Fandom

Malware Wiki

Espacio

1,327pages on
this wiki
Add New Page
Comments5 Share

Virus.DOS.Espacio is a memory resident parasitic virus on DOS. The virus forces the user to play an old Pac-Man game.

BehaviorEdit

When the virus is loaded into memory, it hooks INT 1Ch and 21h and write themselves to the end of the executables that are run. These viruses contain the data area that is the code of the old PC-Booter game PAC-MAN (although this version is hacked), and this code is packed by the PKLITE utility.

PayloadEdit

The virus sets a timer starting from 25 minutes, after the timer counts up the virus unpacks the game and launches it. Upon execution of this game the viruses hook onto INT 09h. By pressing CTRL-ALT-DEL, the user will restore control to the interrupted program.

Whenever the player starts or dies, near the box where ghosts spawn a line reading "F*CK!" (uncensored) is printed.

After exiting the game the virus sets the timer to a smaller value by halving it, which means that the game would appear again in a shorter time. If the user attempts to exit as the game appears frequently, the system may unable to handle so much inputs and cause an internal stack overflow and the section would be halted.

VariantsEdit

This family has 5 variants in total:

  • Virus.DOS.Espacio.8444
  • Virus.DOS.Espacio.8458
  • Virus.DOS.Espacio.8486
  • Virus.DOS.Espacio.8491
  • Virus.DOS.Espacio.8498

Other detailsEdit

The code of the game contains the text strings:

Recorre la Habana
Presione la tecla ESPACIO para comenzer
en busca de nuevas aventuras
Copyright: NASA-MAN 1993
Oprima ESPACIO para seguir PAC-MANeando ...
Joystick button FOR JOYSTICK PUNT.

Known Fruits Edit

  • Level 1: Candy Cane
  • Level 2: Watermelon
  • Level 3: Banana

VideosEdit

Virus.DOS05:23

Virus.DOS.Espacio Espacio DOS Virus

Espacio virus review by Alles Sandro

Virus.DOS12:28

Virus.DOS.Espacio

Espacio virus review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.