Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Žaneta.1769

This is a memory resident, stealth, encrypted COM infector with effective code length of 1769 bytes. The virus attacks suitable programs not only as they are opened but also when directories are searched through and for that reason the infection is extraordinary fast. When attacking files the virus considers only the extension and that may sometimes cause improper function of the program. Upon starting the program CHKDISK.EXE it turns off the stealth. Upon its installation into memory the virus tests the system date. On November 27th it writes text on the screen, overwrites a part of CMOS memory and a part of the hard disk C. In addition to common functions its stealth deals also with finding out and setting the interrupt INT 21h. The text written on November 27th is as follows:

Všechno nejlepší Žaneto
(Meaning: Best wishes to Žaneta)

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.