Booty
Description Booty
It is not a dangerous memory resident boot virus. It hooks INT 13h and writes itself to the MBR sector of the hard drive and boot sectors of floppy disks that are accessed. The TSR copy of virus is stored in the Interrupt Vectors Table. The virus doesn't save original boot sector of floppy disks while infecting them.
The virus contains the text string:
BOOTY
Check other viruses! Be aware! Use Antiviral Software
Slowly.1112
Description Slowly.1112
These are relatively harmless, non-memory resident encrypted parasitic viruses. They search for COM and EXE files in the directories of local disks and in directories from the environment variable PATH, then write themselves to the end of the file. These viruses also infect the archive files RAR. They don't infect files ending in the following symbols:
ER, 86, ND, E?
While starting, they try to infect the file KEYB.COM in the PATH directories. While infecting archive files, the viruses create their droppers with different names. For example:
NRPNSF.COM
BMEBOC.COM
GIQG.COM
HIUHDRHF.COM
ZFYXFRZ.COM
The viruses periodically create temporary files with the following text:
Let all enemies dieallSlowly ;)
Slowly.2043
This virus also infects ARJ archives.
Slubdestr.1024
Description Slubdestr.1024
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and when any file is executed or terminated, the virus searches for two .COM files of the current directory and writes itself to the end of the file. After infection it checks the system timer and on 10am and 5pm it renames C:AUTOEXEC.BAT file to C:SLUBDESTR.N23. It contains the text string:
c:autoexec.bat c:slubdestr.n23
|