Deletion of a virus from a program involves finding where in the viral code resource does the virus store the original words of the jump table, and then copying it back into code 0. The eleventh word holds the first code resource that will run. Look for a copy of the third line of code 0 in the viral code and copy it back in. (Compare clean and infected copies of a program to find this out.) You should now be able to delete the viral code resource and have the program run alright. To disinfect the system file, you must get rid of any “INIT” resources. Compare a clean and an infected system file to see what INITs are being installed and delete them. Check the system folder for any files with a type of INIT or RDEV and delete any odd INITs in there.
