| Description:
|
Details
Drwatson.1503
It is a memory resident very dangerous virus. When the virus starts, it creates the file C:DRWATSON.COM, writes its copy into this file and then inserts the command @drwatson into the file AUTOEXEC.BAT beginning. Other files are not infected. While accessing to file AUTOEXEC.BAT the virus uses stealth algorithm.
This infector stops tracing: it types "Tracing mode has been destroyed" and exits to DOS. If the virus body is traced the infector erases the content of FAT of current disk and reboots the computer. |
