| Description:
|
Details
Sojourn.1369
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. It does not infect anti-viruses and utilities SCAN, CLEAN, F-PROT, GUARD, COMMAND, TB*. Depending on the system time it appends to the C:CONFIG.SYS file the instruction: "DOS=SINGLE".
The virus also contains the text strings:
^Have you ever been to Sweden?^
CLEASCANF-PRGUARCHKDCOMMTB
^VIRAL SOJOURN (c)96 Evil Elk^ |