| Description:
|
Details
Leech.1024
These are memory resident encrypted viruses. They hook INT 21h and write themselves into COM files that are executed or closed. If the first instruction of the file is a JMP (E9h or EBh), then the virus inserts itself into the file middle at the address to where JMP instruction points, else the virus writes itself to the beginning of the file. While infecting the virus uses undocumented System File Table.
Depending on the current time "Leech.1024", "Glist.1014" and "Tazta.1008" display the messages and erase the sectors of the root directory of the current drive:
"Leech.1024": The leech liveall
"Leech.Tazta.1008": Super, Super! ... March 1993, Tazta.
"Leech.Glist.1014": Mr.Tapeworm May 1996 The GLIST
"Leech.Warrier.768" is a harmless virus. It contains the text:
The WARRIER! |
