#New VirusX soon?
09-Jan-89 13:00:25
Sb: #29352-#New VirusX soon?
Fm: Steve Tibbett 72627,1325
To: Betty Clay/SYSOP 76702,337
The IRQ virus will only show it's name on the title bar about 3% of the
time. 50% of the time it will infect the C:DIR program, and 50% of the
time it will inspect your startup-sequence and infect the first program
found there.
Possible scenario:
– Download program from Wherever, which is infected.
– CD HardDisk:
– Run Program
– Virus loads into memory and sits there (doesn't do anything right
away, I don't think)
– Whenever you run a program which calls OldOpenLibrary() (which
some programs don't use at all), the virus hops into action.
– It will look at :C/DIR, and infect the DIR command on whatever
disk you are CD'ed to at the time, or it will look at
:S/Startup-sequence and infect the first program in it.
– Now, whenever you boot, the first line of your startup sequence
loads the virus into memory, and MAY show you it's name but probably
not.
There's really not much else to it than this. It doesn't do anything harmful
in it's current form, but as has been pointed out, having it reformat the
current disk every 50 boots would be a trivial addition.