nocopy.368
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Nocopy.3685
These are not dangerous memory resident encrypted parasitic viruses. They hook INT 20h, 21h, 2Fh and write themselves to the end of EXE files that are accessed. They create file-dropper NOCOPY.COM and insert the string "C:\NOCOPY" to the beginning of C:\AUTOEXEC.BAT file. They correct MBR of hard drive so that while loading from that disk the virus receives the BIOS address of INT 13h.
Copyright @2006 nocopy.368