Elsa.857
Description Elsa.857
It is not a dangerous nonmemory resident parasitic virus. It searches for COM files, then writes itself to the beginning of the file. To locate files to infect them the virus does not uses "standard" DOS INT 21h calls, but reads and processes directory sectors by direct disk calls. While infecting the virus allocates DOS memory and uses video memory for store temporary data.
Because of a bug the virus does not work on Pentium computers. The virus contains the text strings:
[Simb_NkEi]
SIMBULE_NkEI_RofA_.03.99
[ELSA_FA6]
fait grisall! Bisous ptite cherie !
Check other viruses! Be aware! Use Antiviral Software
CPSU.2535
Description CPSU.2535
It's a memory resident not dangerous virus. It hooks INT 21h and infects by a standard manner COM- and EXE-files. It displays the old soviet communist slogan.
Cpw.1459 / Cpw.1527
Description Cpw.1459 / Cpw.1527
This is a dangerous memory resident virus. It hooks INT 16h and 21h, and infects COM- and EXE-files by a standard manner upon accessing to them. On May 27th, it types: "Feliz cumpleaños CPW!" and hangs up the computer. It also changes the key scancodes and contains the following text strings:
Este programa fue hecho en Chile en 1992 por CPW.
C:COMMAND.COM
You are here CPW!
It contains the encrypted file names list:
îÄCNCGUARDEMSCPAVSCANCLEANFINDVIRUCHKVIRUS
and does not infect the files from this list. This infector can also delete these files.
Cpw.1527
This is a memory resident dangerous parasitic encrypted virus. It hooks INT 21h, and writes itself to the end of COM- and EXE-files. On September 11th, December 28th, and May 27th it deletes the files. It contains the internal text strings:
CPW fue hecho en Chile en 1992, VIVA CHILE MIERDA!
C:COMMAND.COM
It contains the following list of file names which are deleted:
GUARD guard CPAV SCAN CHKVIRUS CLEAN TOOLKIT VSAFE CHKLIST.CPS
|