| Description:
|
Details
Tremor
It is not a dangerous memory resident parasitic stealth static sized polymorphic virus, infected files increase in size by 4000 bytes. It hooks INT 1, 15h, 21h and stays memory resident. If there are enough Upper Memory, this virus copies itself into UMB. If not, it corrects MCB list of the conventional memory and copies itself at the top of the memory. While installing memory resident the virus traces the vectors and checks the memory for some code and functions to defeat memory resident anti-virus software.
By hooking INT 1 it traces the interrupt vectors. The hooking INT 15h is used for trigger routine, under some conditions the virus displays:
-=> T?R?E?M?O?R was done by NEUROBASHER / May-June'92, Germany <=-
-MOMENT-OF-TERROR-IS-THE-BEGINNING-OF-LIFE-
Sometimes it 'shakes' the screen. INT 21h hooking is used for stealth routines and file infection. This virus writes itself to the end of COM and EXE files that are accessed. |
