Internet threat level: 1
Home→Descriptions→Virus.Boot-DOS.Playgame.1999
Virus.Boot-DOS.Playgame.1999
| Detected | Jan 10 2002 20:00 GMT |
| Released | Apr 19 1999 20:00 GMT |
| Published | Mar 07 2000 11:28 GMT |
Technical Details
This is a benign memory-resident multipartite virus. While executing an infected file, the virus writes itself to the hard drive MBR, and returns control to the host program. The virus stays memory resident upon loading from an infected disk only. The virus hooks INT 13h and 21h, and writes itself to the end of accessed EXE files.
The virus contains the string "CO4DSCCLVSNEHTTBVIF-FIGIIMRAFEMTBR", and does not infect files if the first two bytes of the file name consist of two characters from this string (CO*.*, 4D*.*, SC*.*, ...). This virus also contains the text string:
[ MK / TridenT ]
In December, this virus starts a game, and, while playing the game, it displays the following message:
HAPPY VIRUS Time to play a game (Use shift keys) You reached level Play again?
Viruses replicate on the resources of the local machine.
Unlike worms, viruses do not use network services to propagate or penetrate other computers. A copy of a virus will reach remote computers only if the infected object is, for some reason unrelated to the virus function, activated on another computer. For example:
- when infecting accessible disks, a virus penetrates a file located on a network resource
- a virus copies itself to a removable storage device or infects a file on a removable device
- a user sends an email with an infected attachment.
Virus.
- Playgame.
1999 (Kaspersky Lab) - Playgame-1999 (Sophos)
- Boot.
Playgame (ClamAV) - KillMbr.
1999 (Panda) - Playgame.
1999 (FPROT) - Virus:
DOS/Playgame. 1999 (MS(OneCare)) - Playgame.
2000f (Ikarus) - Playgame (AVG)
- Playgame (AVIRA)
- Bin.
Auto. CLR (NAV) - HAPPY-B* (TrendMicro)
© 1997-2010 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.