Virus Database

Tiso.940

Description Tiso.940

This is a harmless memory-resident multipartite encrypted (in files) virus. It infects COM files only. On execution of infected file it hits MBR of hard drive. On loading from infected disk it hooks INT 08h, waits for DOS loading and then hooks INT 21h. It writes itself at the end of files that are executed.
This virus is a stealth virus on accessing to infected hard drive, it hooks INT 13h to use that function.
Sometimes this virus decrypts and displays:
Nech zije Jozef Tiso, prvy slovensky prezident !

Check other viruses! Be aware! Use Antiviral Software

Antipas.1101

Description Antipas.1101

It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files (except COMMAND.COM) that are executed. After infecting each file the virus displays a message in Russian. The virus cancels creating and opening .PAS files (Pascal sources) and displays messages in Russian.

AntiPascal Family

Description AntiPascal Family

These are dangerous not memory resident parasitic viruses that contaminate or corrupt not more than two files in all directories on the current disk and C: disk. Searching for noninfected files, the viruses use recursive traversal of the directory tree. They contaminate .COM-, .BAK- and .PAS-files. In case of .COM-file, the viruses write themselves at the end of a file (versions of the viruses with lengths 400, 407, 440 and 480) or at the beginning (all other versions of the viruses). When infecting .BAK and .PAS-files the viruses write themselves at the beginning of a file, not saving the old beginning, i.e. the file is damaged irreversibly. Some of the virus versions rename .BAK- and .PAS-files to .EXE.
"AntiPascal.407" deletes *.?A? and *.SYS files, it contains the internal string: "COSMIC-1".

Home