Sophos

Sophos blogs

Angelina

Aliases
  • Stoned
  • Angelina.
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

The text 'Greetings for ANGELINA!!!/ by Garfield / Zielona Gora' is contained in the code of the virus although the message is not displayed on the screen of an infected machine. Zielona Gora is a town in Poland, and Angelina means 'Green Hill'.

In common with many boot sector viruses, Angelina copies itself to head 0, cylinder 0, sector 1 of the hard disk and moves the original boot sector to an unused part of the disk. The BIOS interrupt 13 is hooked, i.e. directed to the source code of the virus. After infection, the virus causes the machine to reboot. Subsequent attempts to read the infected master boot sector are diverted to the original boot sector. If a non viral boot sector is being read, for example on a floppy disk, then the disk is infected.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer