Virus.DOS.Espacio is a memory resident parasitic virus on DOS. The virus forces the user to play an old Pac-Man game.
Behavior
When the virus is loaded into memory, it hooks INT 1Ch and 21h and write themselves to the end of the executables that are run. These viruses contain the data area that is the code of the old PC-Booter game PAC-MAN (although this version is hacked from PC-Man by Orion Software), and this code is packed by the PKLITE utility.
Payload
The virus sets a timer starting from 25 minutes, after the timer counts up the virus unpacks the game and launches it. Upon execution of this game the viruses hook onto INT 09h. By pressing CTRL-ALT-DEL, the user will restore control to the interrupted program.
Whenever the player starts or dies, near the box where ghosts spawn a line reading "F*CK!" (uncensored) instead of "Ready!" in the original version is printed.
After exiting the game the virus sets the timer to a smaller value by halving it, which means that the game would appear again in a shorter time. If the user attempts to exit as the game appears frequently, the system may unable to handle so much inputs and cause an internal stack overflow and the section would be halted.
Evening Dress Evening Bridal Bag FZHLY Bag Pink Cross Wedding Bridesmaid Clutch Bag Fringe Shoulder Women Delicate Clutch Silk Variants
This family has 5 variants in total:
- Virus.DOS.Espacio.8444
- Virus.DOS.Espacio.8458
- Virus.DOS.Espacio.8486
- Virus.DOS.Espacio.8491
- Virus.DOS.Espacio.8498
Other details
The code of the game contains the text strings:
Recorre la Habana Presione la tecla ESPACIO para comenzer en busca de nuevas aventuras Copyright: NASA-MAN 1993 Oprima ESPACIO para seguir PAC-MANeando ... Joystick button FOR JOYSTICK PUNT.
Known Fruits
- Level 1: Candy Cane
- Level 2: Watermelon
- Level 3: Banana
Videos
Virus.DOS.Espacio Espacio DOS Virus
Espacio virus review by Alles Sandro
Virus.DOS.Espacio
Espacio virus review by danooct1