| Description:
|
Details
Demolited.1585
It's a very dangerous memory resident encrypted virus which hooks INT 1Ch, 21h and infects by a standard manner .COM-files, except COMMAND.COM, that are opened or executed. On 17th of every month it overwrites the MBR by a small program which types "DEMOLITION is here!". It overwrites the files by the text:
Sorry, this file was destroyed by DEMOLITION! from THE YODAS CREW Italy
It also contains the text "DEMOLITED COMMAND.COM". Sometimes it manifests itself by the black caterpillar moving on the screen. |
