| Description:
|
Details
Vesna.1614.a
This is a benign non-memory resident parasitic virus. It searches for *.COM, *.EXE, CH*.* and *. files, then writes itself to the end of the file.
This virus checks the file name, and does not infect the files with the names from the string (two bytes per name - VS*.*, DR*.*, and so on):
drwetbmsmvavaiscadutanatsdncvcdnwiioibvi
This is the encrypted virus. It displays the messages:
ιΡία "_Ώ_+α!
Unpress key TURBO to continueall
Format drive c: completed
PRESS RESET TO CONTINUE
Ε"_α "Ώ__ -"_Ρ!
ηρΡί_ ν_+ κϊ"__ δ.
ζ+___, __... _Tσα-... "Ρ_Ρρα_ "_ΏσΡ_ ιΡρΡΡΡσ"_ ο"_ΏίΡ!
VESNA (c) 1994,96 -=* Uni Tula *=- |