| Description:
|
Details
Anxiety.1358
This is a dangerous memory resident (as VxD drivers) parasitic virus. It's 90% similar to Win95.Harry virus. Like Harry, Anxiety infects NewEXE PE files (Win95). When an infected file is executed, the virus scans the Win95 kernel for free space (in VMM driver), copies itself to there and hooks IFS API. When NewEXE files are opened, the virus infects them. While infecting the virus writes itself to the end of the file and modifies the NewEXE header to take control when the infected file is executed.
This virus contains the text strings:
Anxiety.Poppy.95 by VicodinES |
