Details
Bootache.2048
This is the memory resident multipartite polymorphic virus. When loaded from infected file it hooks INT 21h and writes itself at the end of COM-, EXE- and SYS-files that are executed or opened. When loaded from infected sector it hooks INT 13h and writes itself into the boot sectors of the floppies. The file infection algorithm of this virus do not spread boot infection, the boot infection do not spread file infection. It looks as two different viruses in one file.
It contains the following strings:
COMSPEC=\COMMAND.COM
COMEXEOVLSYS
*YAM*
Your PC has a bootache! - Get some medicine!
Ontario-3 by Death Angel

Related Posts

This entry was posted on Monday, July 24th, 2006 at 8:00 pm and is filed under Virus Threats.