| Port No | 2156 |
| Service Name | Oracle |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | This non-polymorphic, memory-resident DOS virus infects COM and EXE files that are executed, opened, or closed, and when the DOS command DIR is executed. |
| Reference Link | Oracle Trojan |
| Attack |
INFORMATION :This virus hooks the DOS function, interrupt, INT 21h, to install itself in memory. Once in memory, it infects COM and
EXE files that are executed, opened, or closed, and when the DOS command DIR is executed. To infect, it writes itself at the end of target files.
The following text strings are found in the virus body: [Oracle] by MnemoniX |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.