|
|
Zamol famil Viruses Information
| Name: |
Zamol famil |
| Category: |
Viruses |
| Description:
|
Details
Zamol family
These are memory resident partly encrypted parasitic viruses. They hook INT 21h and write themselves to the beginning of COM and to the end of EXE files that are executed or accessed. While infecting they temporary rename files with names:
"Zamol.2024,3390,4358": ACULA.TRS
"Zamol.2153,2743" ++++++.!!!
"Zamol.2024" does not manifest itself in any way. Other viruses hook INT 8,9,13h,33h (timer, keyboard, disk access, mouse) and depending on the system date and their counters manifest themselves with several effects: display messages, play a tunes, disable writing to floppy drive, disable ENTER and DEL keystrokes, overwrite boot and MBR sectors with a program that display a message, intercept Login procedure and save a password.
"Zamol.2153" displays the message:
+-----------------------------+
| |
| Greetings from Timishoara ! |
| Call 040-96-113821 |
| |
+-----------------------------+
"Zamol.2743" displays the messages:
+---------------------------------+
| ZAMOLXIS VIRUS |
+---------------------------------+
| Se dedicå mortilor din DEC. 89! |
| Nu se dedicå lui Ion Iliescu! |
| Romania Timisoara 1994/am ! |
| |
+---------------------------------+
+------------------------------------+
|Liceul de Informatica Grigore Moisil|
+------------------------------------+
"Zamol.3390" displays the messages:
+---------------------------------+
| ROMANIAN 13 VIRUS |
+---------------------------------+
| Dedicate to Bosnia-Hertegovina |
| and special for romanian youngs |
| dead in "The War For Liberty". |
| Romania Timisoara 1994/am ! |
| |
| Timisoara phone : 040/096/ |
+---------------------------------+
+----------------------------------------------+
| " DRACULA`s spirit " |
| original scotch by Transilvaniaall |
| ..call "Transilvania General Import/Export" |
+----------------------------------------------+
| "RIO" soft drink ! Quality guaranted ! |
| Romania Timisoara cod 1900 Ghirlandei nr. 4 |
+----------------------------------------------+
|To everytime Whores! Call 166894 .(Taxi Bimbo)|
|----------------------------------------------|
| " Eco Tours " ! More a man dead ! ( 123450 ) |
+----------------------------------------------+
The viruses also contain the text strings:
"Zamol.2024": MS Works Virus
"Zamol.6418": MS Works Virus
THE LAST CAPTURE IS: |
Top Viruses Visited Pages:
Invader. - 241 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 67 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
I-Worm.Gigge
Worm.Linux.Chees
Exterminator.42
F1.33
Daga.91
Babilon.100
Ansi.88
Farside famil
Belit.59
Macro.Word.Mikevely
|
|
