Details
Emas.2456

It is not a dangerous memory resident partly encrypted parasitic stealth virus. It hooks INT 22h, returns the control to the host program, waits for termination, then hooks INT 21h and stays memory resident. Then the virus writes itself to the end of COM and EXE files that are executed or opened. Depending on its generation the virus displays the message:
|| 50th Indonesia Emas

The virus also contains the text strings:
(c)05,06-95 Emhaka!** pyuhhall ruwet juga sih….*Rev: OV32.PAS*Com: TP70
>> BL-93115 <<

Related Posts

This entry was posted on Saturday, October 7th, 2006 at 2:00 pm and is filed under Virus Threats.