Name: MF famil Category: Viruses Description: Details MF family These are dangerous memory resident polymorphic and stealth parasitic viruses. They hooks INT 8, 16h, 21h, 2Fh and write themselves to the end of COM and EXE files that are executed or closed. On opening an infected file the viruses temporary disinfect it. Depending on their internal counters the viruses change several extended ASCII (cyrillic) letters on the screen. The virus also changes letters that are typed by keyboard. In 14 minutes after installing memory resident "MF.3564" displays the text "Merlin from AMBER: FUCK YOU MAN!", in 40 minutes the viruses corrupt the CMOS memory. Depending on a random counter the viruses disable accessing to remote disks and files. When the text "Tell me your ver, mf!" is entered as a DOS command, the viruses display: "MF.3490": My ver is MF v10.1 "MF.3564": My ver is MF v10.0 When the text "Do your job, mf!" is entered, they display: Yes, I got it, man. and then corrupt the CMOS memory.