Virus.DOS.Sampo

Class Virus
Platform DOS
Description

Technical Details


This is a benign memory resident boot virus. It hooks INT 9 and 13h and
writes itself into the MBR of the hard drive and floppy boot sectors. It intercepts when Alt-Ctrl-Del are clicked on, emulates rebooting and stays memory resident. In
some cases, it drops the “Telefonica.3700” boot virus. On November 30, it
hooks INT 8 also, and displays the following message:


+————————–+
� S A M P O �
� “Project X” �
� Copyright (c)1991 by the �
� SAMPO X-Team. All rights �
� reserved. �
� University Of The East �
� Manila �
+————————–+