Malware Wiki
Advertisement

Virus.DOS.3tunes.1784 is a memory resident parasitic polymorphic virus on DOS.

Behavior[]

The virus first infects COMMAND.COM after loading into memory, and then it hooks INT 21h to infect any executable that is run or called by opener by writing itself to the end of the file.

Not every file would be infected, and it does not infect goat files.

Advanced details[]

The TSR memory usage of the virus is 2,304 bytes.

Payload[]

When an infected program is run in June, the virus hooks INT 1Ch to play tunes.

Virus.DOS.3tunes_-3tunes_DOS_Virus-

Virus.DOS.3tunes -3tunes DOS Virus-

Video of 3tunes in action


Advertisement