yong-ga-ri.186
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Yong-Ga-Ri.1867
It is a very dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. The virus does infect the files with the names that start with the strings: V3, HWP, TV, TBAV, I, SACN. The last string is not the only one bug in the virus code, there are several other ones.
The virus contains the code that formats the hard drive sectors. That code receives the control after 10th termination of the program with DOS call Terminate AH=0 and AL register 12h or 4Fh.
The virus contains the text strings, the first one is encrypted with quite unusual way:
the virus name is yong-ga-ri ][ 1994.12.23 (C) Sk bbs\yb 1995.1.2
V3HWPTVTBAVISACN
Copyright @2006 yong-ga-ri.186