| Description:
|
Details
BG.2135
This is a benign memory resident encrypted parasitic virus. It hooks INT 8 and 21h. Upon DOS calls, CreateDir, ChangeDir, Close, Execute, Get/Set FileAttributes, and Rename, the virus searches for COM and EXE files and writes itself to the end of the file.
When the F12 key is pressed, if the NumLock, CapsLock and ScrollLock keys are on, the virus displays a message in Russian. The virus contains the text strings:
=> Virus Ver. 2.0 <=
*.COM *.EXE |
