| Description:
|
Details
Vpp.475
It is not a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the end of the file. The virus infects a file only if it contains in its first 1024 bytes of code the interrupt calls: INT 10h (video service) or INT 21h into. In this case the virus replaces this interrupt call with the call to virus code instruction. Because of this way of infection the virus gets control not at the moment the infected programs starts, but only in case the affected program's branch takes control.
The virus writes the ID string "V++" to the end of infected files, and by detecting this sting avoids duplicate infection. |
