Details
MtE.Coffeeshop

This is a relatively harmless memory resident virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed or renamed. On Friday ,while running an infected file, the virus, with a probability of 1/256, displays the message “LEGALIZE CANNABIS” and the picture of a green leaf.
It also contains the text strings:
SCCLVSNEHTTBVIRAFEMTBR
Amsterdam = COFFEESHOP!
MK1992

There is an encrypted variant of this virus named “Coffeeshop.1568″. It displays the message “LEGALIZE CANNABIS” and contains the strings:
CoffeeShop
COSCCLVSNEHTTBVIRAFEMTBR
MK ’92

Related Posts

This entry was posted on Saturday, September 29th, 2007 at 3:50 am and is filed under Virus Threats.