| Description:
|
Details
Iwag.4183
It is not a dangerous memory resident polymorphic parasitic virus. It hooks INT 8, 17h, 21h, 2Fh and writes itself to the end of EXE files that are accessed.
By hooking INT 2Fh the virus gets command line when programs are executed. If command line is "iwag" or "iwagstat", the virus displays the messages followed with internal virus data and counters in hexadecimal:
Hello! IWAG Virus, Opole , 1997
Usuniecie virusa z systemu: mov ax,0ABABh , int 21h
Hi Master! Status:
Pierwszy nosiciel:
When TD* files are executed, the virus displays the message and reboots the computer:
Program too big to fit in memory
Depending on its internal counters the virus ejects/inserts CD-ROM drive or prints one of the texts:
To ja-twoja drukarka:
Rzeczy, ktore mi kazesz drukowac sa bez sensu!
Moze wreszcie kupisz mi dobry papier?
Boli mnie glowa :(
Daj mi spokoj!
Depending on the system date the virus also hooks INT 17h (printer) and changes the letters and digits that are printed.
The virus also disables mouse, beeps by PC speaker, displays the text:
Zartowalem :) |
