Bobo.42
Details
Bobo.427
These are memory resident parasitic viruses that hook INT 21h, and write themselves at the end of COM-files. They contain the internal text string: “BOBO”.
“Bobo.427,530″ are not dangerous viruses, infecting executed files. “Bobo.530″ also hooks INT 1Ch, and, depending on the system date, they display the following messages:
“Bobo.427″: Help Croatia NOW !
“Bobo.530″: Happy birthday,Bobo!
“Bobo.1355,1363″ are dangerous encrypted viruses, infecting accessed files. They also hook INT 09h, and, depending on the system date, they display a message or overwrite the MBR of the hard drive with the following strings:
Welcome to Bobo virus !
Written in the town of Zagreb.
Copyright (C) by Boris P., September 1992
Love goes to Ivana H.
I’ll be back all
Related Posts