| Description:
|
Details
Raadioga.1000.a
It is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h, on DOS calls SetDTA, SetDrive, FindFirst, ChangeDir (these calls are performed when programs are executed, current disk or directory are changed) the virus searches for .EXE files in the current directory and writes itself to the end of the file. The virus does not infect several anti-virus programs (including AVP) according to the string "F-SCTBAVVIVS" - two bytes per name: F-*, SC*, TB*, AV*, VI*, VS*.
On March 10th the virus corrupts the CMOS and displays the message:
HAIGUSTE RAVI KONTROLLITUD VAIKUSE PIMEDUSE JA RAADIOGA
The virus also contains the text strings:
NiL
*.EXE |
