Dot.944
Description Dot.944
This is a dangerous non memory-resident virus which analyses the ENVIRONMENT block, looks there for the string "COMSPEC=" and infects COMMAND.COM (or its substitutor) via this string. After that the virus writes itself into .COM-files of the current directory by standard way. The virus intercepts INT 16h (keyboard) and depending on symbols entered from the keyboard, launches on the 25th screen line, from the right to the left and backward the symbol of a funny face (ASCII 1). The movement of the "face" is accompanied by a buzzing sound. The virus fairly rudely treats INT 16h, might hang up the system, removes the "read-only" attributes, sets file time to 62 sec.
Check other viruses! Be aware! Use Antiviral Software
MbrKiller.713
Description MbrKiller.713
These are very dangerous memory resident parasitic viruses. They trace INT 13h, 21h, then hook INT 21h and write themselves to the end of COM files that are executed. The viruses have a bug and often halt the system while infecting a file. On 4883rd (1313h) infection the viruses erase the MBR of the hard drive. The viruses contain the text string:
MbR killer v0.01
MD Family
Description MD Family
These are harmless nonmemory resident viruses. They are related to "Vienna" virus. They infects .COM files of current directory and directories marked in PATH (except "MD.354"). These viruses set the file time stamp to 62 seconds. They contain the text strings "MD", "PATH", "*.COM" and:
"MD.354": MaxWell-Defender: The First Meeting
"MD.498": MaxWell Defender: I don't kill MMM
"MD.499": MaxWell-Defender: I haven't been in Vienna
"MD.557": MaxWell-Defender: I don't infect EXE-files
|