Viral Rewind: Virus.DOS.Virdem (1542)

Visit my Linktree to access my socials and other channels: linktr.ee/mausolfb
-----------------------------------------------------------
. Virdem.1542 is a variant of the original Virdem DOS virus (short for "Virus Demo") that is a direct-action infector of all .COM files on a machine. When executed it searches for one .COM file to infect on the system. Generally it will start with files in the current directory it is run from and then expand outward from there to other directories. It will infect COMMAND.COM and WIN.COM if Windows is installed. When there are no more files to infect with Virdem then it will activate its payload.
Payload: When an infected .COM is run Virdem will search the disk for more .COMs to infect. If it does not detect any uninfected .COMs remaining then it will display a fullscreen graphical animation of expanding diamonds of various colors on a loop. This payload will run in place of the intended program thus the original program will never run. The payload doesn't appear to be timed by the CPU clock as it runs smoothly and at the same rate as on higher speed CPUs. The user can leave this animation by hitting the Esc key and it will return to the DOS prompt (at the root level).
#virus #dos #malware
-----------------------------------------------------------
Like the Facebook page: / brian.mausolf
Follow me on Twitter: / mausolfb