| Description:
|
Details
ZhengZhou.3584.a
This is a dangerous memory resident multipartite DOS virus.
ZhengZhou.3584.a hooks INT 13h, 21h and first writes itself to the end of COM and EXE files that are executed, and to the MBR of the hard drive when infected files are executed. It then infects the boot sector of the floppy drive.
ZhenZhou.3584.a may also infect files that are accessed by FindFirst/Next FCB function (DIR command). It may also erase hard drive sectors.
ZhenZhou.3584.a contains the following text strings:
Zheng Zhou, China. 1993
Thank for your helping, Good-bye !
Under a debugger ZhengZhou.3584.a tries to format the hard disk (but fails), and displays the messages:
Do not turn OFF the computer when WOLF is working !
Insert DOS diskette in drive A:
Strike any key when ready all |
