| Description:
|
Details
Hidenowt.1741.a
It is a harmless memory resident parasitic partly encrypted virus. It writes itself to the end of .COM and .EXE files. When an infected file is executed, the virus infects the C:COMMAND.COM file, then it traces and hooks INT 21h, then it infects the files on DOS calls FindFirst/Next.
The virus uses anti-debug tricks. It contains two text strings, the former is encrypted, the latter is used as virus-ID word:
C:COMMAND.COM
Yx |
