| Description:
|
Details
Mef.1481
These are a harmless memory resident encrypted parasitic viruses. They hook INT 21h and writes themselves to the end of COM- and EXE-files that are executed or opened. The viruses check the file names and do not infect the files: AVG.*, ASTA*.*, STRO*.*, DPMI*.*, RTM.*, SCAN*.*.
The viruses use anti-debugger tricks, and under debugger they switch to search-and-infect routine that search for COM- and EXE-files in DOS or C:DOS directories, and infects them.
The virus contains the internal text strings:
*.exe *.com dos
AVG.ASTASTRODPMIRTM.SCAN
COMEXE |
