| Description:
|
Details
Konkoor.1933
This is a dangerous memory resident parasitic virus. While executing an infected program, this virus searches for the DOS address in the INT 21h handler, then searches for COM files, and hits them. Then the virus hooks INT 21h, and intercepts the FindFirst function (AH=4Eh). During calls to that function, the virus searches and infects COM files and also upon the execution of an infected program. While infecting, the virus writes itself to the beginning of the files, and encrypts the host file. On the 100th infection, or depending on the system date, it erases CMOS and hard drive sectors, and displays the following messages:
Warning !!! KONKOOR Must be destroyed !
Sig: -= The Real Computer Scientists =-
and
KONKOOR V1.60 -- Date: 10 MARCH 1994
While installing, it also displays the message:
Bad command or file name |
