|
|
Sochi.70 Viruses Information
| Name: |
Sochi.70 |
| Category: |
Viruses |
| Description:
|
Details
Sochi.703
It is a very dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end and to beginning of the file. The virus writes a part of its code (395 bytes) to the beginning, and the rest of the virus and the original file beginning to the end of the file.
The virus overwrites the MBR of the hard drive with a trojan program that contains the counter, and decreases that counter on each booting. Starting from 40th booting from the hard drive the trojan displays the message:
Enter password:
and contains bootstrap process. While 60th booting the trojan erases the MBR of the hard drive. That trojan also contains the standard bootstrap code, loads and executes the active boot sector of the hard drive. As the standard bootstrap loader the trojan contains and displays the text strings:
Invalid partition table
Error loading operating system
Missing operating system
The virus also contains the text:
*Ks&I* Sochi Olympic Games 2002 |
Top Viruses Visited Pages:
Invader. - 241 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 67 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
CPXK Famil
Valentine.233
FileHider.105
DSU.142
Worm.Win32.Padobot.ge
Zohra.416
Macro.Word.Caffein
Mgn.2048.
Trojan.Win32.DiskAdmi
Technomaniac.77
|
|
