Virus.DOS.Onkogen

Detect Date 01/11/2002
Class Virus
Platform DOS
Description

This is a memory resident harmless virus which infects COM and EXE files by standard manner. It infects the memory only if the INT 13h vector points to memory area with address lesser than address of the first MCB. The virus changes the first 5 bytes into INT 13h, 21h, 22h handlers to instruction FAR JMP to virus body. It contains the string “CHEEBA Makes Ya High Harmlessly F**K THE LAMERS”. It also contains the area of a code which is decrypted and executed only while some file is opened. The name of this file is the key of decryption.