| Description:
|
Details
Predator.1035
It's a harmless memory resident multipartite polymorphic virus. On execution of infected file the virus traces the interrupt vectors 13h, 21h and infects MBR of hard drive. Then it hooks INT 21h and writes itself at the end of COM- and EXE-files are accessed. It hooks INT 13h also and infects boot-sectors of floppies. On loading from infected sector it hooks INT 13h and waits for DOS loading, then it hooks INT 21h and starts to infection. This virus contains several encrypted text strings:
Predator virus #2 (c) 1993 Priest - Phalcon/Skism
THE PREDATOR
TORPNACSAELCFASVVAPC.VANOCED
The last string contains the part of the file names (written backward) which are not infected by this virus: *PROT, SCAN, CLEA*, VSAF, CPAV, NAV, DECO. |
