Writer.1336
Description Writer.1336
It is a harmless memory resident encrypted parasitic virus. It traces and hooks INT 21h and then writes itself to the end of EXE files that are copied. While installing the virus uses anti-debugging tricks.
The virus does not manifest in any way. It contains the text strings:
***** THUNDERBYTE *****
***** (C) COPYRIGHT 1992 BY THE WRITER *****
Check other viruses! Be aware! Use Antiviral Software
Dead.790
Description Dead.790
This is a dangerous memory-resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM files that are executed or opened. On Mondays, falling on the 7th, 15th, 23rd or 31st of the month, it erases hard disk sectors. The beginnings of infected files contain the word "DE", and the word "AD" occupies the last two bytes of the virus, i.e., the last two bytes of an infected file. These words are the name as the virus - "DEAD".
DeadBoot.446
Description DeadBoot.446
This is a very dangerous memory resident encrypted multipartite virus. It infects the MBR of the hard drive and overwrites boot sector on floppy disks as well as headers of EXE files that are copied to floppy disks. The virus encrypts the directories sectors on the hard drive, as a result after disinfection they stay not accessible. To detect its TSR copy the virus uses INT 13h call with AX=DEADh.
|