| Description:
|
Details
Prowler.1543
These are relatively harmless, memory resident encrypted multipartite viruses. They infect the MBR of the hard drive and write themselves to the end of COM (except COMMAND.COM) and EXE files that are executed, and the viruses hook INT 21h to do that. The MBR is infected when an infected file is executed. To install the TSR copy while loading from an infected MBR, the viruses also temporarily hook INT 1Ch (timer).
Upon loading from infected MBR on 13th of any month, the viruses manifest themselves as a sound and video effect and display the following message:
I am +he Midnigh+ Pr0wler, s0n 0f +he m00n
And I am the child 0f +he ?? genera+i0nall.
where ?? is virus generation. |
