Fandom

Malware Wiki

Murderer

1,345pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.Murderer.3670 is a dangerous memory resident parasitic virus on DOS.

Behavior

When the virus is loaded into memory, it hooks INT 5, 8, 13h, 17h, 21h to infect any executable, on DOS calls CloseFile it also searches for them to infect. The virus writes itself to the beginning of DOS executable files, while that of EXE files are infected by companion manner.

Payload

On July 3rd the virus hooks INT 8, after an amount of time it displays an ASCII cake and a message, plus playing a tune of Happy Birthday:

Today is my birthday, and I'm very tired, so let me take a short rest !!
** Please turn the power off. **

And hangs the system.

When the computer is rebooted, the hard drive is formatted.

Other details

The virus contains the internal text strings:

<<<  MURDERER  Version  1.44  >>>
IBMBIO.COM
IBMDOS.COM
COMMAND.COM
SHEAU-YN.LIN
Bad command or file name

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.