| Description:
|
Details
Blacksun
It is a very dangerous memory resident encrypted boot virus. It hooks INT 13h and writes itself to the MBR of the hard drive and boot sectors on floppy disks that are the accessed. The virus contains an error: as a key value in decryption loop it uses error code that is returned on GetDiskParameters call. Different BIOS-es may return different values in error code, and as a result the virus halts on these PCs (with AMI BIOS, for example).
If the month number is equal with day number and current time is 0 seconds, the virus erases the CMOS memory. The virus contains the text:
BlackSun |
