







|
 |
Urkel - Virus
Details |
Urkel
Aliases: Nwait Size: 512 KB Frequency:
6
Characteristics:
- Infects hard disk boot record
- Infects diskette boot record
- Memory resident
- Full stealth
- Contains clear text string or message
- Makes MBR inaccessible
Information:
Text String: "Urkel" Notes: The virus
overwrites the partition table in the MBR and stores the original MBR
encrypted. The infected drive will be invisible to DOS if the system is
booted from an uninfected floppy. Using fdisk /mbr will render the drive
unbootable.
Home
|