Aliases

Virus.DOS.Abbas.1320 (Kaspersky Lab) is also known as: Abbas.1320 (Kaspersky Lab), Univ/r (McAfee),   Abbas.1320 (Symantec),   Abbas.1320 (Doctor Web),   Iranian (Sophos),   Abbas.1320! (RAV),   ABBAS (Trend Micro),   Abbas #1 (H+BEDV),   Abbas.1320 (FRISK),   Abbas-13XX (ALWIL),   Abbas (Grisoft),   PS-MPC.1320.AK.Gen (SOFTWIN),   Abbas.1 (ClamAV),   Abbas.1320 (Panda)

Description added	Mar 07 2000
Behavior	Virus

Technical details

This is a dangerous memory resident parasitic virus. It hooks INT 9, 21h and writes itself to the end of COM and EXE files that are executed.

By using INT 9 (keyboard) the virus checks INT 1 (trace), and while tracing it displays the message:

ANTI VIRUS Writen By ABBAS KUHKAN Virus Found !

and halt the computer.

The viruses also contain the text string:

KUH