Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Urkel

This is an encrypted boot virus. When an attempt is made to load the system from an infected diskette the virus attacks the hard disk´s MBR and installs itself into memory. Then it redirects the interrupt INT 13h service to its code. If, when writing sectors, the virus finds out that the statement on the system time clock equals zero it writes the word “Urkel” on the screen. The original contents of the diskette´s boot sector or of the hard disk´s MBR are stored in encrypted form. Each attempt to read them is redirected by the virus to the original contents which is in such case decoded.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.