| Description:
|
Details
Hammer.2272
This is a very dangerous, memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or opened. The virus has bugs, and corrupts some EXE files while infecting them. When programs MASM.EXE, TASM.EXE, FANT.EXE are executed, the virus overwrites them with a program that displays a message in Russian. It also does not infect several anti-virus programs.
On November 16 and 26, the virus erases disk sectors. The virus contains the following encrypted text strings:
exeCOMcomMASMmasmTASMtasmFANTfantWEBwebAIDSaidsANTIantiSCANscanCOMMcomm*.*
Hammer-96;
OWY + VRN-1600 - BASE;
ANTI-DBE;
2222,213 SLAYERallOWY 1.00... |
