FANDOM


Spanska (Cosmos variant) is a parasitic encrypted virus on DOS, written by Spanska from 29A.

Spanska.1120.b is the only variant.

Behavior

When the virus is run, it infects first 6 uninfected DOS executable files by writing itself to the end of their binaries.

The virus does not infect COMMAND.COM and files that are smaller than 1,500 bytes or larger than 56,000 bytes in size.

If there is no more files to infect in the current directory, it would change to other directories in order to find more files to infect.

Advanced details

This virus does not stay memory resident.

MD5 hash:

e6ee18c41a5bb60d9cb9c1ae7d7b4260

Payload

When the minute is equal to 52 and second is less than or equal to 20, it displays a video effect of a simulated cosmos, and also the text:

To Carl Sagan, poet and scientist,
this little Cosmos.  (Spanska 97)

Other details

This variant is not equivalent to Spanska.1120.a, which belongs to the version of No Pasaran.

References

  1. Description of the Spanska virus on F-Secure Lab

See also

Videos

Virus.DOS.Spanska.1120

Virus.DOS.Spanska.1120.b

Spanska.1120

Virus.DOS

Virus.DOS.Spanska 1120b

Spanska (Cosmos variant) virus review by Alles Sandro