Skip to main content

SK

Classification

Category:

Malware

Type:

Virus

Summary

This is a resident file virus which infects COM files.

Removal

Technical Details

When an infected file is executed, the virus will install itself in memory and reserves 2048 bytes for itself although its size is only 992 bytes. Virus hooks INT 13h, INT 20h and INT 21h.

Virus contains a counter which is incremented every time when a disk is being written to or formatted. When the counter reaches 766, virus terminates the current program with INT 20h and displays a message saying 'Virus in memory !!! Created by 21.I.1990 - PMG\OTME - Tolbuhin ...' and hangs the computer.

When an infected file is executed, the virus will infect one COM file found in the current directory. Virus will not infect files which are smaller than 416 bytes. It doesn't infect COMMAND.COM either.

If an infected file is executed on the 15th day of the month, virus overwrites 9 sectors from the beginning of the disk and hangs the machine.

Variant:SK-1004, SK-1147

Somewhat longer variants.

Protect your devices from malware with F‑Secure Total

Protecting your devices from malicious software is essential for maintaining online security. F‑Secure Total makes this easy, helping you to secure your devices in a brilliantly simple way.

  • Award‑winning antivirus and malware protection

  • Online browsing, banking, and shopping protection

  • 24/7 online identity and data breach monitoring

  • Unlimited VPN service to safe­guard your privacy

  • Password manager with private data protection

Choose how many devices you want to protect to get started.

  • Free customer support

  • Cancel anytime

  • The trial does not obligate you to buy the product

After 30 days your subscription will renew automatically for one year at €69.99.

More Support

Community

Ask questions in our Community.

User guides

Check the user guide for instructions.

Contact Support

Chat with with or call an agent.

Submit a Sample

Submit a file or URL for analysis.