Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Sampo

Sampo is a stealth boot virus. It reserves 6 Kb at the top of memory. It hooks the interrupt INT 9. When combination of keys CTRL-ALT-DEL (warm reboot) is used the virus simulates booting. By means of that it tries to stay active in memory and continue in disguising alternations in boot sectors. On November 30th in installs the service INT 8 which is activated after two hours and then it writes the following text in a doubled frame:

SAMPO "Project X" Copyright (c) 1991 by the SAMPO X-Team. All rigths reserved. University Of The East Manila

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.