cherry.226
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Cherry.2266
It is a dangerous memory resident encrypted parasitic virus. Being executed it cuts the block of system memory, copies itself to there, hooks INT 8 (timer) and returns the control to the host program. Some time after the virus hooks INT 21h and starts to infect the files that are opened or are accessed by FindFirst DOS function (that function is also called while executing a file). The virus writes itself to the end of .COM and .EXE files. The virus has a bug and in some cases halts the system.
Depending on its counter the virus manifests itself by some video effect (that code is corrupted in my sample of the virus), displays the messages:
Enter your name :all.
_____ ____________ _--STEALTH MUTANT-- Best< >
_ _________+__+____Arkhangelsk'95
_____+________ __++//IV
---+-+-+--+-+ -+ -+ Hi
[Note: contains high ASCII chars that cannot be properly displayed with HTML]
Copyright @2006 cherry.226