ZGB.2112
Description ZGB.2112
This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of .COM and .EXE files that are executed or created and then closed (copied). On April and August 17th, the virus deletes disk files and displays the following message:
Aha! Greeting from cqZGB,
can you find me? Bye-bye!
Check other viruses! Be aware! Use Antiviral Software
Klf.356
Description Klf.356
It is a memory resident harmless virus. It copies itself to Interrupt Vectors Table at address 0000:0200, hooks INT 21h and writes itself to the end of COM files that are executed. The virus contains the text:
The KLF
Knight.1136
Description Knight.1136
It is a dangerous nonmemory resident overwriting virus. It searches for .COM files and overwrites them. This virus uses several levels of decryption, some parts of code are encrypted up to seven times. This virus uses anti-debug tricks, it contains the text strings and displays some of them:
Aspettami che arrivo
all you can be anything you want to be ...
*.COM
-KNIGHT-
|