Virus Protection > computer-virus-z-page1 > - zamol famil

zamol famil

Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.

Description: Details
Zamol family

These are memory resident partly encrypted parasitic viruses. They hook INT 21h and write themselves to the beginning of COM and to the end of EXE files that are executed or accessed. While infecting they temporary rename files with names:
"Zamol.2024,3390,4358": ACULA.TRS
"Zamol.2153,2743" ++++++.!!!

"Zamol.2024" does not manifest itself in any way. Other viruses hook INT 8,9,13h,33h (timer, keyboard, disk access, mouse) and depending on the system date and their counters manifest themselves with several effects: display messages, play a tunes, disable writing to floppy drive, disable ENTER and DEL keystrokes, overwrite boot and MBR sectors with a program that display a message, intercept Login procedure and save a password.
"Zamol.2153" displays the message:
+-----------------------------+
| |
| Greetings from Timishoara ! |
| Call 040-96-113821 |
| |
+-----------------------------+

"Zamol.2743" displays the messages:
+---------------------------------+
| ZAMOLXIS VIRUS |
+---------------------------------+
| Se dedic mortilor din DEC. 89! |
| Nu se dedic lui Ion Iliescu! |
| Romania Timisoara 1994/am ! |
| |
+---------------------------------+
+------------------------------------+
|Liceul de Informatica Grigore Moisil|
+------------------------------------+

"Zamol.3390" displays the messages:
+---------------------------------+
| ROMANIAN 13 VIRUS |
+---------------------------------+
| Dedicate to Bosnia-Hertegovina |
| and special for romanian youngs |
| dead in "The War For Liberty". |
| Romania Timisoara 1994/am ! |
| |
| Timisoara phone : 040/096/ |
+---------------------------------+
+----------------------------------------------+
| " DRACULA`s spirit " |
| original scotch by Transilvaniaall |
| ..call "Transilvania General Import/Export" |
+----------------------------------------------+
| "RIO" soft drink ! Quality guaranted ! |
| Romania Timisoara cod 1900 Ghirlandei nr. 4 |
+----------------------------------------------+
|To everytime Whores! Call 166894 .(Taxi Bimbo)|
|----------------------------------------------|
| " Eco Tours " ! More a man dead ! ( 123450 ) |
+----------------------------------------------+

The viruses also contain the text strings:
"Zamol.2024": MS Works Virus
"Zamol.6418": MS Works Virus
THE LAST CAPTURE IS: