| Description:
|
Details
Tula.635
This is a memory-resident parasitic virus. It decreases the DOS memory size (the word at address 0000:0413) and hooks INT 8, 13h, 21h. This virus writes itself to the end of the files that are executed. The virus infects only COM files, or both COM and EXE depending on the virus version.
This virus displays the message:
Formatting driveall
and reads a disk sectors (but by rewriting one byte of code it can really format a disk). |
