| Description:
|
Details
Shel.983
It is a harmless memory resident encrypted parasitic virus. It hooks INT 21h and intercepts DOS calls Execute and ChangeDir. When such calls are performed, the virus searches for COM- and EXE- files, then writes itself to the end of the file. The virus does not infect the files: AI*.*, WP*.*, HI*.*, DO*.*, or KR*.*.
The virus contains the internal text string:
(?) Shel,NSTU,1994,v3.1
*.exe *.com
Sh |