| Description:
|
Details
ZhengZhou.3576.a
This is a dangerous memory resident multipartite DOS virus.
ZhengZhou hooks INT 13h, 21h and first writes itself to the end of COM and EXE files that are executed, and to the MBR of the hard drive when infected files are executed. It then infects the boot sector of the floppy drive. Under a debugger ZhengZhou will also reboot the computer.
ZhenZhou may also infect files that are accessed by FindFirst/Next FCB function (DIR command). It may also erase hard drive sectors. |
