Details
Onkogen.1683

It is not a dangerous memory resident parasitic virus. It hooks INT 8, 21h and writes itself to the end of COM and EXE files that are executed. While installing into the system memory the virus searches for command interpreter by using “COMSPEC=” string and infects it. Some time after installation the virus starts to change the keyboard flags. The virus contains the text strings:
COMSPEC=
* Virtual Onkogen *

Related Posts

This entry was posted on Thursday, November 8th, 2007 at 6:50 am and is filed under Virus Threats.