Tps.484
Description Tps.484
It is a nonmemory resident very dangerous virus. It searches for all .COM files in the current directory and overwrites them. Before return to DOS the virus displays the message: "Program too big to fit in memory". The virus then leaves in the system memory a program that hooks INT 1Ch and in some time displays: "HI!".
The virus depending on the system time tries to format the hard drive, but fails because of a bug. The virus also writes to the C:AUTOEXEC.BAT file commands that delete files:
@del *.com
@del *.exe
@del *.sys
The virus also contains the text "TPS" and encrypted text in Russian.
Check other viruses! Be aware! Use Antiviral Software
Cls.853
Description Cls.853
This virus is memory-resident and not dangerous. It by standard way infects COM-, EXE- and OVL-files when they are loaded into the memory. Approximately once an hour the virus clears the screen. It hooks INT 8, 13h, 21h. The virus produces an error that appears when a write-protected disk is accessed in the 13h interrupts level.
CMOS.a
Description CMOS.a
It is a dangerous memory resident stealth boot virus. It corrupts the CMOS memory. On loading from infected disk the virus copies itself to the address 9F80:0000, hooks INT 13h and writes itself to the MBR of the hard drive and the boot sectors of the floppy disks. The original MBR is saved to the second sector on the hard drive, the boot sector of floppy disk to the last sector of root directory on the disk.
|