 
 |
 |
Byway.A
Aliases: HndV
Size: 2048 bytes
Frequency: 6
Characteristics:
- Infects COM files
- Infects EXE files
- Memory resident
- Full stealth
- Encrypted (code and data)
- Polymorphic
- Plays Music
- Displays message
- Contains encrypted text
Information:
Plays a tune when message is displayed. "TRABAJEMOS TODOS POR VENEZUELA!!!" May trigger on infection if 1996 or later and day of month = month * 2 + 2 (Jan 4, Feb 6, etc.). "By Wai-Chan,Aug94,UCV", "The-HndV". The virus is a linking virus like DIR_II. It creates a hidden, system, read-only file called CHKLIST.MS (padded with 0FFh charactors) in the root directory.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
|
