Article View: alt.comp.virus
Article #594Re: PIECK.4444.A
From: Henrique Santos Araujo
Date: Thu, 07 Jan 1999 00:00
Date: Thu, 07 Jan 1999 00:00
33 lines
1819 bytes
1819 bytes
I found some information. Henrique Erik wrote: > > Hi all, > > I got a 3.5" diskette with this virus on it: PIECK.4444.A > My virusscanner neutralized it, but what kind of virus is this? See below > How old is it? It's in the wild since 1995. http://www.datafellows.fi/v-descs/pieck.htm > What does it do? Pieck.4444.A is a non-destructive memory resident, polymorphic, stealth, Multi-partite virus. While in memory in hooks interrupts 13 and 21 and infects the master boot record of the hard-drive. It infects .EXE files by writing to their ends. When the MBR is infected and the virus becomes memory-resident it disinfects the infected files on the hard disk when they are accessed. Only the .EXE files that are accessed on the floppy disk are then infected. http://search.mcafee.com/vil/vp_0025.asp > Where does it come from? Poland. > > Thanks in advance, > > -- > See ya, > > Erik http://come.to/Scimitar
Technical Details
Message-ID:
<36950D9F.AB91F414@my-dejanews.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<01be3a5b$da5cc3a0$196886c2@erikh>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 107e1f,f8d6fc317c8444a4 X-Google-Attributes: gid107e1f,public X-Google-Thread: fcd68,f8d6fc317c8444a4 X-Google-Attributes: gidfcd68,public From: Henrique Santos Araujo <hsaraujo@my-dejanews.com> Subject: Re: PIECK.4444.A Date: 1999/01/07 Message-ID: <36950D9F.AB91F414@my-dejanews.com> X-Deja-AN: 429905195 Content-Transfer-Encoding: 7bit References: <01be3a5b$da5cc3a0$196886c2@erikh> To: Erik <e-auto@hotbot.com> X-Accept-Language: en,pt-BR Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@zaz.com.br X-Trace: srv4-poa.nutecnet.com.br 915734202 9279 200.241.46.181 (7 Jan 1999 18:36:42 GMT) Organization: MSMT - Liceu Salesiano São Gonçalo Mime-Version: 1.0 NNTP-Posting-Date: 7 Jan 1999 18:36:42 GMT Newsgroups: alt.comp.virus,fido.ger.virus