Threat Description

Devil's Dance

Details

Aliases:Devil's Dance
Category:Malware
Type:Virus
Platform: W32

Summary



This virus infects the same file over and over until it become too large to fit in memory. It traps INT 9 (the keyboard interrupt) and when CTRL-ALT-DEL is pressed it will display the message:

DID YOU EVER DANCE WITH THE DEVIL IN THE WEAK MOONLIGHT ?
 PRAY FOR YOUR DISKS!!
 The Joker


Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



Technical Details



The virus also monitors any keystrokes, activating when 2000 are reached. It will then change the colors of any text displayed on the screen. When 5000 keystrokes are reached the virus will trash the first copy of the FAT.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More