Maximize
Bookmark

VX Heavens

Library Collection Sources Engines Constructors Simulators Utilities Links Forum

A different way to make a TSR virus (or how a boot virus can hook dos interrupts)

Somniun

[Back to index] [Comments (0)]

Abstract

Moreover, most boot virus cannot hook DOS interrupts,because when boot-virus loads aren't present DOS interrupt ,because dos loads after virus. In this example this boot-virus can hook INT 40 (dos int) and in the ended of load of virus, it restore a vector table and vector table looks intact.

[Read the article]

deenesitfrplruua