P&C.855
Description P&C.855
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. It contains the text string:
P&C°
Check other viruses! Be aware! Use Antiviral Software
BAT.Hot2Trot
Description BAT.Hot2Trot
It is a dangerous nonmemory resident parasitic BAT virus. It searches for .BAT files in the current and parent directories, then writes itself to the end of the file. The virus uses an infecting way similar to parasitic COM infectors - it writes its code to the end of the file and inserts GoTo_Virus command to the file header:
+---------------+
¦@echo off ¦ Jmp-to-virus commands
+------¦goto HotToTrot3¦
¦+---->¦:To ¦
¦¦ +---------------¦ Original BAT file commands
¦¦ ¦all ¦
¦¦ ¦... ¦
¦¦ ¦... ¦
¦¦ +---------------¦
¦¦+----¦goto Trot3 ¦ Jump to return-to-DOS command
¦¦¦ +---------------¦
+----->¦:HotToTrot3 ¦ Main virus code
¦¦ ¦... ¦
¦¦ ¦... ¦
+-----¦goto To ¦ Return to host program
+--->¦Trot3: ¦ Return to DOS
+---------------+
While infecting a file the virus accesses DOS functions (INT 21h). To do that it creates and runs two temporary COM files - saves their hexadecimal dump to disk and converts it to binary file by using DEBUG (if there are no DEBUG in PATH, the virus may corrupt the files while infecting them).
BAT.IBBM.ClsV
Description BAT.IBBM.ClsV
This is a harmless batch virus. It searches for .BAT files in the current and parent directories, then writes itself to the end of files. It writes its copy to the C:CLSV.BAT file and by using DOS utility DOSKEY makes this file to be executed on DOS command CLS (Clear Screen).
|