Sample viewer

vx.netlux.org/Virus.DOS.FrodoSoft.590

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:13:48.914992719Z 53 PC: 13239 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:13:48.917070896Z 37 PC: 1324a | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:13:48.919238399Z 54 PC: 13251 | Get free disk space
2018-12-17T22:13:48.926393896Z 26 PC: 1326a | Set disk transfer address
2018-12-17T22:13:48.927575747Z 78 PC: 13275 | Find first file
2018-12-17T22:13:48.931406316Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.933353334Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.935237801Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.937394339Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.939125435Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.940642081Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.943717913Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.945290859Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.946769569Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.949199991Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.950821367Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.952421991Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.955094896Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.957124685Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.958865605Z 61 PC: 13290 | Open file (Filename = 'TEST.COM')
2018-12-17T22:13:48.966252685Z 63 PC: 132a1 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T22:13:48.968218623Z 62 PC: 132cb | Close file
2018-12-17T22:13:48.970777736Z 79 PC: 132d1 | Find next file
2018-12-17T22:13:48.973931858Z 78 PC: 132ef | Find first file
2018-12-17T22:13:48.97885926Z 67 PC: 132fd | Get or set file attributes
2018-12-17T22:13:48.986741852Z 37 PC: 133a2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:13:48.988543915Z 26 PC: 133ad | Set disk transfer address
2018-12-17T22:13:48.989610458Z 9 PC: 12a4c | Display string (String= '(C) 1993 American Eagle Poblications Inc., All Rights Reserved. Unauthorized use will be prosecuted under applicable copyright and software piracy laws. HOST #5 - You have just released a virus!')
2018-12-17T22:13:48.993968269Z 76 PC: 12a51 | Terminate with return code (Return code = '0')