| Description:
|
Details
Marine.5000
This is a very dangerous memory resident encrypted stealth parasitic virus that hooks INT 21h and 25h, and writes itself to the beginning of COM and EXE files that are accessed. While infecting, the virus encrypts the original beginning of the file.
On June 5th and 21st, the virus disables the FindFirst DOS call while searching for files on floppy disks. As a result, DOS shows nothing on them. In June on Saturdays, the virus overwrites .PAS and .CPP files with the text:
There is nothing in the world that I ever wanted more than to never feel
breaking apart all my programs again.
In June the virus displays the text "BCE HA MOPE !!!" ("LET'S GO TO SEA !!!") and manifests itself as a video effect (displays images of the sea, sun, a beach and moving yacht). When this effect is run, the virus encrypts the disk sectors.
The virus also contains the text strings:
COMMAND.COM
.COM.EXE.PAS.CPP
I`m the Ghost V1.2. Check. Your move, Mr.AntiVirus ! My author`s
coordinates are:Sun system, Earth, Europe, Russiall 2B continued... The
more we know,the less we show. |
