| Description:
|
Details
Rubbit.3164
This is a benign memory resident parasitic encrypted virus. It searches for original address of INT 21h handler in DOS area, hooks INT 21h and writes itself to the end of the files. While installing its TSR copy the virus uses method of MCBs correction and KEEP DOS function.
This virus infects COM and EXE files that are executed. While infecting it renames the file to "RUBBIT.$$$", infects it and then renames back to original name.
On September, 9th this virus displays the message:
## RuBBit Version 2.2 Written by [P.F] in Taiwan. ##
## This idea is from Dark Slayer. 1994/05/02 ##
This virus also contains the texts:
RuBBit |
