It is a very dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .EXE files that are accessed. The virus has a serious bug - while installing memory resident it decreases the ram size (the word at the address 0000:0413) and copies itself to there, but does not correct the MCB list. That may cause system halt.
The virus contains partly encrypted texts:
+--------------+
| LD '93 |
+--------------+
(C) May 4th 1993
By Luri Darmawan
Semarang - 50112
-- Indonesia. --
_ _
_ /_
_¦
_ __ _
____
File is corrupt with illegal code in this software all..
You haven't changed my data , You will dead !!!
LD - 93
On May 4th it overwrites the MBR of the hard drive with a program that on booting displays some of these strings. Then it displays the same messages and prints them.
