Prevent Online Threats

BG.134

Details
BG.1348

This is a benign memory resident encrypted parasitic virus. It hooks INT 8 and 21h, and writes itself to the end of EXE files that are executed or renamed. In April, the virus returns wrong data upon GetTime DOS call. In January, it displays the following message:
Seems so simple now
Now that the sky is clear
Maybe the road was tough
But at last we’re here
I’ve nothing to hide from you
Nothing to explain
Just this vision of broken wing
And the raven cries in painall
Enter the name of song:
The virus then waits for some input, calculates its CRC and halts the computer if CRC is wrong.
Depending on its internal counters, the virus drops letters on the screen and runs itself with a video effect.

Related Posts

  • No related posts
  • Leave a Reply

    BG.134

    Details
    BG.1348
    This is not dangerous memory resident encrypted parasitic virus. It hooks INT 8, 21h and writes itself to the end of EXE files that are executed or renamed. In April the virus returns wrong data on GetTime DOS call. In January it displays the following message:
    Seems so simple now
    Now that the sky is clear
    Maybe the road was tough
    But at last we’re here
    I’ve nothing to hide from you
    Nothing to explain
    Just this vision of broken wing
    And the raven cries in painall
    Enter the name of song:
    The virus then waits for some input, calculates its CRC and halts the computer if CRC is wrong.
    Depending on its internal counters the virus drops the letters on the screen and manifests itself by a video effect.

    Related Posts

  • No related posts
  • Leave a Reply


    Spyware Removal Spyware Protection Tools