Click anywhere to stop


Class Virus
Platform OS2

Technical Details

It is a harmless nonmemory resident parasitic virus. It searches for NewEXE
(LX) files, reads 2048 (800h) bytes from the file beginning, writes that
data to the end of the file, and then writes itself to 2048 bytes of the
file header. Then the virus creates a temporary file, copies the host file there, disinfects and executes that file. Then the virus returns control to the system.

While searching and infecting the files, the virus uses OS/2 calls:

DosExit DosChgFilePtr DosClose DosDelete DosFindClose DosFindFirst
DosFindNext DosNewSize DosOpen DosGetEnv DosRead DosWrite DosExecPgm

The virus contains the text strings:


Find out the statistics of the threats spreading in your region