Details
GoldBug

GoldBug is a not dangerous memory resident multipartite stealth virus. This virus will only replicate on ‘286 computers and higher running DOS 5.0 or higher, and only if the user stashes the operating system in UMB (Upper Memory Blocks).
The virus copies itself in High Memory Area, hooks INT 13h, 21h and infects MBR of hard drive, boot sectors of 1.2M floppies and EXE-files are accessed. On infection of the files this virus uses companion and polymorphic technology.
This virus contains the internal text strings:
CHKLIST????
1O7=0SLMTA

The virus outputs the last string (backward) to the modem port: “ATMLS0=7O1″.

Related Posts

This entry was posted on Tuesday, October 31st, 2006 at 8:00 pm and is filed under Virus Threats.