the results of the publication of the book "Writing virus and anti-virus" by mr.Khizhnjak. He published the commented listing of nonmemory resident COM virus, and the viruses of "Khizhnjak" family are the modifications of that virus.
They manifest themselves by different manners: some of them are harmless, other display the messages or/and erase CMOS, disk sectors and files.
The messages are:
"Khizhnjak.834": Mason Hardkiller (C) 1995. (XAPïAHOB-âÇä)all
"Khizhnjak.ASV": Alexander S. Virus ! "SUKA ver 1.0
"Khizhnjak.Genesis": !!!GENESIS THE BEST BAND IN THE WORLD!!!
"Khizhnjak.Hallo": Hallo! I have got a virus for you!
"Khizhnjak.Happy": "Don`t worry,be happy!"
Khizhnjak.Areg
These are not dangerous viruses. With the probability 1/8 they display the text message in Russian. They also contain the text string:
(C) 1993 AREG Soft
Khizhnjak.DeathLord
These are dangerous viruses. Depending on the current time and date they erase the screen, hook INT 1Ch and delay on every timer tick, delete the files. These viruses display the messages:
"Khizhnjak.DeathLord.752": Death Lord.So I dub thee Unforgiven.
"Khizhnjak.DeathLord.933": Created by Death Lord
Khrusha.1505
Description Khrusha.1505
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. In some cases it displays the message in Russian. It also contains the text string:
Khrusha
|