| Description:
|
Details
Multi.2560 Family
These are harmless memory resident stealth viruses. They hook INT 21h write themselves to the end of COM, EXE, SYS and OVL files. The date of infected files grows by 100 years. The viruses do not infect the files with Read-Only attribute, remove themselves from the infected files that are executed or traced.
While installing they scan the INT 21h handlers in DOS kernel area and patch DOS internal INT 2Ah call (MOV AH,82h; INT 2Ah) with the instruction that jump to virus body.
These viruses contain in their bodies the code of the viruses:
"Multi.2560.a": "Small.123,131"
"Multi.2560.b": "Small.104,110"
and sometimes launch one of them. The viruses contain the text:
MultiVirus(R), Release 1.0, Copyright (c) 1990-91 by Ç¡ñ___¬á |
