| Description:
|
Details
BAT.Combat.717
This is a nonmemory resident harmless BAT virus. When executed, it searches for .BAT files in the current and parent directories, then in directories C: , C:DOS, C:WINDOWS, then writes itself to the beginning of the file.
The virus uses "binary" method - its code may be executed in both BAT and COM format (see "Batman" virus). By using this trick the virus realizes two branches of its algorithm and may access DOS functions (INT 21h). To run itself as COM file the virus creates a temporary C:COMBAT.COM file and copies itself to there.
The virus contains the texts:
* ComBat *
Rajaat / Genesis
ComBat.TMP |