Details
MidInfector.765
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes “JMP VirusCode” instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with “JMP VirusCode”.
Related Posts
MidInfector.76...
This entry was posted
on Thursday, September 13th, 2007 at 3:50 am and is filed under Virus Threats.
Details
MidInfector.760
This is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed.
The virus contains the text string:
MidInfector by Dark Slayer of [TPVO]
The virus writes “JMP VirusCode” instruction to the file middle. While infecting the virus reads the file into the system memory, and disassembles the file code instruction-by-instruction (the virus contains primitive disassembler). The disassembler stops at interrupt calls (CD), jumps on condition (Jcc), FAR JMP/CALL, and some other instructions, and the virus overwrites that instruction with “JMP VirusCode”.
Related Posts
MidInfector.76...
This entry was posted
on Wednesday, September 12th, 2007 at 11:50 pm and is filed under Virus Threats.