Home / malware

PDF

Virus:DOS/Finnish_Sprayer

First posted on 26 October 2011.
Source: SecurityHome

Aliases :

Virus:DOS/Finnish_Sprayer is also known as Finnish_Sprayer (AhnLab), Virus.Boot.Aija (Kaspersky), Finnish Sprayer (McAfee), Finnish_Sprayer (Norman), Aija (Sophos), FINNISH_SPRAYER (Trend Micro), Finnish_Sprayer.A (VirusBuster).

Explanation :

Virus:DOS/Finnish_Sprayer is a DOS boot sector virus that infects the boot sector of floppy disks and hard drives.
Top

Virus:DOS/Finnish_Sprayer is a DOS boot sector virus that infects the boot sector of floppy disks and hard drives. This legacy virus could infect the boot sector of a hard drive if the affected computer is booted, or started, with an infected floppy disk in the floppy drive. The virus runs at computer boot time and hooks Interrupt 13 and passes control to the original DOS boot sector. Once active, the virus attempts to infect floppy disks used in the infected computer.Additional InformationThe virus body contains the following string: "FINNSPRAY14FAT12"

Analysis by Francis Allan Tan Seng

Last update 26 October 2011

 

TOP