RedHack.140
Details
RedHack.1405
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the beginning of COM-files that are executed, opened, or accessed with FindFirst/Next ASCII DOS-functions. The virus scans the files that are executed for the string “Marek Sell”, and reboots the computer if that string is found.
While installing the virus also hooks INT 8 (timer) to prevent debugging, and in some cases reboots computer. The virus contains the text:
(c) Red Hacker, Zielona Góra
Related Posts