Selected viruses, spyware, and other threats: sorted alphabetically
Quicky is a memory resident encrypted EXE infector. Upon executing an infected file the virus hooks the interrupts INT 21h and INT 13h; it ensures that the file it parasites on is executed. Files are infected when they are opened or closed. When infecting a file the virus checks if there is enough free space in memory – if not, infecting will not take place. Files CHKLIST.TAV, ANTI-VIR.DAT and CHKLIST.MS are deleted if the virus finds them when infecting. While servicing the interrupt INT 13h, at certain circumstances the virus alters one byte when writing on the disk. That may cause loss of data.
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.