Details
Godzina_II.1305

It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or when file attributes are read/modified. At the end of infected files there is the ID-word “SH”. Depending on the system time the virus displays the message:
+—————————-+
| Shaula 2.0 Godzina DUCHOW |
| Crtd by **** Piotrkow Tryb |
+—————————-+

Related Posts

This entry was posted on Tuesday, October 31st, 2006 at 4:00 pm and is filed under Virus Threats.