Junkie.1027.A

Analysis

• Viral body is 1027 bytes and is encrypted
  
• Virus is multipartite - it will infect the MBR, .COM files and floppy boot records
  
• When virus loads from MBR, it remains memory resident then infects .COM files when accessed
  
• If infected floppy is in pc upon boot, virus code may be transferred to system MBR and become memory resident at next system boot
  
• Unless a floppy is write-protected, it becomes infected when accessed from an infected pc
  
• Infected .COM files contain this encrypted string-

  Junkie Virus - Written in Malmo