Selected viruses, spyware, and other threats: sorted alphabetically
This is a partially encrypted, resident COM infector. When an infected file is executed the virus installs itself into memory and takes over the interrupt INT 21h service. It attacks files only at their opening. It avoids programs with name ending with the string “MMA?”. If such a file is executed the virus tests the date. On the third day in a month it writes the following text:
Virus ViNCHuCa V1.0 1993. Creado por MURDOCK. ' Buenos Aires ,Argentina. Su PC tiene Mal de Chagas....jajaja...
On July 3rd the virus does not write the text but it overwrites sectors on the disk C:. The virus contains also other text but that is not displayed:
Saludos para SaTaNiC BRaiN y Patoruzu
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.