Moloch
Aliases:
Size: 512 bytes
Frequency: 1
Characteristics:
- Infects MBR
- Infects diskette boot record
- Memory resident
- Encrypted (code and data)
- Polymorphic
- Contains encrypted text
- Modifies CMOS
- Disables AV product(s)
Information:
"OH-MY-GOD! Moloch (tm) is here! Moloch is a trademark of SquiBoyz" Modifies CMOS so system will boot from hard drive before floppy. Bypasses antivirus behavior blockers by using direct IO to infect.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
|
