| Description:
|
Details
Yosha.440
It is a harmless memory resident multipartite virus. While executing an infected file the virus writes itself to the MBR of the hard drive and returns to the host program. While loading from infected MBR the virus hooks INT 13h, waits for DOS loading process, hooks INT 21h and then writes itself to the end of COM files that are executed. By hooking INT 13h the virus also realizes the stealth routine while accessing to the infected MBR. The virus contains the text string:
ELDOB1X by Yosha/DC |
