Welcome to the Virus Encyclopedia of Panda Security.
It is a cross infection virus that infects BAT, CMD and MSH files adding its code to the end of them.
|First detected on:||Aug. 5, 2005|
|Detection updated on:||Aug. 5, 2005|
|Country of origin:||AUSTRIA|
Damon.B is a proof of concept virus that uses the technique known as cross infection in order to infect files with a BAT, CMD and MSH extension.
Using cross infection, Damon.B can replicate by running from the batch scripting interpreter or the MSH interpreter. In order to do so, the batch code is blended with the MSH code, and its execution will be different depending on the shell in which it is run.
MSH (Microsoft Shell), also known as Monad, is a shell that will replace earlier shells, such as cmd and command. New characteristics of MSH include the capability to interact with .NET objects, among others.
This shell will be included in the Windows Vista operating system, but not by default.
Damon.B is difficult to recognize, as it does not display any messages or warnings that indicate it has reached the computer.