Devil.941
Description Devil.941
This is very dangerous memory-resident virus which by standard way affects .COM-files in the current directory (as infected files are activated) or as soon as they are started (from TSR-copy of the virus). From time to time the virus changes the color of some characters on the screen. Depending on its internal counters this infector deciphers and displays the following text: "Have you ever danced with the devil under the weak light of the moon? Pray for your disk!". It contains the strings: "Drk", "*.com", hooks INT 9, 21h.
Check other viruses! Be aware! Use Antiviral Software
Nobody.374
Description Nobody.374
These are dangerous nonmemory resident encrypted parasitic viruses. They search for COM files in the current directory, then write themselves to the end of the file. The viruses use not accurate anti-debugging tricks, and may halt computers because of that. The viruses contain the text:
NOBODY
by Joe 770915 Bucharest 1997
Nocopy.3685
Description Nocopy.3685
These are not dangerous memory resident encrypted parasitic viruses. They hook INT 20h, 21h, 2Fh and write themselves to the end of EXE files that are accessed. They create file-dropper NOCOPY.COM and insert the string "C:NOCOPY" to the beginning of C:AUTOEXEC.BAT file. They correct MBR of hard drive so that while loading from that disk the virus receives the BIOS address of INT 13h.
|