| Description:
|
Details
SMEG.Queeg.a
This is a dangerous memory-resident parasitic polymorphic virus. It was written by using a SMEG polymorphic engine. It traces and hooks INT 21h, and write itself to the end of COM and EXE files that are executed or opened. It also hooks INT 13h and 20h. While infecting a file, it checks the file name, and does not infects the files with names CO*.*, F-*.*, SC*.*, TB*.*, VI*.*, FS*.*, VP*.*, VS*.*, CL*.*, SM*.*, FL*.*. On Sundays, depending on the system time and its internal counters, the virus erases the CMOS and the disk sectors, and then displays the following message:
+---------------------------+
ƒ -" QUEEG "- ƒ
ƒ ~~~~~ ƒ
ƒ (C) The Black Baron 1994 ƒ
ƒ ƒ
ƒ Featuring: SMEG v0.2 ƒ
ƒ ƒ
ƒ Better than lifeall.. ƒ
+---------------------------+
It also contains the following text strings:
EXECOM /:.<>+=;,"[]|OC-FCSBTIVSFPVSVLCMSLF
SMEG v0.2 |
