Virus Database

Before.2915

Description Before.2915

It is not a dangerous memory resident parasitic virus. The virus was written in Assembler and its actual code is 1164 bytes, but after that virus author compressed it with AIN executable files compressor, and result virus code (compressed actual virus code and decompression routine) grows up to 2915 bytes.
The virus hooks INT 21h and writes itself to the beginning of COM and EXE files that are executed. The virus does not infect the files: CO*, WI*, EM*, SH*, GD* (COMMAND, WIN, EMM386, all). Depending on the system time and video mode the virus disables executing files (does not allow to start games?). The virus contains the text strings:
COWIEMSHGD
BEFORE.CE.1136 (C) PC Soft Club

Check other viruses! Be aware! Use Antiviral Software

Tanpro Family

Description Tanpro Family

These are memory resident parasitic viruses. They hook INT 21h and write themselves to the beginning of COM and EXE files that are executed. The viruses contain the text string:
(c)tanpro'94

"Tanpro.524" is a harmless virus, it does not manifest itself in any way. "Tanpro.749" depending on its internal counters "shakes" the screen. It also contains the text:
Screen Shaker 5th

Tanya family

Description Tanya family
This virus corrupts the DRWEB.EXE anti-virus, and displays messages written in Russian. If a Windows NewEXE file is found (NE, PE), the virus overwrites it with a program that displays the following message:
This program must be run under OS/2.

The virus also contains the texts:
*.æ0M *.àòE
PATH=COMSPEC=OBSHCHESTVO=
DRWEB.EXE

Home