Zyx is a non-memory resident encrypted parasitic virus. Being executed the virus performs several actions to avoid detection by antivirus software. It checks the interrupts vectors to detect the memory resident antivirus monitors, reads and checks the CONFIG.SYS file to detect installed antivirus software. Then the virus searches for COM and EXE files and writes itself to the end of the file.
The virus manifest itself in several ways. It corrupts the anti-virus data files, deletes the files, writes to the beginning of .C, .PAS, .TXT, .ME, .DOC, .BAK and .ASM the message:
To Karen In the realm of a greek deity, I dreamt of you. A weird reverie, Typewriters were like clouds, high in the sky, The floor was made of paper, Pencils stood for trees, A light bulb, low on the horizon, made a perfect sunset. And it rained words ... Then you came, more beautiful than ever, The only one real in my cyberspace. I felt like holding you im my arms, touching your hair, Telling you how much I loved you, How much I wanted to lose myself in your pretty brown eyes. I was almost in heaven. Suddenly it was pitch dark, The greek god had turned off the PC. It said: 'Buddy you're just a damned cyberpunk whose only friends are NPCs.' I opened my eyes, it was dawning outside. You weren't there. I miss you. I really miss you. Zyx From the slums of Beverly Hills.
The virus also contains the text strings:
I'MWackOkiDtHebRainChildOfZyx Stopsnoopingintomywork Itoldyoutostop Ifyuwanagoontakesomeflowerstoyourgirltoday&makeherhappyok *.* IhateturksazerbaijanisandKARABAGHbelongstous ME M *.COM *.EXE SCANVAL.VAL FSIZES.QCV SCAN.EXE NAV.EXE TBSCAN.EXE STACKER.COM COMMAND CONFIG.SYS NAV_.NAV&.EM CHKVIRUS.CFG NAV_*.* CHKLIST.MS VSAFE. *._XE *._OM SIGNTURE.DAT .. OMSPEC= PAS DOC \ CHKLIST.CPS BAK ASM C TXT Sowhatdidyougainwiseass wishIhaddonesomethingelse
No images or videos available