| Description:
|
Details
Mururoa.2529
This is a relatively harmless, memory resident encrypted parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. When an infected file is opened, the virus disinfects it. The virus doesn't infect several anti-virus utilities (see the string below).
On the 4th of any month, it displays the following message:
+-------------------------------------------------+
| I have one mesage to all people on earth : |
| Stop all French nuclear testing in the PACIFIC |
| Dont forgot :Comon people dont like nuc. tests! |
| This is is a MURUROA 1.386 by Blesk |
| PLUTONIUM IS BETTER IN POWER-PLANT !!!! |
| My greet to VYVOJAR,SVL,METABOLIS and all IRC. |
+-------------------------------------------------+
The virus also contains the text string:
.exe .com avg fv386 turbo fv86 guard toolkit scan virlab vir asta vc sswap debug td stacker alik rex msav cpav nod clean f-pro tbav tbdriver tbclean tbscan avast nav vshie dizz command vsafe |
