FANDOM


Virus.Multi.3nop is a dangerous memory resident multipartite stealth virus on MS-DOS.

BehaviorEdit

On loading from an infected floppy, it writes itself into the MBR of the hard drive. Then it hooks INT 13h (as loading from infected HD) and checks the functions of disk reading and writing. On reading from floppy, it infects the boot sector of the floppy, on writing on the floppy the virus checks first three bytes of data buffer. If there is JMP opcode (E9h), the virus overwrites 200h bytes of this buffer by virus' code. So the virus can insert itself into the executable file beginning or middle. On execution of this file the virus infects MBR of hard drive and returns to DOS.

These files are not recoverable and should be deleted.

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.