| Description:
|
Details
Moran.2720
This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 1, 9, 1Ch, 21h, 28h and writes itself to the end of COM and EXE files that are executed. On loading for debugging (INT 21h, AX=4B01h) the virus erases all EXE files in the current directory. Under debugger the virus also display the message and halt the computer:
------------- moran----------------
It also erases the CMOS and displays:
------------welcome to the world-----------
On June 8th it erases disk sectors and plays a tune. On Alt-Ctrl-Break it displays:
I LOVE YOU! |
