Virus Protection > computer-virus-m-page1 > - macgyver.109

macgyver.109

Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.

Description: Details
Macgyver.1098

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves at the end of files that are accessed. Depending on the current date and time they hook INT 08h and also and manifest themselves in different ways. "Macgyver.2803,2824" infect .EXE-files only, other versions hit both COM- and EXE-files. "Macgyver.4480,4645" are stealth viruses, they hook INT 2Ah also. "Macgyver.4112" is a multipartite virus, it hits MBR of hard drive and boot sectors of floppies.
These viruses contain the internal encrypted list of file names which will not be infected:
"Macgyver.2803,2824": SCAN ZTEST EXEGOD
"Macgyver.3160,4112":
SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCKC DEBTPLUS
"Macgyver.4480": command ibmbio ibmdos
"Macgyver.4645": COMMAND

They also contain the internal encrypted string:
"Macgyver.2803,2824": MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
"Macgyver.2824.b: * Satan Virus * MAD !! Another Masterpiece of Sax
(c) Copyright 1993 Written by Mad Satanall Ver 2.02
MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
"Macgyver.4480": MacGyver v4.0 written by Dark Slayer in Keelung,
Taiwan. 93/09/09

By hooking INT 08h "Macgyver.2803,2824,4480" play a tune, "Macgyver.3160" displays the message:
+--------------------+
* MacGyver V2.2 *
Hi! I am MacGyver
Written by
in Keelung. TAIWAN
Don't Worry,I just
a Virus. Ha..Ha...
+--------------------+

"Macgyver.4645" displays:
+--------------------+
* MacGyver V3.0 *
Hi! I am MacGyver
Written by
Dark Slayer
in Keelung. TAIWAN
Don't Worry,I just
a Virus. Ha..Ha...
+--------------------+

Updated: 02/24/2006
Copyright @2006 macgyver.109
Webroot Software Inc.