| Description:
|
Details
HLLP.Tomsk.8506
This is a relatively harmless, non-memory resident parasitic virus written in Pascal. It searches for EXE files in all directories on the current drive, then writes itself to the beginning of the file. To return control to the host program, the virus temporarily disinfects and executes the host file.
The virus also checks write-protect for the current drive. If the current drive is write-protected, the virus displays the following message:
Runtime Error: Disk fool or write protect
and terminates.
On October 20th, the virus displays a message in Russian and waits for a keystroke.
If the command line contains the /? argument, the virus displays its "About" message:
γ====================================-
Virus 3.14Zdec V 2.0
------------------------------------
Target *.EXE
Stealth No
TSR No
Attac speed Slow
Danger 0
Effects Yes
Length KingSize=
Language Turbo Pascal
OS Dos, Windows
Russia, Tomsk, 20/11/1999
L====================================- |
