Win95.Molly
Description Win95.Molly
It is a harmless memory resident parasitic Win9x virus. It stays in Windows memory as VxD (system) driver, hooks Windows file open function (by intercepting IFS API chain), then writes itself to the end of PE EXE files that are opened.
The virus does not manifest itself in any way. It contains the text string:
[Win95.Molly] (c) 1999 Billy Belcebu/iKX
Check other viruses! Be aware! Use Antiviral Software
7son.253
Description 7son.253
This is a benign non-memory resident virus. It searches for all COM files in the current directory and writes itself to the end of the file. Sometimes it displays the message:
Seventh son of a seventh son
8ball.a
Description 8ball.a
It is not a dangerous memory resident multipartite virus. While executing an infected file the virus copies itself into HMA, hooks INT 40h, and then overwrites boot sectors of the floppy disks. While loading from an infected disk the virus hooks INT 1Ah, waits for DOS loading, and hooks INT 21h. On first call to INT 21h the virus creates on C: drive the file with a random selected name, and writes the virus copy to that file. Then the virus adds the string:
INSTALL=C:
to the end of the C:CONFIG.SYS file. As a result while loading from infected C: drive the virus receives the control in the infected file. After infection the virus restores INT 21h (removes itself from the memory).
The virus uses anti-debugging tricks, performs some commands with keyboard ports, contains the text strings:
PK
INSTALL=C:c:config.sys
8_Ball -=Q=-
|