Cagliari family
Description Cagliari family
These are very dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of .COM files that are executed. On May 1st they erase the FAT sectors on disks A, B, C, D and then display the message:
caGLiArI
The similar string is used by virus in its "Are you here?" call - while installing the virus calls INT 21h with AX=FFABh, the memory resident copy returns 'CA', 'GL', 'IA', 'RI' in registers AX,BX,CX,DX.
Check other viruses! Be aware! Use Antiviral Software
Mixx.570
Description Mixx.570
It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. On February 28th the virus formats the hard drive sectors. It contains the text:
MiXx
MJ.1513.a
Description MJ.1513.a
This is a very dangerous memory-resident virus which writes itself into the MBR of the hard disk as soon as an file is started and into .COM- files whenever they are started. The old contents of the MBR is saved at the location 0/0/2 (head/track/sector). COM-files are affected by standard way.
Whenever an infected .COM-file is started the virus installs its TSR copy into the memory, displays the message "Bad command or file name" and returns to DOS. On the 100th reboot from the infected hard disk the first 16 sectors of it are wiped out. On every 256th read operation from an infected disk (INT 13h) the virus placed the word 'mj' into the block that has been read at the location C8h. The virus hooks INT 13h, 1Ch, 21h.
|
Home
Viruses from A to Z
0-9
A
B
Ñ
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
|