| Description:
|
Details
Scitzo Family
These are dangerous memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are executed ot opened. While installing memory resident the viruses infect the C:DOSEDIT.COM file. While infecting a file they compare the file name with the string of the names of anti-virus utilities (three letters per name) and do not infect the files with the names from that string:
TBATBSF-PVSHMSATBCCPAVSAVIRSCACLETOO
Depending on the system timer the viruses append the text string to the files that are opened:
I feel a little scitzoall
The viruses also contain the strings:
C:DOSEDIT.COM
SCITZO - by "RED A", Lund, Sweden 1994
Different versions contain the strings:
"Scitzo.1285,1337": So, you've found this text?
"Scitzo.1264,1329": Fan, här går man... |
