Name: Anarchy.959 Category: Viruses Description: Details Anarchy.9594 This is a benign polymorphic memory resident parasitic virus. It hooks INT 9, 21h, 28h and writes itself at the end of COM (except COMMAND.COM) and EXE files that are executed or closed. The header of the infected COM files contains the text strings: JAN FAKOVSKIJ,USSR,1994 All infected files contain the not encrypted ID-string at their ends: UNFORGIVON On 48th infection the virus displays one of the messages (two of them are in Russian) and halts the system: DIS IS DI END, BEAUTIFUL FRIENDall DIS IS DI END, MY ONLY FRIEND- DI END. IT HURTS TO SET U FREE, BUT U'LL NEVOR FOLLOW ME. DI END- OF LAUGHTER & SOFT LIES, DI END OF NIGHTS...WE TIRED TO DIE... DIS IS DI END I WANNA DESTROY DA PASSORS-BY 'CAUSE I WANNA BE,- YEAH,- ANARCHY On pressing [Alt]-[GreyMinus] the virus calls the trigger routine that emulates the file shell a'la Norton Commander and allows to copy, move, delete the files and subdirectories and so on. That routine displays the menu like this one: 3584000