| Description:
|
Details
Olivia.2374
This is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are accessed. Duplicate infection is possible. In some cases, the virus writes the "jump-to-virus" instruction to the middle of COM files. The virus checks the names and do not infect the following files:
4DOS, COMMAND, VT, WIN, EMM386, SSCAN, TB, CHKDSK
The virus uses anti-debugging tricks and disables several anti-virus resident monitors. On December 23rd it launches its trigger routine. This routine checks the CD-ROM installed and displays the following message:
please put a love music CD into your CD-ROM
and pass any key to continueall
Then it summons several system CD-ROM access functions (plays CD-ROM?). Then the virus displays some text (possibly in Chinese) including the text:
By André '97/1/30
The virus then erases the CMOS and hard drive sectors.
It also contains the text strings:
Olivia Virus 7.5 By André
(C)TRAN TECH United Groups |
