home *** CD-ROM | disk | FTP | other *** search
- -----
- IMAGE
- -----
-
- This virus spreads itself very fast. Every time the OS_File vector
- (FileV) is called, the virus looks if the file <Obey$Dir>.Image
- exists. If it does,no further action is undertaken. Otherwise the
- file 'Image' is written inside the <Obey$Dir> and it looks if the
- file <Obey$Dir>.!Boot exists. If not, one will be created that
- contains a line to call the Image file. Otherwise the
- <Obey$Dir>.!Run file is copied as <Obey$Dir>.!Spr and a new !Run
- file is created that also contains a line to call the Image file.
- It loads into OS workspace at 5500, so the chances of it being
- overwritten and causing a crash are quite high.
-
- Quick Check: A file called Image appearing in application
- - length 512 bytes, and no filetype.
-
-
-