We have receieved reports of an overwriting
virus infecting some computers in China. This infector locates for
files in the system and overwrites them with all 69KB of its code.
After the virus is done with the file, the latter is rendered
useless and irrecoverable.
Since the virus is only 69KB in size, file which have more than
that number of bytes retain their sizes, but their extra bytes will
no longer function. And, as for the files that have less than 69KB
in size, they become purely 69KB of virus code.
This virus is now detected as PE_NOFACE.B.
virus infecting some computers in China. This infector locates for
files in the system and overwrites them with all 69KB of its code.
After the virus is done with the file, the latter is rendered
useless and irrecoverable.
Since the virus is only 69KB in size, file which have more than
that number of bytes retain their sizes, but their extra bytes will
no longer function. And, as for the files that have less than 69KB
in size, they become purely 69KB of virus code.
This virus is now detected as PE_NOFACE.B.