| Description:
|
Details
Babe.1584
It is not a dangerous memory resident parasitic virus. It hooks INT 16, 21h and writes itself to the end of COM and EXE files that are executed. By hooking INT 16 (keyboard) the virus exchanges the keys that are pressed: Home<->End, Up<->Down, PgUp<->PgDn, Left<->Right, Ins<->Del. The virus gets its name after its "Are you here?" call that is performed when the virus installs itself memory resident: INT 21h, BX/CX=B0B0h/BABEh. The memory resident virus copy returns BABEh/B0B0h in BX/CX registers. |
