| Description:
|
Details
Idie.3520
It is not a dangerous memory resident encrypted multipartite virus. It infects the MBR of the hard drive and writes itself to the end of COM and EXE files. The virus infects the MBR when an infected file is executed. It then hooks INT 13h, 1Ch, 21h and on file executing, closing or selecting new directory searches for files in current directory and infects them. The virus also searches executable files in PATH directories and also infects them.
The virus checks file names and does not infect several anti-virus programs: TOOLKIT, FINDVIRU, FV86, FV386, CLEANPAR, CLEANBOO, GUARD, GUARDMEM, VIVERIFY, SCAN, CLEAN, MSAV, VSAFE, IMENSCAN.
Depending on its internal counters the virus displays the messages:
I Never Forget K.Z.M.F Group !!!
I Die For Beautiful Girls !!! |
