







|
 |
Pathogen:SMEG.0_1 - Virus
Details |
Pathogen:SMEG.0_1
Aliases: SMEG Size: 3319 KB Frequency: 2
Characteristics:
- Infects COM files
- Infects EXE files
- Memory resident
- Encrypted (code and data)
- Polymorphic
- Armored / anti-debug
- Uses tunneling
- Displays message
- Contains encrypted text
- Has triggered warhead / payload that causes damage
- Avoids COMMAND.COM
- Avoids AV product(s)
Information:
Message Displayed: "Your hard-disk is being corrupted,
courtesy of PATHOGEN!", and additional text. Displayed when warhead
is triggered. Encrypted Text: "OC-FCSBTIVSFPVSVLCMSLF"
(The first two letters of various antivirus products in reverse order.),
"SMEG v0.1" Warhead: Overwrites random sectors on the
first hard disk. Triggered on Mondays if time is from 17:00 to 17:59
(5:00 pm to 5:59 pm) after internal counter check. Avoids: Avoids
infecting several antivirus programs.
Home
|