x-ray.205
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
X-Ray.2050
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 11h, 21h and writes itself to the end of COM and EXE files that are accessed. The virus checks the accessed file name, and if it begins with any of the string listed below, the virus does not infect that file and temporary encrypts its TSR code to prevent detection by anti-virus scanners and utilities. The list of names looks as follows:
TBAV TBSC TBCL TBME TBFI TBDR TBDI TBGE TBSE TBKE TBLO TBUT F-PR AVP.
SCAN CLEA ITAV PV.E DEBU TD.E VPRO VPRU PCSC THDP PROS MSAV NAV. CPAV
AVPV BAIT TEST GOAT VIRS CHEC VDS. ORGA XRAY -D.C -U.C
While infecting a file the virus also deletes the anti-virus data files:
ANTI-VIR.DAT
CHKLIST.MS
Depending on the system date and time the virus displays the message:
+---------------------------------+
The X-Ray virus sends greetings
to everyone who is reading this
textall No panic, I'm harmless!
+---------------------------------+
Copyright @2006 x-ray.205