zerohunter famil
Webroot Antivirus: The best protection against viruses, spyware data theft and hackers.
Description:
Details
Zerohunter Family
These are memory resident harmless stealth parasitic viruses. They infect COM-files which contain the instruction JMP NEAR (E9h) at beginning. The files are infected while they are started. The viruses search the entire files for the zero bytes area and write themselves into this area. So the file length not grown.
The viruses use stealth algorithm on Read Handle and FCB functions of INT 21h: the viruses erase their bodies into read buffer after reading. They also restore old 4 bytes at the beginning of the file.
Copyright @2006 zerohunter famil