| Description:
|
Details
Playgame.2000
This is a benign memory-resident multipartite virus. While executing an infected file, the virus writes itself to the hard drive MBR, and returns control to the host program. The virus stays memory resident upon loading from an infected disk only. The virus hooks INT 13h and 21h, and writes itself to the end of accessed EXE files.
The virus contains the string "CO4DSCCLVSNEHTTBVIF-FIGIIMRAFEMTBR", and does not infect files if the first two bytes of the file name consist of two characters from this string (CO*.*, 4D*.*, SC*.*, all). This virus also contains the text string:
[ MK / TridenT ]
In December, this virus starts a game, and, while playing the game, it displays the following message:
HAPPY VIRUS Time to play a game (Use shift keys)
You reached level Play again? |
