| Description:
|
Details
Mws.788
It is a harmless memory resident parasitic virus. Being executed it copies itself into the video memory and hooks INT 10h, 21h. The INT 10h handler checks the functions that change the video mode. That changing can corrupt the virus body, so the virus removes itself from the memory on these calls. The INT 21h handler checks the Load and Execute command and infect the COM files to the end of the file. That virus calls several DOS functions via the INT 21h function 5D00h. It contains the encrypted text:
(C)MWSoft,1993 Rookie |
