| Description:
|
Details
MJ.1513.a
This is a very dangerous memory-resident virus which writes itself into the MBR of the hard disk as soon as an file is started and into .COM- files whenever they are started. The old contents of the MBR is saved at the location 0/0/2 (head/track/sector). COM-files are affected by standard way.
Whenever an infected .COM-file is started the virus installs its TSR copy into the memory, displays the message "Bad command or file name" and returns to DOS. On the 100th reboot from the infected hard disk the first 16 sectors of it are wiped out. On every 256th read operation from an infected disk (INT 13h) the virus placed the word 'mj' into the block that has been read at the location C8h. The virus hooks INT 13h, 1Ch, 21h. |
