CompuServe Messages

#New VirusX soon?

    09-Jan-89 13:00:25
Fm: Steve Tibbett 72627,1325
To: Betty Clay/SYSOP 76702,337
The IRQ virus will only show it's name on the title bar about 3% of the time. 50% of the time it will infect the C:DIR program, and 50% of the time it will inspect your startup-sequence and infect the first program found there. Possible scenario: – Download program from Wherever, which is infected. – CD HardDisk: – Run Program – Virus loads into memory and sits there (doesn't do anything right away, I don't think) – Whenever you run a program which calls OldOpenLibrary() (which some programs don't use at all), the virus hops into action. – It will look at :C/DIR, and infect the DIR command on whatever disk you are CD'ed to at the time, or it will look at :S/Startup-sequence and infect the first program in it. – Now, whenever you boot, the first line of your startup sequence loads the virus into memory, and MAY show you it's name but probably not. There's really not much else to it than this. It doesn't do anything harmful in it's current form, but as has been pointed out, having it reformat the current disk every 50 boots would be a trivial addition.