| Description:
|
Details
Elsa.857
It is not a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. To locate files to infect them the virus does not uses "standard" DOS INT 21h calls, but reads and processes directory sectors by direct disk calls. While infecting the virus allocates DOS memory and uses video memory for store temporary data.
Because of a bug the virus does not work on Pentium computers. The virus contains the text strings:
[Simb_NkEi]
SIMBULE_NkEI_RofA_.03.99
[ELSA_FA6]
fait grisall! Bisous ptite cherie ! |
