Sample viewer

vx.netlux.org/Virus.DOS.IVP.Rotgrub

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:26:27.129516348Z 53 PC: 12a4d | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:26:27.146111677Z 37 PC: 12a5e | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:26:27.148005017Z 71 PC: 12a69 | Get current directory
2018-12-17T22:26:27.151188008Z 78 PC: 12a9b | Find first file
2018-12-17T22:26:27.157591255Z 78 PC: 12a9b | Find first file
2018-12-17T22:26:27.16436223Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.167165476Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.169926933Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.173790929Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.176572154Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.179303627Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.183675459Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.186534794Z 79 PC: 12a9b | Find next file
2018-12-17T22:26:27.189157575Z 59 PC: 12a7c | Change current directory
2018-12-17T22:26:27.193785921Z 9 PC: 12ae5 | Display string (String= ' Ill be damned! Looks like your system is hosed up pretty bad now! Maybe you will buy something better than Microsoft Antivirus now. You should have learned by now! [IVP] ')