Badboy.Riot.104
Details
Badboy.Riot.1049
This is a harmless memory resident parasitic encrypted virus. It hooks INT 21h and writes itself at the beginning of COM files are executed. This virus uses System File Table on infection. It is divided on 9 blocks of code and data (installation block, data block, INT 21h block e.t.c.). When the virus installs itself into the memory, 8 of these 9 blocks can be rearranged in any order depending on the system timer. On infection the virus saves encrypted image of its TSR copy into the file, so orders of code blocks in two infected file can be different.
The virus contains the text:
Senseless Destructionall Protecting what we are
joining together to take on the world..
METAL MiLiTiA [iMM0RTAL Ri0T]
Related Posts