| Description:
|
Details
Koder.1024
This is a dangerous memory resident partly encrypted parasitic virus. It hooks INT 21h, and writes itself to the end of EXE files that are executed. While opening an infected file, or while accessing to an infected file with FindFirst/Next DOS functions, the virus decreases the file length. Starting in September, the virus corrupts the CMOS check-sum field. The virus contains the text string:
KODER(96) WROCLAW |
