Selected viruses, spyware, and other threats: sorted alphabetically

Jabberwocky.322

This is a parasitic direct action COM infector with length of 322 bytes. The targets of its attack are all COM files in the current directory. When the infected file is executed the virus writes the following text:

Jabberwocky attack another time

Jabberwocky.615, Jabberwocky.812

Unlike their foregoer these viruses are memory resident and encrypted. They both hook the interrupt INT 21h and attack files when they are executed. Depending on the internal counter the virus may write the following text while infecting:

BEWARE THE JABBERWOCK! HI SOLLY. THIS IS A 100% BRITISH PRODUCT

Jabberwocky.615 attacks only COM files, Jabberwocky.812 also EXE files. At the beginning of the file with the virus the string “JW1” in 615 bytes variant and “JW2” in 812 bytes can be seen. The string “JW0” is located near the beginning of the virus code.

Jabberwocky.1000

This variant comes from Romania and attacks COM files.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.