Bomber (computer virus)

From Wikipedia, the free encyclopedia
Jump to: navigation, search
Bomber
Aliases CommanderBomber
Classification Virus
Type DOS
Subtype File and boot infector
Point of Origin Bulgaria
Author(s) Unknown

Bomber (also known as CommanderBomber) is a DOS polymorphic memory resident computer virus, known for its technique of "patchy infection". This method of infection is very similar to that which is utilised by the OneHalf computer virus.

Contrary to the usual method of infecting executables (which is to append virus body to the executable and to change the entry point), it inserts several fragments ("patches") of its code in random places inside the file. These fragments transfer control to each other using various mechanisms.

The method of infection makes the detection of the virus difficult by anti-virus programs, and it means that they would have to scan the file in its entirety in order to detect the virus.

The size of the Bomber executable is approximately 4096 bytes and contains the following text:

                                                COMMANDER BOMBER WAS HERE
                                                      [DAME] [DAME]

External links[edit]