X-Mrei
Description X-Mrei
These are not dangerous memory resident encrypted parasitic viruses, "X-Mrei.1405" is the polymorphic virus. They are encrypted in the system memory as well as in files. While installing memory resident the viruses trace INT 21h chain and patch DOS kernel to hooks INT 21h calls. The viruses then write themselves to the end of COM and EXE files that are executed or opened. They check file names and do not infect anti-viruses AIDSTEST, DRWEB, SCAN as well as WIN.COM.
On each INT 21h call the viruses display text "X-Mrei 7" to the 26th line on the screen. This line is out of standard screen size and is visible only is current video mode supports more than 25 lines one the screen.
Check other viruses! Be aware! Use Antiviral Software
Nuker.Trance.1688
Description Nuker.Trance.1688
On the 1st day of the month if it is Monday that virus hooks INT 1Ch, and exchanges the symbols on the screen. Depending on its generation the virus may erase the disk sectors. The virus contains the text string:
Trance Virus (c) 1995 by The Nuker
Nuker.Trance.1982
Description Nuker.Trance.1982
On the 1st day of the month if it is Monday that virus hooks INT 1Ch, and exchanges the symbols on the screen. Depending on its generation the virus may erase the disk sectors. The virus contains the text string:
Trance Virus (c) 1995 by The Nuker
This virus also hooks INT 8,13h. By using INT 13h hook the virus overwrites the disk sector with the string:
This sector has been fucked up courtesy of Tranceý Virus (c) 1995 by The Nuker
By hooking INT 8 the virus "shakes" the screen.
|