











 



 |
 |
Byway.B
Aliases: HndV Size: 2048 bytes Frequency: 1
Characteristics:
- Infects COM files
- Infects EXE files
- Memory resident
- Full stealth
- Encrypted (code and data)
- Polymorphic
- Plays Music
- Displays message
- Contains clear text string or message
Information:
Plays a tune when message is displayed. "TRABAJEMOS TODOS POR VENEZUELA!!!" May trigger on infection if 1996 or later and day of month = month * 2 + 2 (Jan 4, Feb 6, etc.). "By W.Chan,Aug94,UCV", "The-HndV". The virus is a linking virus like DIR_II. It creates a hidden, system, read-only file called CHKLIST.MS (padded with 0FFh charactors) in the root directory.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
|