| Description:
|
Details
MidInfector.765
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes "JMP VirusCode" instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with "JMP VirusCode". |
