Chek1.282
Description Chek1.282
It is a harmless memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 21h and writes itself to the end of .COM-files that are accessed with FindNext ASCII (AH=4Fh) DOS function.
The virus contains the internal text string:
CheK1
Check other viruses! Be aware! Use Antiviral Software
Scorpio.1000
Description Scorpio.1000
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or opened. It contains the text strings:
Plovdiv
Scorpio
Scorpion.2278
Description Scorpion.2278
It is a very dangerous nonmemory resident encrypted parasitic virus. When an infected file takes control, the virus infects the C:COMMAND.COM file. The virus then searches for COM and EXE files, then writes itself to the end of the file. While infecting the C:COMMAND.COM the virus writes itself into the "hole" at the end of the COMMAND.COM. As a result, the length of the C:COMMAND.COM file stays the same.
The virus deletes the CHKLIST.MS file, if it exists. In some cases the virus searches for other files and deletes them. Depending on the system data and installed hardware the virus formats the hard drive sectors, displays the message, hooks INT 1Ch and plays a tune. The message looks as follows:
+---------------------------+
¦ DEATH ON TWO LEGS V2.8 ¦
¦ (c) BLACK SCORPiON, 1996 ¦
¦ Written in Moscow ¦
+---------------------------+
The virus also contains the text strings:
*.* *.EXE *.COM
C:COMMAND.COM
DEATH ON TWO LEGS WAS HERE
|