ChaosYears Family
Description ChaosYears Family
These are dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM- and EXE-files on their opening or execution. Sometimes the viruses erase disk sectors and then decrypt and display the message:
YOUR DISK HAS BEEN DESTROYED BY THE " CHAOS YEARS " VIRUS all
ACCEPT MY SINCERE SYMPATHY !
SIGNED : THE DARK AVENGER .
Check other viruses! Be aware! Use Antiviral Software
Tenerife.1707
Description Tenerife.1707
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. It contains the text string:
atan ucifer 66 enerife 1993
Depending on the system date the virus also hooks INT 9, 1Ch, and some time after manifests itself with several effects. While entering a key the virus puts the strings into the keyboard buffer:
'S' - "atan "
'L' - "ucifer "
'6' - "66 "
'T' - "enerife "
The virus also manifests itself with some sound effect.
Tentacle_III.10496
Description Tentacle_III.10496
It is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. While infecting a file the virus writes to the file EntryPoint the JmpFar_Virus instruction and fixes the EXE relocation table in the same way as "Voronezh.1600" virus does. If an EXE file contains overlay data, the virus moved that data down and writes its code between EXE module and overlay data.
While opening a GIF files the virus depending on its random counter renames them to the name TENTACLE with a random selected extension and overwrites with GIF image of a tentacle.
The virus check the system memory for the memory resident anti-viruses and patches their code, if they are found. The virus also reads some data from IFS$HLP$ and patches it in some way.
The virus contains the text strings:
IFS$HLP$
TBDRVXXXSCANX TBCHKXXXTBMEMXXXTBFILXXXTBDSKXXXTBLOGXXX
WARNING!
Your system is contamined with the Tentacle Virus.
IMPORTANT: Don't open any GIF file!
.GIF.gif.EXE.exeTENTACLE.
|