FANDOM


Virus.DOS.Zyx.5685 or Zyx is a virus that runs on MS-DOS.

PayloadEdit

Zyx is a non-nmemory resident encrypted parasitic virus. Being executed the virus performs several actions to avoid detection by antivirus software. It checks the interrupts vectors to detect the memory resident antivirus monitors, reads and checks the CONFIG.SYS file to detect installed antivirus software. Then the virus searches for COM and EXE files and writes itself to the end of the file.

The virus manifest itself in several ways. It corrupts the anti-virus data files, deletes the files, writes to the beginning of .C, .PAS, .TXT, .ME, .DOC, .BAK and .ASM the message:

To Karen

In the realm of a greek deity, I dreamt of you.

A weird reverie,

Typewriters were like clouds, high in the sky,

The floor was made of paper,

Pencils stood for trees,

A light bulb, low on the horizon, made a perfect sunset.

And it rained words ...

Then you came, more beautiful than ever,

The only one real in my cyberspace.

I felt like holding you im my arms, touching your hair,

Telling you how much I loved you,

How much I wanted to lose myself in your pretty brown eyes.

I was almost in heaven.
Suddenly it was pitch dark,

The greek god had turned off the PC. It said:

'Buddy you're just a damned cyberpunk

whose only friends are NPCs.'

I opened my eyes, it was dawning outside.

You weren't there.

I miss you. I really miss you.

Zyx

From the slums of

Beverly Hills.

The virus also contains the text strings:

I'MWackOkiDtHebRainChildOfZyx

Stopsnoopingintomywork

Itoldyoutostop

Ifyuwanagoontakesomeflowerstoyourgirltoday&makeherhappyok

*.*

IhateturksazerbaijanisandKARABAGHbelongstous

ME M

*.COM *.EXE

SCANVAL.VAL FSIZES.QCV

SCAN.EXE NAV.EXE TBSCAN.EXE STACKER.COM

COMMAND

CONFIG.SYS

NAV_.NAV&.EM

CHKVIRUS.CFG

NAV_*.*

CHKLIST.MS

VSAFE.

*._XE *._OM

SIGNTURE.DAT

.. OMSPEC=

PAS DOC \ CHKLIST.CPS

BAK ASM

C TXT

Sowhatdidyougainwiseass

wishIhaddonesomethingelse

MediaEdit

No images or videos available

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.