| Description:
|
Details
Costin.703
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed. The virus also hooks INT 9, 28h, 2Fh but does not use these hooks in any way, except INT 2Fh. The only intercepted function in INT 2Fh virus handler is virus' "Are you here?" call to detect its resident copy.
The virus contains the text strings:
COSTIN
Hi hacker !
If you change this code your system will crash and burn !
Bye hacker !
Despite on this text the virus does not perform any action if its code it modified. The only one hack may cause system crash: the text "COSTIN" is used as a part of virus code, so if this text is changed the system may halt. |
