| Description:
|
Details
Mirror viruses
Mirror.482
This is a very dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of every third .COM file that is executed. This infector alters 4 bytes of the header (JMP Loc_Virus, DB 17h - ID-byte). Upon the 1000th INT 21h call, the virus "flips" the screen (up <-> down, right <-> left), and overwrites the MBR of the hard drive with a program that reboots the computer while loading (JMP FAR F000:FFF0).
The virus performs strange manipulations with the memory while creating its TSR copy (it is possible that there is a corrupted virus strain).
Mirror.924
This is a benign memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of .EXE files that are accessed. Upon the 10th starting of an infected file, the virus turns the screen from left to right.
Mirror.1056
This is a benign memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. In March, it also hooks INT 8 and some time after, it changes the active video font (EGA/VGA cards). |
