Disruptor.1129
Description Disruptor.1129
It is not a dangerous memory resident encrypted parasitic virus. It writes itself to the end of EXE files. When an infected file is executed, the virus creates and infects virus-dropping files: STARTME.EXE file in the current directory and README.EXE file in the root directory of the current drive. The virus then returns back to the host program. When STARTME.EXE or README.EXE are executed, the virus displays the message:
SYSERR1764: Not enogh memory to start this program. Try again!
It then hooks INT 21h, stays memory resident and infects EXE files that are executed.
The virus also creates the hidden ION.DAT file in the root directory of the current drive, saves its counter in there and increases this counter on each execution of infected program. If that counter reaches 120, the virus halts the computer (because of a bug this counter never reaches 120). When this counter reaches 60, the virus stays memory resident not only from droppers, but from any infected file.
The virus disables file deleting and subdirectory removing DOS calls. The virus also contains the text strings:
Sector Disruptor II 1001
SDII
Check other viruses! Be aware! Use Antiviral Software
AdiPop.485
Description AdiPop.485
It is a dangerous memory resident parasitic virus. It copies itself into Interrupt Vectors Table, hooks INT 1Ch, 21h and writes itself to the end of COM files that are executed. Depending on its counters the virus hooks INT 9 and beeps by PC speaker. The virus has bugs and may halt the system.
Adolf.475
Description Adolf.475
It is a very dangerous memory resident virus that by standard way hits COM- and OVL-files at they loading into memory. The virus copies its TSR part into interrupt vector table at address 0000:0200. It contains a text "Adolf Hitler". With a probability of 1/8 it stops a file deleting, hooks INT 21h.
|