| Description:
|
Details
OS2.Jiskefet
It is a harmless nonmemory resident parasitic virus. It searches for NewEXE (LX) files, reads 2048 (800h) bytes from the file beginning, writes that data to the end of the file, and then writes itself to 2048 bytes of the file header. Then the virus creates a temporary file, copies the host file there, disinfects and executes that file. Then the virus returns control to the system.
While searching and infecting the files, the virus uses OS/2 calls:
DosExit DosChgFilePtr DosClose DosDelete DosFindClose DosFindFirst
DosFindNext DosNewSize DosOpen DosGetEnv DosRead DosWrite DosExecPgm
The virus contains the text strings:
Jiskefet
DOSCALLS
*.EXE
MK |
