| Description:
|
Details
Word Family
These are very dangerous resident viruses which affect .COM- and .EXE-files as they are executed. Infected EXE-files are transformed into the COM format (see the "VACSINA" viruses). The viruses hook DOS function Write (INT 21h, f.40h) and on writing to files swap words in the text:
"ERROR ON WRITING TO DISK" -> "ON ERROR TO WRITING DISK".
These infectors hook INT 21h. "Word.1387,1391,1485,1503" are encoded, "Word.1391,1485,1503" use polymorphic algorithm. The viruses contain texts: "Word.1387" - "COPYRIGHTKievVirus", "Word.1503" - "Kiev V1.1COPYRIGHT". |