sh.206
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
SH.2062
It is a very dangerous memory resident parasitic virus. It hooks INT 8, 9, 13h, 21h and writes itself to the end of COM and EXE files that are executed.
While infecting a file the virus gets the system date, adds random value (0-15 days) to this date and saves the result as a trigger date. On trigger date the virus runs its effects: manifests itself by some video effect, beeps on INT 21h calls, depending on its random counter disables writing to disks via INT 13h (that may corrupt the data on disks), changes the keyboard flags and the data in keyboard buffer.
The virus contains the ID-string:
SH
Copyright @2006 sh.206