![news](../../nav/left_nav__01.gif)
![products](../../nav/left_nav__02.gif)
![service / support](../../nav/left_nav__03.gif)
![virus info](../../nav/left_nav_roll__04.gif)
![](../../virus/nav/subnav_01.gif)
![](../../virus/nav/subnav_02lit.gif)
![](../../virus/nav/subnav_03.gif)
![](../../virus/nav/subnav_04.gif)
![](../../virus/nav/subnav_05.gif)
![](../../virus/nav/subnav_06.gif)
![](../../virus/nav/subnav_07.gif)
![](../../virus/nav/subnav_08.gif)
![](../../service/nav/line.gif) ![reseller center](../../nav/left_nav__05.gif)
![about / contact](../../nav/left_nav__06.gif)
![downloads](../../nav/left_nav__07.gif)
![search / map](../../nav/left_nav__08.gif)
![try / buy](../../nav/left_nav__09.gif) |
![](../../transparent.gif) |
Byway.A
Aliases: HndV Size: 2048 bytes Frequency: 6
Characteristics:
- Infects COM files
- Infects EXE files
- Memory resident
- Full stealth
- Encrypted (code and data)
- Polymorphic
- Plays Music
- Displays message
- Contains encrypted text
Information:
Plays a tune when message is displayed. "TRABAJEMOS TODOS POR VENEZUELA!!!" May trigger on infection if 1996 or later and day of month = month * 2 + 2 (Jan 4, Feb 6, etc.). "By Wai-Chan,Aug94,UCV", "The-HndV". The virus is a linking virus like DIR_II. It creates a hidden, system, read-only file called CHKLIST.MS (padded with 0FFh charactors) in the root directory.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
|