Details Arab.834 It is a dangerous memory resident parasitic virus that by standard way hits COM-files (except COMMAND.COM) at their starting. The infected files contain the string “nsed Materi” at their beginning. The virus creates a counter into the Master Boot Record of the hard drive at address 180h. The counter increments when every file is started. When the counter grows to 256, the virus writes small code into first 3 bytes of MBR. This code contains 2 assembler instructions that stop a computer booting. The infector hooks INT 21h.

Leave a Reply

Your email address will not be published. Required fields are marked *