| Description:
|
Details
Sandy.1376
This is a very dangerous polymorphic parasitic virus. It writes itself to the end of EXE files. Before return to the host program it disinfects the host file.
This is a memory resident virus. First, it searches for EXE files and infects them, then it stays memory resident, hooks INT 21h, disinfects the host program, executes it and then infects it again.
The 200th generation of the virus overwrites the files with a trojan program that displays the messages:
sandy beaches
bridges sinking into the sea
beautiful confusion
you're a fading memory
The virus also contains the text strings:
*.EXE *
Disappearer |
