|
Written by Ashish Kumar
|
|
Saturday, 22 March 2008 |
|
A companion virus is one that, instead of modifying an existing file, creates a new program
, which (unknown to the user) gets executed by the command-line interpreter instead of the intended program. (On exit, the new program executes the original program so things will appear normal.) This is done by creating an infected .COM file with the same name as an existing .EXE file. Note that this type of malicious code is not always considered to be a virus, since it does not modify existing files.) |
