| Alias: | Hymn, Hymn of USSR Virus |
| Strain: | 1990 |
| detected when: | USSR |
| where: | September 1991 |
| Classification: | Program virus, postfix, memory resident |
| Length: | On media: 1,974 bytes |
Preconditions | |
| Operating System(s): | MS-DOS and compatible |
| Version/Release: | 3.0 and upwards |
| Computer model(s): | IBM and compatible PC/XT/AT upwards |
| Caroname: | Hymn.Sverdlov |
Attributes | |
| Easy identification: | Infected files grows by 1,971 bytes. |
Type of Infection: | Program infector: The virus will make itself memory-resident and infect infect every program which uses INT21 (functions 3c, 3d, 3e, 43, 4b) |
| Infection Technique: | |
| Infection Trigger: | At any time but not if system date's Day=Month |
| Storage Media affected: | Any (hard disk, floppy disk) |
| Interrupts hooked: | INT 21h, INT 1Ch, INT 24h |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Permanent: --- Transient: The virus shows a nice spectacle on the screen, in displaying a V-shaped window in different colors; inside the window you, the text is displayed: " USSR (c) 1991 ". Moreover, the national anthem of USSR is played. |
| Damage Trigger: | When becoming memory resident, virus sets a random number. When random number=1, damage is triggered. |
| Particularities: | --- |
| Similarities: | --- |
Agents | |
| Countermeasures: | --- - dito - successful: Tested: Fridrik Skulason's F-PROT |
| Standard means: | --- |
Acknowledgements | |
| Location: | Virus Test Center, University Hamburg, Germany and Technical |
| Classification by: | Frank Schwarz |
| Documentation by: | Frank Schwarz |
| Date: | 31-January-1992 |
| Information Source: | --- |
(c) 1996 Virus-Test-Center, University of Hamburg