Torero.1427
Description Torero.1427
These are dangerous memory resident parasitic viruses. They hook INT 13h, 21h and write themselves to the end of .COM files that are opened.
To recognize already infected files the viruses set 7th bit of file attributes (this bit means "shareable" for network) and check that bit before infecting files. The viruses do not save in their code the original bytes from COM file header, but write them to the reserved fields of file's directory entry. Both these methods may corrupt the files while copying or accessing them.
If the viruses cannot get original COM header bytes from directory entry to restore the host program, they display the message and return to DOS:
This program requires Microsoft Windows.
The viruses also contain the text strings:
[Torero Ç:-) by Mister Sandman/29A]
;)
Check other viruses! Be aware! Use Antiviral Software
Poss Family
Description Poss Family
There are memory resident dangerous parasitic viruses. They hook INT 8, 21h and write themselves to the end of COM and EXE files (except COMMAND.COM). Sometimes they delete the files. They manifest themselves by the face picture which is drawn on the screen. They also contain the text strings:
COMMAND.COM
POSSESSED! Bwa! ha! ha! ha! ha!
Author: JonJon Gumba of AdU
:*.COM :*.EXE
Potpis.696
Description Potpis.696
It is not a dangerous memory resident parasitic virus. It hooks INT 21h and writes itself to the end of .COM files that are executed. On May 1st the virus displays the message:
Matija Papec 4.k Maturalna radnja 1994.
The virus also contains the text:
Potpis
|