Cinderella.390
Details
Cinderella.390.a
Cinderella.360
These are not dangerous memory resident parasitic viruses. They copy themselves into the Interrupt Vectors Table, hooks INT 16h, 21h and write themselves to the end of .COM-files that are executed or opened. After some INT 16h calls they create zero-length file:
“Cinderella.360.a”: CINDEREL.LA file
“Cinderella.360.b”: CINDYRUL.EZ file
These viruses contain the internal strings:
“Cinderella.360.a”: cInDeReL.la
“Cinderella.360.b”: CindyRul.ez
Cinderella.779
It’s a memory resident very dangerous virus. It hooks INT 21h and writes itself into the beginning of the COM-files and the end of the EXE-files upon their opening or execution. It erases the disk C: FAT and types “Cinderella II”.
Related Posts