Details Amber It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are closed. This virus is stealth on FindFist/Next calls. When several anti-viruses or file compressing utilities are run (ADINF, WEB, AIDSTEST, SCAN, ARJ, ZIP, LHA, RAR), the virus disables its stealth branches. The virus contains the text strings: NFEBSTANRJIPHAAR [·This is only ForeWord·]

Leave a Reply

Your email address will not be published. Required fields are marked *