Selected viruses, spyware, and other threats: sorted alphabetically

Eddie.651, Eddie.657

These are simple, resident, parasitic COM and EXE infectors. They infect files only when they are executed. The viruses mark infected files by setting the value of seconds at the time of file origin to a nonsensical value of 62. The virus has a partially implemented semi-stealth, and with the DOS command DIR the increase in file lengths is not visible. Utilities of Norton Commander type will reliably detect the increase of length in infected files. Both these viruses are overtures of Dark Avenger, the Bulgarian virus author. At the end of the infected files the uncoded text “Eddie lives” can be seen.

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.