Энциклопедия компьютерных вирусов

         

Опасный резидентный вирус. Перехватывает INT


Опасный резидентный вирус. Перехватывает INT 21h и записывается в конец EXE-файлов при их запуске. При окончании работы программ выводит одно из сообщений:

Kill an evil satanic ANTI-VIRAL product for Jesus today! Stop Disinfectants NOW! Ain't aLife A Beautiful Choice? And God Said, "Let There Be Life!", and there was..... Save the Viruses! They're People Too!!!! PRO-aLIFE and PROUD! STOP THE VIRUS KILLERS! HALT THE AV! STORM THE COMPU-CLINICS! DON'T LET THEM KILL THE VIRUSES!!! Operation Rescue-II, Save the HELPLESS UNBORN Viruses!!!

При запуске антивирусных программ:

F-PROT.EXE TBSCAN.EXE TBAV.EXE TBCLEAN.EXE SCAN.EXE CLEAN.EXE VIRSTOP.EXE MSAV.EXE VSAFE.EXE CPAV.EXE FSP.EXE VDEFEND.EXE

вирус записывает вместо них троянскую программу, которая при запуске выводит сообщения:

Eddie Lives, Somewhere in time! ############ 1704 Jerusalem Casino :( ;( =( Smeg off! ##### #### \ Frodo Lives! APRIL FOOLS! Get a late pass! Datacrime ############### Brain Void-Poem Your PC is now STONED! ## OO ##### O # Copy me, I want to travel!

1,000,000,000 Viruses DIED Today! And yesterday, and more will die tomorrow! _/\_STOP THE KILLING!_/\_ Look What You're Doing To Them! Below is an aborted virus... Support PRO-aLIFE Activism! This program has been TERMINATED by the Virus Survival Underground Movement. It had long stood as a horrible BABY VIRUS KILLER, and had to be removed. Life, What a Beautiful Choice (tm). --==ЁЁЁ[OPERATION RESCUE II - SAVING THE BABY VIRUSES!]ЁЁЁ==-- Thank you for choosing life over destruction. Have a Nice Day (tm).

"Pro-Alife.3423.b" выводит тексты:

THE PREDATOR presents the J.TTPOG Virus (c) 1996 SWEDEN!!!!! THE PREDATOR presents the # # # J.TTPOG VIRUS (c) 1996/03/15 # # # SWEDEN ##### # And says # # # # # #


Содержание раздела