| Description:
|
Details
Paraguay.2750
It is a very dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. While installing memory resident the virus also infects the C:COMMAND.COM file. The virus checks file names and does not infect several anti-virus programs. It deletes the anti-virus data files: ANTI-VIR.DAT, CHKLIST.MS, CHKLIST.CPS.
On May 15th the virus changes current directory to C:WINDOWS, deletes all files in there and displays the message:
VIRUS PARAGUAY Ver. 2.0!
The virus also contains the text strings:
Written in Paraguay by Int13h.
Paraguayos, ¡República o Muerte!
Nuestro brío nos dio libertad.
Ni opresores ni siervos alientan
donde reinan unión e igualdad |
