Advertisement

Virus.DOS.3tunes.1784 is a memory resident parasitic polymorphic virus on DOS.

Behavior

The virus first infects COMMAND.COM after loading into memory, and then it hooks INT 21h to infect any executable that is run or called by opener by writing itself to the end of the file.

Not every file would be infected, and it does not infect goat files.

Advanced details

The TSR memory usage of the virus is 2,304 bytes.

Payload

When an infected program is run in June, the virus hooks INT 1Ch to play tunes.

Virus.DOS.3tunes -3tunes DOS Virus-
Video of 3tunes in action Virus.DOS.3tunes -3tunes DOS Virus-


Community content is available under CC-BY-SA unless otherwise noted.