Win95.Harry.a
Description Win95.Harry.a
It is a dangerous memory resident (VxD driver) parasitic virus. It infects NewEXE PE files (Win95). When an infected file is executed, the virus scans the Win95 kernel for free space (in VMM driver), copies itself to there and hooks IFS API. Because of such installation algorithm the virus often halts the computer.
When NewEXE files are opened, the virus infects them. While infecting the virus writes itself to the end of the file and modifies the NewEXE header to take control when infected file is executed.
While installing memory resident the virus also changes the image of mouse cursor (loads an image of syringe). To do that the virus creates the C:SYRINGE.CUR file and registers it in the system as a cursor's image.
The virus contains the text strings:
Fuck Harry by Quantum / VLAD
Control PanelCursors
Arrow
Check other viruses! Be aware! Use Antiviral Software
NoWin.2576
Description NoWin.2576
It is not a dangerous memory resident parasitic encrypted virus. It hooks INT 9, 21h and writes itself to the beginning of COM and to the end of EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. While executing WIN.* file the virus reboots the computer. In some cases the virus beeps by PC speaker. The virus contains the text strings:
Copyright (c) 1993-94 XY, Zielona G¢ra.
R_H
|PL|
Nr.300
Description Nr.300
It is a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. The beginning of infected files contain the text strings "Nr". Sometimes this virus overwrites CMOS memory.
|