|
Zerohunter Famil Viruses Information
| Name: |
Zerohunter Famil |
| Category: |
Viruses |
| Description:
|
Details
Zerohunter Family
These are memory resident harmless stealth parasitic viruses. They infect COM-files which contain the instruction JMP NEAR (E9h) at beginning. The files are infected while they are started. The viruses search the entire files for the zero bytes area and write themselves into this area. So the file length not grown.
The viruses use stealth algorithm on Read Handle and FCB functions of INT 21h: the viruses erase their bodies into read buffer after reading. They also restore old 4 bytes at the beginning of the file. |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Macro.Word97.Cyberhac
Jerusalem.MB
Manowar.59
Mvf.186
Btg.79
Tremo
Hider.216
Tula.148
WinScript.77
Macro.Word.Percen
|
