Darek.434
Description Darek.434
It is not a dangerous memory resident parasitic virus. It copies itself to Interrupt Vectors Table and hooks INT 21h. When any file is executed, the virus searches for .COM files in the current directory and writes itself to the beginning of files. On June 14th the virus displays the message:
DAREKSOFT ss
Check other viruses! Be aware! Use Antiviral Software
Folko.512
Description Folko.512
It is a harmless nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. While infecting a file the virus uses undocumented System File Tables. The virus does not manifest itself in any way, it contains the string:
Folko
Foma family
Description Foma family
These are not dangerous memory resident parasitic viruses. They hook INT 8, 21h and write themselves to the end of COM files that are executed or opened. When the AIDSTEST anti-virus is executed, the viruses display one the messages and halt the system:
Abnormal program termination
?KMON-F-System read failure halt 177640
Unrecognised error. DMA failure.
Depending on the system date and their counters the virus blink the screen or display messages in Russian. The viruses also contain the text strings:
"Foma.972": STIN V:1.02
"Foma.1000": STIN V:1.01
"Foma.1200": STIN V:1.00
( CGA/EGA/VGA Terminal Color Invertor ) 11-Nov-1991.
Kpy ¼ «p á½ ¡¿ á¼ ¿ ¡Ñ ½áí ¼ ¿ «ó¿ á¼ »« ó áÑ all.....
"Foma.1733": FOMA V:1.01
"Foma.1900": FOMA V:1.00
|