FANDOM


Virus.DOS.3Y.853 is a memory resident parasitic virus on DOS.

Payload

When the virus is loaded into memory, will install itself memory resident at the top of system memory but below the 640K DOS boundary, not moving interrupt 12's return. It hooks INT 21h to infect any DOS executable except COMMAND.COM that is run by writing itself to the end of the file.

When an infected program is run, the virus displays the following:

Command.                                  3Y_06b.COM Ver0.6b  Copyright 1992 3Y2H   R3Y_06a.EXE