| Description:
|
Details
Civil.6656.a
It is a very dangerous and memory resident virus. It infects EXE-files and MBR of the hard disk in a standard way. The MBR is hit when an infected file is started. The virus saves its part and the MBR sector at the location 0/0/2 (track/head/sector).
The virus infects memory while booting from an infected disk. After that it infects files only. The virus hooks INT 8, 9, 11h, 17h, 21h and manifests by many manners: it formats the disks, types the texts in Russian and in English (rude also), prints some strings, play a music. It contains the strings:
CIVIL DEFENSE VIRUS VER 1.1
Formating disc c: complete.
Format another ? (y/n)
Hard disk 1 formated. All your data lost.
How are you feel now ?
Press any key |
