Threat Description

Memphis.98.MMS

Details

Aliases: Memphis.98.MMS
Category: Malware
Type:
Platform: W32

Summary



This is a hoax about a non-existant new virus for Windows 98. Ignore it.



Removal



Again, do not distribute this hoax further.



Technical Details



Below is an example of the hoax:

As you know, the world of computers is becoming more complex every minute
 with new technologies arising all of the time.  Unfortunately, some of
 this technology can be used against us.  According to McAfee Associates
 and Symantec officials, there has been a new virus that has been
 discovered.
   According to them, the current virus detection and removal software
 that they sell CANNOT detect this virus on systems running Windows 98.
 This is due to Windows 98's new memory management system features.
   According to McAfee Associates, this virus was written in the Assembly
 language, and loads itself in to the system's upper memory.  Because of a
 flaw in the Windows 98 Memory Management System, MMS, this virus can load
 itself into a part of the upper memory block which cannot be accessed or
 scanned by either McAfee ViruScan, or Symantec's Norton Anti-Virus.
 Other virus protection utilities have not reported such errors, and have
 not been tested either.
   Microsoft is aware of this error and is currently working on a patch.
 Unfortunately, users with Windows 98 already installed have no choice but
 to continue running the OS and can only hope that this virus does not
 attack their system.
   It is believed that a person with access to Microsoft's source code may
 have written this virus, or leaked out the source code to somebody else,
 who wrote the virus.
   The characteristics of the Memphis.98.MMS are not full known, but
 certain characteristics are.
 OS: Windows 98 (4.10.1998)
 Memory Resistant: Yes
 Polymorphic: Yes
 Repairable: No
 Encrypted: No
 Infects: Floppy\Boot records
 All EXE files that are ran while virus is
 in memory
 Origin: Unknown
 Virus Size: Unknown
 Actions: The Memphis.98.MMS virus performs
 several actions while active, including:
 Slow disk I/O, spontaneous rebooting and
 monitor "flickering".  Also, you may receive a
 Windows error which says:  "Error in MMS.
 Please reboot and retry.  If this error
 continues to occur, please contact
 Micros0ft, and report the
 Memphis.98.M MS error.  Thank you,
 and enjoy Windows98."
 Extras: You may notice the zero, 0,
 instead of an o in Micros0ft, which
 indicates that this is a malicious program.
   The origin of the virus is unknown, but is believed to be written in
 the western United States, because that was where the first bunch of
 virus activity were reported.  One of the most mysterious characteristics
 of this virus is that it does not affect any Microsoft applications, such
 as MS Visual C++, VB, J++, Office97, Flight Sim, Frontpage97, Internet
 Explorer, and any other Microsoft product.
   It is believed that there may be more variations of the virus.
   
 Please send an e-mail to VirusWatch@juno.com if you detect any strange
 virus like activity or any more information about virus.  Also, please
 e-mail if you suspect that there is a new virus that people do not know
 of.
  -VirusWatch

   





SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More