F-Secure Virus Descriptions : Galicia
Galicia infects a computer's hard disk only if the computer is
booted with an infected diskette in drive A:, in which case the
virus infects the hard disk's Main Boot Record. The virus goes
resident in memory the next time the computer is booted from the
hard disk. Once in memory, Galicia infects all non-write
protected diskettes used in the computer.
Galicia activates on May 22nd after 12 o'clock when a
non-existant drive is accessed. At this time it displays
the following message:
Galicia contra =>telefonica!
which means "Galicia against Telefonica"; Galicia is the name
of the North-West region of Spain, and Telefonica is the name
of the company that has monopoly of telecommunications in Spain.
The text is encrypted. The virus also tries to overwrite the
MBR of the hard drive, but due to an programming error this
function will be likely to fail.
Galicia is an encrypted virus.
|
![](/images/pixel.gif"){kind=tracking}
