Shanghai_II.407
Details
Shanghai_II.4077
It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. On GetDiskSpace DOS calls (INT 21h AH=36h) virus searches for files and infects them. The virus also looks for files C:\COMMAND.COM, C:\DOS\COMMAND.COM and infects them. The virus checks file names and do not infect files with names that are finished with strings:
K3 PC 50 SM TM EA
FRAG COPY HINA V200 CDEX PLUS PROX CPAV ETUP TTTT IVER
MAIN INIT 0001 OUND S4GW WAR2 RIAN PC43 KE3D ORUN \WPS
On March, June, September and December 13th the virus erases the hard drive sectors and displays the message:
Shanghai No.1 2.0 PRO
Super Virus , designed by Microvirus , 09-13-1996 !
Related Posts