Details
Shanghai.848

It is a dangerous memory resident parasitic virus. It hooks INT 21h and intercepts the DOS functions 36h, 3Bh. On these calls the virus searches for .COM files and writes itself to the end of the file. On December, 20th it displays the message:
ShangHai Railway Institute
[high ASCII chars, not properly displayable]

and erases the hard drive sectors. It also contains the text string:
*.COM

Related Posts

This entry was posted on Tuesday, January 29th, 2008 at 6:50 am and is filed under Virus Threats.