| Description:
|
Details
Hack.130
It is a dangerous memory resident parasitic virus. When an infected file is executed the virus copies itself into the memory at address 9000:0000, and does not fix MCB list, and that might halt the computer. Then the virus hooks INT 21h and intercepts Write DOS function. When the destination is a COM file, the virus first writes its code, and then the original data that is writing. As a result when the COM files are copied, the virus writes its code to the beginning of the file. When the destination is standard output device (stdout), the virus displays:
(H*ck-tic) |
