Details
Abraxas.1170

These are not memory resident dangerous viruses. They search for the first .EXE-files of current and parent directories and overwrite the files are found. They also create and overwrite C:\DOS\DOSSHELL.COM file. On execution they sound by internal speaker and display the picture:
####################################################
# #
# ###### ####### ####### ###### ### ### ###### ###### #
# ### ### ### ### ### ### ### ### ###### ### ### ### #
# ######## ####### ####### ######## #### ######## ###### #
# ### ### ### ### ### ### ### ### ###### ### ### ### #
# ### ### ####### ### ### ### ### ### ### ### ### ####### #
####################################################

######################
They contain the internal text strings also:
*.exe c:\dos\dosshell.com .. MS-DOS (c)1992 ->>ABRAXAS-5<<–
allFor he is not of this day
…Nor he of this mind

Related Posts

This entry was posted on Saturday, July 1st, 2006 at 2:00 am and is filed under Virus Threats.