Kusumah.396
Details
Kusumah.3968
This is relatively harmless memory resident encrypted parasitic virus. It hooks INT 8 and 21h, and writes itself to the end of COM and EXE files that are accessed. The virus searches for “COMMAND.COM” files, and infects them upon each accessing to executable files.
Some time after installation, the virus displays the following message:
Moslem Power Never End.(P) KuSuMaH’S ElEkTrO UnJaNi
On Fridays virus creates “GERILYA.COM” file and writes the program there. While executing, this program displays:
Gerilyawan Elektro UNJANI Bdg-Cmh. (C) KuSuMaH’S.
The virus sets new volume labels on floppy disks:
KUSUMAH S
The virus also contains the text string:
KUSUMAH S ) UNJANI, Bandung
Related Posts