| Description:
|
Details
Gorb.4670
It is not a dangerous encrypted parasitic virus. It hooks INT 1, 3, 5, 8, 9, 13h, 21h and stays memory resident. On DOS calls Get/Set Directory (INT 21h) the virus searches for COM files and writes itself to the end of the file. Depending on its internal counters (INT 8) and video mode the virus manifests itself by a video effect ("shakes" the screen). On disk reading (INT 13h) the virus replaces the string "Micro" with "*AMG*" in data buffer. The virus displays the messages in Russian, contains the texts:
Heat level critical.Shutdown sequence initiatedall
PIDOR@LOXNET.XYZ
AMGorb.ver 2.6 for ALLwe HaTe w95!
+---------------------------------------------------+
|<<< AMGorb 15-16 years old Russia,Troitsk >>>|
+---------------------------------------------------+ |
