| Description:
|
Details
Spb.2061
This is a very dangerous, memory resident encrypted parasitic virus. It hooks INT 21h and 2Fh, and writes itself to the end of EXE files that are accessed. The virus searches and infects EXE files upon change-directory function call. It doesn't infect the following anti-virues:
DRWEB, ADINF, AVP, AVPLITE, ANTI, SCAN
On April 6, June 5, September 8, November 1 and January 10, the virus erases sectors on the first hard drive. It displays the following message:
Hello, guys! This is a test message. I think, you see it, using Norton
DiskEditor. That means you have lost all data on your 1st hard disk. It's
cool!!!! If not, this's suxx. Are you now debugging the program, infected
by this, to make an antivirus ? mmm..
The virus also contains the following text strings:
By VirLab, Jan 2000. SPb, Russia.
Loading program, please waitall |
