| Description:
|
Details
VrapExe.3729
This is a very dangerous, non memory-resident parasitic virus. It searches for EXE files in the subdirectory tree and writes itself to the end of the files. This virus is a "slow infector" - it searches for files to infect depending on the system time and date and only on even days of the week.
The virus uses semi-polymorphic tricks. The virus code contains many junk "do-nothing" instructions. Before infecting files, the virus scans their code and randomly replace these "do-nothing" instructions with other ones.
In September, the virus erases data on all drives starting from C:. The virus uses anti-debugging tricks. It contains encrypted text strings, but never access them:
COMMAND.COM
X:CONFIG.SYS |