Bomber (computer virus)

Bomber (also known as Commander Bomber) is a DOS polymorphic memory resident computer virus, known for its technique of "patchy infection". This method of infection is very similar to that which is utilised by the OneHalf computer virus.

Bomber
AliasesCommander Bomber
ClassificationVirus
TypeDOS
SubtypeFile and boot infector
Point of originBulgaria
Author(s)Unknown

Contrary to the usual method of infecting executables (which is to append virus body to the executable and to change the entry point), it inserts several fragments ("patches") of its code in random places inside the file. These fragments transfer control to each other using various mechanisms.

The method of infection makes the detection of the virus difficult by anti-virus programs, and it means that they would have to scan the file in its entirety in order to detect the virus.

The size of the Bomber executable is approximately 4096 bytes and contains the following text:

                                                COMMANDER BOMBER WAS HERE
                                                      [DAME] [DAME]


This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.