| Description:
|
Details
ZhengZhou.3584.b
This is a dangerous memory resident multipartite DOS virus.
ZhengZhou.3584.b hooks INT 13h, 21h and first writes itself to the end of COM and EXE files that are executed, and to the MBR of the hard drive when infected files are executed. It then infects the boot sector of the floppy drive.
ZhenZhou.3584.b may also infect files that are accessed by FindFirst/Next FCB function (DIR command). It may also erase hard drive sectors.
ZhengZhou.3584.b does not infect the SCAN.EXE and CLEAN.EXE files, and deletes the WMSET.COM file.
ZhenZhou.3584.b contains the following text string:
wolf |
