|
Nuker.Syndrome.148 Viruses Information
| Name: |
Nuker.Syndrome.148 |
| Category: |
Viruses |
| Description:
|
Details
Nuker.Syndrome.1485
On 1st of any month it hooks INT 8,9, and slows down the computer (loop on each INT 8 call). When Alt-Ctrl-Del keys are pressed, the virus displays:
Your PC is working VERY SLOWLY todayall What about a good PENTIUM Processor ?
Before return to the host program the virus checks the system timer, and depending on its value displays the messages, waits for keystroke, compares that keystroke with random selected value, then the virus either returns to the host program, or erases the disk sectors:
+-DANGER!+----------------------------------------------+
You are infected by ExCESS Virus (c) 1995 by The Nuker
--------------------------------------------------------
I have destroyed your FATs but I have only ONE copy in
my data area. IF YOU REBOOT NOW ALL DATA WILL BE LOST.
If this isn`t enough, I have altered your Master Boot
Record with a formatting routine in order to low-level
format the primary Hard Disk when executed. If you are
so dude and you don`t believe me, reboot now and look
at your hard disk light spinning... If you don`t want
to loose all your data then try to guess a number from
0 to 9 and pray for your answer to be correct, else...
+--------------------------------------------------------+
You have 3 tries to guess the correct number!!!
Enter the number:
You fucking SHIT!!! You guessed the right number!!!
You are safe this time but next will come very soon
and you will not be so lucky!!!
Sorry, you didn`t entered the correct number!
Retry, and hope you lucky!!!
Hum... you are lucky this time...
Please wait while reconstructing disk structure...
I WAS JOKING! Your Hard Disk has been fucked up!!!
Thank you for choosing another product of...
TTThTeT TNTuTkTeTrT
It also hooks INT 11h to check the already loaded TSR copy. On 1st of any month and depending on the system timer that virus erases all files in the current directory. The virus checks the file names, and does not infect the files with the names that begins with symbols:
VA TB F- AV SC CL -D -U MS MW NA
The virus contains the text strings:
[Syndrome virus (c) 1996 by The Nuker]
VATBF-AVSCCL-D-UMSMWNA |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Yukom Famil
Worm.Win32.Kibuv.
Easy.200.
I-Worm.Hadr
Macro.Word.Chea
Luky.108
OhOh.79
EVC.16
Win32.RainSong.389
BAT.CopyTo
|
