









 | Natas virus| Name | Natas virus | | Aliases | Satan, Natas.4744, Natas.4746, Natas.4774 and Natas.4988. | | Discovered on | 1995 and it is in the wild |
Virus Information - Natas virus:
This is a multipartite DOS virus that infects COM and EXE files under
DOS, partition table (MBR) of hard disks and boot sectors of floppy disks.
The virus stays in memory when an infected file is executed or when the
computer is booted from an infected disk. When the virus is active in the
memory, it will be infecting all the EXE and COM files opened or executed
and it will be infecting the boot sector of all the floppy disks accessed. The
virus infects the partition table of the hard disk the first time it infects
the computer. The virus adds 4744, 4746, 4774 or 4988 bytes while infecting
the file depending on the perticular variant of this virus. Natas is a
stealth virus so it tries to hide its presence.
The virus contains the following text:
"Natas BACK MODEM Time has come to pay (C)1994 NEVER-1
Yes I know my enemies. They're the teachers who taught me to fight me
Compromise, conformity, assimilation, submission Ignorance, hypocrisy,
brutality, the elite All of whitch are American dreams (C)1994 by Never-1(Belgium
Most Hated) Sandrine B. "
Natas has a dangerous payload that gets activated randomly. When the
payload is triggered, this virus destroys the data stpred in the hard dislk.

|