| Description:
|
Details
Guinness.823
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the begin of COM and EXE files that are accessed. When an infected file is executed and the virus control, it installs its resident part, then disinfects the host file and returns control to it. When the host file exits, the virus reinfects it.
In one case of ten the virus displays one of messages:
Lovely day for a Guinness!
Guinness is good for you!
mandragore loves Guinness!
The virus also contains the text strings:
[Guinness] |
