nculi.168
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Nculi.1688
It is a dangerous memory resident parasitic virus. It traces INT 13h, 21h, hooks INT 21h and then writes itself to the end of EXE files. The infected files contain the texts at the end of the file:
NCU LI
Sometimes the virus decrypts and displays the message, and then halts the system:
PARITY ERROR ADDR (HEX) = ( 02C14H ) SYSTEM HALTED
Copyright @2006 nculi.168