Viral Rewind: Virus.DOS.Digi
Visit my Linktree to access my socials and other channels: https://linktr.ee/mausolfb
-----------------------------------------------------------
. Here in Viral Rewind (after a three week hiatus from me the user being infected since this was recorded) we look at the rather destructive Digi virus for DOS. This particular virus has several capabilities unlike most that are out there. It is memory-resident, polymorphic, encrypted and stealthy (did I mention destructive?). With these, Digi will infect .COM files after it has been loaded into memory in which its infection routine can then run from. Because it's polymorphic, encrypted and stealthy an infected file will not show any kind of size increase including no apparent decrease in available disk space yet the file is definitely infected. This makes Digi's infections elusive to both the end user and antivirus software in trying to detect its presence. Most of the time the user won't notice it at all and will only know there's a problem when the payload happens. And when it does it's too late to go back and fix it because everything will be gone.
The payload: If an infected .COM file with Digi is run on May 28th, 29th, 30th or 31st the virus overwrites all hard drive sectors with the string "DIGI POWER" essentially wiping out the file allocation table and any data on the drive. When it completes, it displays an audio/visual payload displaying "DIGI POWER" and a tune played through the PC speaker that loops continuously. There's also a little snippet provided by the virus author at the bottom. All keyboard input including Ctrl+Alt+Del is disabled and only a hard reset will clear the payload.
Another way the payload can activate is if Digi resides in memory while the computer is in use on May 27th and the computer clock reaches midnight rolling the date over to the 28th. When any command/action is performed after this point the payload will again activate.
----------------------------------------------------
Like the Facebook page: / brian.mausolf
Follow me on Twitter: / mausolfb