Virus.Multi.GoldBug

Class Virus
Platform Multi
Description

Technical Details


GoldBug is a not dangerous memory resident multipartite stealth virus.
This virus will only replicate on ‘286 computers and higher running DOS 5.0
or higher, and only if the user stashes the operating system in UMB (Upper
Memory Blocks).


The virus copies itself in High Memory Area, hooks INT 13h, 21h and infects
MBR of hard drive, boot sectors of 1.2M floppies and EXE-files are
accessed. On infection of the files this virus uses companion and
polymorphic technology.


This virus contains the internal text strings:


CHKLIST????
1O7=0SLMTA

The virus outputs the last string (backward) to the modem port: “ATMLS0=7O1”.