AntiEXE
| AntiEXE |
Destructivity:  Spreading:  Overall risk:
|
| • Detected by virus detection files published: 1/1/1999 | • Type: Virus |
| • Virus characteristics first published: 1/1/1999 | • Spreading mechanism: Floppys |
| • Virus characteristics latest update: 12/17/2003 | • Overall risk: Low |
| Virus type |
Spreading mechanism |
Destructivity and payload |
Additional descriptions |
Detection and removal |
||||||||||
|
The only way to become infected with this virus is to boot the machine with an infected diskette in the diskette drive. The virus is memory resident; meaning it places itself in the memory and infects all diskettes used in the computer after infection. When the virus infects a non-write protected diskette, it moves the original boot sector to the last sector of the root-directory or to a cluster marked "Bad". AntiExe overwrites Master Boot Record (MBR) on the hard disk and saves the original on sector 13. The virus uses "stealth" technique to make the infected boot sector look "clean" when you do a check with the virus memory resident. The virus contains all the standard information for a normal MBR. If a user try to boot the machine with an infected diskette, the hard disk will become infected, regardless if the boot was successful or not. |
||||||||||||||