Active Scan. Scan your PC free
Panda Security Product Line 2012

Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Encyclopedia GetVirusCard True 0

Kriz.3863

 
Threat LevelHigh threatDamageSevereDistributionNot widespread

Effects 

Kriz.3863 has the following effects:

  • It goes memory resident and infects executable files (PE type) with an EXE extension, as well as screen savers (with an SCR extension).
  • This virus carries out its most dangerous action on December 25 of any year, which consists of deleting the BIOS information as well as files in all the available drives.

Infection strategy 

Kriz.3863 follows the infection routine below:

  • Kriz.3863 infects the file KERNEL32.DLL when any other infected file is run. In order to do this, the virus creates an infected copy of this file under the name KRIZED.TT6, in the Windows system directory.
  • Kriz.3863 modifies the file WININIT.INI by inserting a new instruction in it. By doing this, Kriz.3863 replaces the original file (KERNEL32.DLL) with an infected version (KRIZED.TT6) the next time the computer is started up.
  • If the file WININIT.INI does not exist, Kriz.3863 creates and modifies it. By doing this, Kriz.3863 ensures its presence every time the system is started up and remains memory resident.
  • From then on, Kriz.3863 intercepts all the functions in the KERNEL32.DLL library that copy, create, delete and move files, and assign and obtain the attributes of these files.

Means of transmission 

Kriz.3863 does not have a specific means of transmission. It can spread through the means normally used by viruses: e-mail messages, computer networks, Internet downloads, file transfers via FTP, CD-ROMs, floppy disks, etc.

Further Details  

Kriz.3863 contains the following encrypted text:

c)T2 & Immortal Riot
YOU CALL IT RELIGION, YOU'RE FULL OF SHIT
YOU NEVER KNEW,.YOU NEVER DID, YOU NEVER WILL
YOU'RE SO FULL OF SHIT, I DON'T WANT TO HEAR IT
ALL YOU DO IS TALK ABOUT YOURSELF
I DON'T WANNA HEAR IT, COZ I KNOW NONE OF IT'S TRUE
I'M SICK AND TIRED OF ALL YOUR GODDAMN LIES
LIES IN THE NAME OF GOD
WHEN ARE YOU GOING TO REALIZE THAT I DON'T WANT TO HEAR IT?!
I KNOW YOU'RE SO FULL OF SHIT, SO SHUT YOUR FUCKING MOUTH
YOU KEEP ON TALKING, TALKING EVERYDAY
FIRST YOU'RE TELLING STORIES, THEN YOU'RE TELLING LIES
WHEN THE FUCK ARE YOU GOING TO REALIZE THAT I DON'T WANT TO HEAR IT!!
AH, SHUT THE FUCK UP...