Details
Unlearned.488

It is not a dangerous nonmemory resident parasitic virus. It searches for .COM files, then writes itself to the end of the file. It leaves a memory resident program that hooks INT 9 and depending on its internal counter modifies the data in keyboard buffer - it replaces Cyrillic ‘a’ with ‘o’ and ‘e’ with ‘i’ (the most common grammar mistakes in Russian).

Related Posts

This entry was posted on Saturday, May 17th, 2008 at 3:50 am and is filed under Virus Threats.