Virus.DOS.StealthBomber

Class Virus
Platform DOS
Description

Technical Details


It is not a dangerous memory resident encrypted parasitic virus. It traces
and hooks INT 21h – the virus overwrites the code of original INT 21h
handler with 10 bytes of routine that passes the control to the virus body.
On INT 21h calls the virus restores patched code, and then patches it
again. To do that the virus also hooks INT 1, 1Ch, 20h.


The virus and writes itself to the beginning of .COM-files that are
accessed. On 31st od August the virus displays the message:


! I AM THE STEALTH BOMBER !
+————————-+
� I BELONG TO THE NEW �
� GENERATION OF COMPUTER �
�VIRUSES. LIKE THE STEALTH�
� BOMBER, I GO UNDETECTED �
� BY ENEMY RADAR �
+————————-+
!!! DO NOT PANIC !!!
I AM JUST SHOWING OFF HOW
EASY I CAN EVADE YOUR ANTI
VIRUS SYSTEM – I DO NO HARM