Fandom

Malware Wiki

Scott's Valley

1,335pages on
this wiki
Add New Page
Comments0 Share

Scott's Valley, also known as Slow.2131,is a memory resident virus on DOS.

Behavior

Scott's Valley is a very standard memory resident DOS file infector. Upon execution, it goes memory resident and infects COM and EXE files as they are opened except COMMAND.COM. Because Scott's Valley has never been fully analysed, it is unknown whether it also infects OVL files as most Jerusalem variants do.

Scott's Valley is only partially analysed, and as such, this list of symptoms may be incomplete.

  • COM files executed will increase by 2,131 bytes in size; EXE files will increase by between 2,131 and 2,140 bytes.
  • Interrupt 21 will be hooked.
  • Infected files will contain the seemingly meaningless hex string 5E8BDE909081C63200B912082E.

Scott's Valley is a member of the Slow virus family, which has been associated with system slowdowns, although this symptom is unconfirmed. This could stem from the Slow virus' (and thus the Scott's Valley virus') relationship to the Jerusalem virus, which slowed down the system after 30 seconds and displayed a black box in the lower lefthand corner. It is not believed that Scott's Valley exhibits the "black box" behaviour, nor that it carries Jerusalem's destructive payload.

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.