| Description:
|
Details
Anarchy.9594
This is a benign polymorphic memory resident parasitic virus. It hooks INT 9, 21h, 28h and writes itself at the end of COM (except COMMAND.COM) and EXE files that are executed or closed. The header of the infected COM files contains the text strings:
JAN FAKOVSKIJ,USSR,1994
All infected files contain the not encrypted ID-string at their ends:
UNFORGIVON
On 48th infection the virus displays one of the messages (two of them are in Russian) and halts the system:
DIS IS DI END,
BEAUTIFUL FRIENDall
DIS IS DI END,
MY ONLY FRIEND-
DI END.
IT HURTS TO SET U FREE,
BUT U'LL NEVOR FOLLOW ME.
DI END-
OF LAUGHTER & SOFT LIES,
DI END OF NIGHTS...WE TIRED TO DIE...
DIS IS DI END
I WANNA DESTROY DA PASSORS-BY
'CAUSE I
WANNA BE,-
YEAH,- ANARCHY
On pressing [Alt]-[GreyMinus] the virus calls the trigger routine that emulates the file shell a'la Norton Commander and allows to copy, move, delete the files and subdirectories and so on. That routine displays the menu like this one:
3584000 |
