Cinderella.390.a
Description Cinderella.390.a
Cinderella.360
These are not dangerous memory resident parasitic viruses. They copy themselves into the Interrupt Vectors Table, hooks INT 16h, 21h and write themselves to the end of .COM-files that are executed or opened. After some INT 16h calls they create zero-length file:
"Cinderella.360.a": CINDEREL.LA file
"Cinderella.360.b": CINDYRUL.EZ file
These viruses contain the internal strings:
"Cinderella.360.a": cInDeReL.la
"Cinderella.360.b": CindyRul.ez
Cinderella.779
It's a memory resident very dangerous virus. It hooks INT 21h and writes itself into the beginning of the COM-files and the end of the EXE-files upon their opening or execution. It erases the disk C: FAT and types "Cinderella II".
Check other viruses! Be aware! Use Antiviral Software
Lapiddan.457
Description Lapiddan.457
These viruses infect SYS files, and write themselves to the end of the file. The viruses stay memory resident as device drivers that are loaded into the system memory during DOS installation. To infect the files the viruses hook INT 21h.
The viruses do not change driver's Strategy and Interrupt addresses, but correct the NextDevice field - they save the offset of the virus code into there. As a result DOS loads any infected file as two different device drivers.
"Lapiddan.457" is a harmless memory resident parasitic virus, it does not manifest itself in any way. This virus contains the text string:
lapiddan
"Lapiddan.649,1137" on September 13th halt the computer and blink the screen and Num/Caps/Scroll Lock keys. They contain the texts:
"Lapiddan.649": [ESQUILO] by Xavirus Hacker * Programmed in Paraguay
"Lapiddan.1137": [XAVIER!] by Xavirus Hacker
"Lapiddan.1137" also drops the "Xav.Xavier.367" COM parasitic virus.
Laplata.1809
Description Laplata.1809
It is not a dangerous memory resident stealth parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. The virus also infects files that are being searched. It deletes anti-virus file ANTI-VIR.DAT, if it exists.
On 18 November the virus several times displays a text message.
The virus contains the text strings:
Virus La Plata v 2.1 (c) 9/97 Mean Mr. Mustard
> 19 de Noviembre - Viva La Plata <
|