Ppsp.1526
Description Ppsp.1526
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM files. It contains the text strings:
at the beginning of infected file: "PP" and "SP",
at the middle of the virus body: "*.COM" and "COMMAND.COM".
Check other viruses! Be aware! Use Antiviral Software
Saratov.1790
Description Saratov.1790
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of .COM and EXE files that are executed or opened. The virus corrupts the CHKLIST.MS file, if is exists, while infecting a file the virus checks the file name, and does not infect the files from the list (three symbols per name):
EVRWD.800COMDRWANTAIDWEBWINKRNSCACLEPT.
The virus also scans the screen buffer for "Web" string, and terminates infection if that string is found.
Depending on the system timer the virus displays the message:
Thanks for using Saratov software.
The virus intercepts the execution of the programs with "/c vir" argument and may have to display the message followed by virus' "generation" number, but fails. The message is:
The File Corrector v2.0. Made in Saratov. Serial #
Sarcoma.1328
Description Sarcoma.1328
It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed or closed. While installing memory resident the virus also infects the C:COMMAND.COM file. The virus then opens the C:CONFIG.SYS file, looks for "SHELL-" command in there and infects corresponding file, if it exists.
The virus does not manifest itself in any way. It contains the text string:
'COMPUSARCOMA' virus by M.S.S.
|