| Description:
|
Details
Win95_Soth
It is not a dangerous memory resident parasitic Win9x virus. It stays in Windows memory as system driver (VxD), hooks file open Windows function (IFS hook) and writes itself to the end of PE EXE files that are executed or opened.
The virus does not manifest itself in any other ways. To avoid duplicate infection the virus marks infected files at file header with "HTOS" text ("SOTH" written backward). |
