| Description:
|
Details
Cool.929
It is not a dangerous memory resident parasitic virus. It hooks INT 8, 21h and writes itself to the end of EXE files that are executed. Depending on the system timer it displays some message, but this text is corrupted in my sample of the virus. The virus detects its TSR copy by INT 21h call with AX=0EADh, the TSR copy returns AX=C001h. This in only reason to name that virus. |
