| Description:
|
Details
Dot.944
This is a dangerous non memory-resident virus which analyses the ENVIRONMENT block, looks there for the string "COMSPEC=" and infects COMMAND.COM (or its substitutor) via this string. After that the virus writes itself into .COM-files of the current directory by standard way. The virus intercepts INT 16h (keyboard) and depending on symbols entered from the keyboard, launches on the 25th screen line, from the right to the left and backward the symbol of a funny face (ASCII 1). The movement of the "face" is accompanied by a buzzing sound. The virus fairly rudely treats INT 16h, might hang up the system, removes the "read-only" attributes, sets file time to 62 sec. |
