| Description:
|
Details
Win32.Bika
It is a harmless per-process memory resident parasitic Win32 virus. It infects Win32 applications only. While infecting the virus writes itself to the end of the file.
When infected file starts the virus hooks "set current directory" Win32 API functions (SetCurrentDirectoryA, SetCurrentDirectoryW) that are imported by host program, stays as "background" thread of infected process, and then infects files in directories when current directory is being changed.
The virus does not manifest itself in any way. It contains the "copyright" text strings:
Win32.Ikarus by Black Jack
written in Austria in the year 2001 |
