| Description:
|
Details
Konkoor.3072
This is a very dangerous memory resident parasitic virus. It hooks INT 21h, intercepts the DOS function ChangeDir (AH=3Bh), and when that function is executed, the virus searches for EXE-files, and writes itself to the middle of the file. The virus has a memory allocation error, and may halt the system while infecting the files. The virus checks the file names for the text string, and does not infect these files:
SCAN
CLEAN
VSHIELD
FINDVIRU
FV386
FV86
CLEANBOO
VIVERIFY
CERT
MSAV
GUARD
TDUMP
Under DOS 4.x or earlier, the virus displays the following message, and returns to DOS:
Incorrect DOS version
On the 13th of any month, the virus overwrites the hard-drive MBR with a trigger program. While booting from this MBR, the program displays the following message:
Konkoor v2.0 - Crack Master - Last Days Of 1995
What Was The First Iranian Virus ?
1. Abbas ??? (Was it Iranian ?)
2. Roohi
3. TDD - Konkoor v1.0
4. None Of Above
-= This is The Last One If You Solve Copyright Problem =-
Choose the correct answerall
waits for key '3', and continues booting. |
