WpcBats family
Description WpcBats family
These are dangerous memory resident encrypted parasitic viruses. They hook INT 16h, 1Ch, 21h and write themselves to the end of COM and EXE files that are executed or closed. When an infected file is opened, the viruses disinfect it.
In some cases "WpcBait.3072" formats disk sectors. Depending on the system time and their counters both viruses display the texts:
a l a - e h !
xxxxx x xxxxx xxxxx x x
|XxxxX|X |XxxxX xx |Xxxx |XxxxX
|X--+X|Xxxxx|X--+X |Xxxxx|X--+X
++ +++----+++ ++ +----+++ ++
------ A.R.Jr W P C B A T S -------
Check other viruses! Be aware! Use Antiviral Software
Dosver.2062
Description Dosver.2062
It's a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files that are executed. On installation this virus checks the DOS version and in case of its number the virus sets the INT 20h, 21h, 25h, 26h, 27h to their original address in the DOS kernel.
Dot.944
Description Dot.944
This is a dangerous non memory-resident virus which analyses the ENVIRONMENT block, looks there for the string "COMSPEC=" and infects COMMAND.COM (or its substitutor) via this string. After that the virus writes itself into .COM-files of the current directory by standard way. The virus intercepts INT 16h (keyboard) and depending on symbols entered from the keyboard, launches on the 25th screen line, from the right to the left and backward the symbol of a funny face (ASCII 1). The movement of the "face" is accompanied by a buzzing sound. The virus fairly rudely treats INT 16h, might hang up the system, removes the "read-only" attributes, sets file time to 62 sec.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|