| Description:
|
Details
Ocean.2571
It is not a dangerous memory resident polymorphic parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus does not infect files witch names begins with letters:
WIN, TB, COMMAND, NOD, AV
On start from infected file it checks the current time. If current hours number is equal to current minute, the virus decrypts and displays the message:
This is an Atlantic Ocean I Virus (C) 1997 by #13
If quantity of current second below than 10 it also displays the message:
Listen to Radio RAGTIME 106.6 FM! [and use MSDOS 95 to keep #13 alive]
The virus also contains the encrypted text strings:
Dedicated to the one I love
heuristics :-(, string check :-) This is [Atlantic Ocean I] by #13 |