Virus.Multi.Anthrax

Technical Details

This virus stays resident in memory. It infects COM- and EXE-files and MBR of
the hard disk in a standard way. The MBR is hit when an infected file is
started. The virus saves its part and the MBR sector at the location 0/0/2
(track/head/sector).

The virus infects memory while booting from an infected disk. After that it
infects files only. The virus hooks INT 21h and contains the strings:
“ANTHRAX”, “(c) Damage, Inc”.