Viral Rewind: Virus.DOS.Magdzie

preview_player
Показать описание
-----------------------------------------------------------
. Magdzie, a DOS virus developed in Poland (hence its name) hooks interrupt 21h when loaded to infect .EXE executables when they are closed. It won't infect .COMs and it has two methods of attempting to avoid detection: When a file is infected the next time it is accessed it will temporarily disinfect it and it will also seek any files containing the name "chklist" and deleting them regardless of extension.

Payload: Whenever it is May 27th of any year and an infected file is accessed, Magdzie changes the display to video mode with a graphical effect. It locks all input except for Ctrl-Alt-Del.

-------------------------

Рекомендации по теме