Wintermute.1052
Description Wintermute.1052
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On July 26th on DOS calls FindFirst/Next both FCB and ASCII the virus will shows the file length 666 bytes for all files. That may corrupt the files while packing them to archive.
The virus contains the text string:
Apocalyptic by Wintermute/29ACOM
Check other viruses! Be aware! Use Antiviral Software
BlackSun.2372
Description BlackSun.2372
It is a very dangerous memory resident encrypted parasitic stealth-virus. It traces and hooks INT 21h, then it writes itself to the end of COM- and EXE-files that are accessed. While opening an infected file the virus disinfects it, and then infects while closing.
While opening the file the virus also checks the file name and the contents of the file. If the file name is CHKLIST, or the file contains the string (any-cased):
DISKINFOSCOPE
the virus deletes the file.
Depending on the system time the virus converts the symbols on the screen - lovercased to uppercased, and uppercased to lovercased. The virus also contains the internal text string:
BlackSun v1.0 "Shaker"
BlackWind
Description BlackWind
It's a dangerous not memory resident encrypted parasitic virus. It searches for COM-files and writes itself at their ends. On 6th of any month it formats the hard drive sectors and displays the message (that is partly corrupted):
BLACK WIND VIRUSall
Copyright (C) 1992, Destructive Technologies, Unlimited.
|