| Description:
|
Details
Dream.2000
These are not dangerous memory resident parasitic polymorphic viruses. They hook INT 13h, 21h and write themselves to the end of .COM- and .EXE-files that are accessed with INT 21h function 12h (FindNext FCB). The viruses contain the internal string "SCCLF-VIMSVSWI", and do not infect the files with the names from that string (two bytes per name): SC*.*, CL*.*, F-*.*, VI*.*, MS*.*, VS*.*, WI*.*. Depending on the internal counter the viruses return the error flag on INT 13h (Disk Services) calls. The viruses also contain the internal string:
[ Dream Man / Doctor Revenge ] 12-02-94 Italy |
