home *** CD-ROM | disk | FTP | other *** search
- ArjDropper.402
-
- ---------------------------------------------------------------------------
- It is a harmless nonmemory resident virus-worm 402 bytes of length. When an
- infected file is executed, the virus searches for ARJ archives and appends
- its copy to archives that are found. The virus copy in archives is stored
- in format of ARJ data and has the filename RUNME.COM. This RUNME.COM file
- contains a copy of the virus, and being extracted from infected archive it
- may spread the virus code to other archives. The virus contains the text
- strings:
-
- *.ARJ
- ARJDrop by Qark/VLAD
- RUNME.COM
-