| Description:
|
Details
FSMM.2971
It is a dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself into the middle of EXE-files that are executed or opened. While infecting the virus reads 2971 bytes from top of EXE module (that data follow EXE header), encrypts it and saves to the file end. Then the virus encrypts itself with polymorphic engine, and writes into that cave. The virus can destroy the files while infecting them, being executed these files halt the system.
The virus checks the file names, and does not infect the files: AI*.*, AD*.*, WE*.*.
The virus contains the internal text string:
Fire/Space version 1.0, from ì"óú"p"ñ, with FSMM v1.0
(Fire/Space Mutant Machine) |
