Details
YouAreIll.1186

It is a very dangerous memory resident parasitic virus. It hooks INT 13h, 21h, 28h and writes itself to the end of EXE files (except SCAN*.* and AIDS*.*) that are executed. By hooking INT 28h the virus searches for EXE files, and infects them. While opening .PAS files the virus deletes them. The virus contains the text strings:
*.EXE
.PAS
AIDS SCAN

and “You are ill !” in Russian.

Related Posts

This entry was posted on Saturday, September 13th, 2008 at 3:50 am and is filed under Virus Threats.