Sophos

Junkie

Aliases
  • DrWhite.
Category
Type
What to do
Prevalence low high

Summary

 
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Junkie is a reasonably simple multipartite virus that infects COM files, MBRs and floppy boot sectors. The virus only becomes resident when started from a boot sector; the COM form acts only as a dropper for the MBR form, doing nothing else.

On hard disk, the virus' two extra sectors of code are stored on the first track; on floppy, they are located at the end of the disk, and (being unprotected) may be overwritten by data. The code is encrypted in a very basic way.

Junkie infects COM files either when they are opened or when they are executed. If a virus scanner does not find Junkie in memory, it could infect all COM files on the system as it scans. However, since Junkie is quite old, this is no longer a real problem.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer