| Description:
|
Details
Kuarahy.4608
It is a dangerous memory resident encrypted multipartite virus. The virus infects the MBR of the hard drive, boot sector of 1.4M floppy disks, writes itself to the end of COM, EXE, SYS files, creates companion COM files for BAT files, adds droppers to ARJ archives. The virus also affects object modules (OBJ files), but fails and corrupts them. The virus has bugs and often halts the system while installing memory resident or while infecting files and disks.
The virus does not infect the COMMAND.COM and anti-virus programs: COMMAND, SCAN, NAV, F-PROT, GUARD, FINDVIRU, TOOLKIT, AVP. It also deletes the anti-virus data files: ANTI-VIR.DAT, CHKLIST.MS, CHKLIST.CPS, AVP.CRC.
On 31th of month the virus displays the message:
[KUARAHY by Int13h] - Written in the Republic of Paraguay - Please register!
The virus also contains the text strings:
[KUARAHY] Koa ha'e Int13h/iKx rembiapokué hina! :)
HOMO ¿SAPIENS? HAHAHA!
DOS Infection Device
Learn some guaraní words!:Kuarahy=Sun Añá=Devil Kuñá=Woman
execomsysobjbatovlarj
E-mail me: Int13h@antisocial.com
PARAGUAY WORLD CUP '98
Rohaihú Paraguay! |
