| Description:
|
Details
Edolan.832
It is a very dangerous memory resident parasitic virus. It writes itself to the end of .COM files except COMMAND.COM. Being executed the virus hooks INT 21h and intercepts the execution of the files (AH=4Bh). While executing a .COM file the virus infects that file, then searches for *.COM files in the current directory and infects them, next the virus searches for *.DBF files and scans them for the string EDOLAN. If that string is found, the virus erases the sectors of C: and D: drives. The virus has a bug, as a result the infected files of small length being executed halt the system. The virus contains the text strings:
COMMAND.COM
*.DBF
*.COM |
