Cls.853
Description Cls.853
This virus is memory-resident and not dangerous. It by standard way infects COM-, EXE- and OVL-files when they are loaded into the memory. Approximately once an hour the virus clears the screen. It hooks INT 8, 13h, 21h. The virus produces an error that appears when a write-protected disk is accessed in the 13h interrupts level.
Check other viruses! Be aware! Use Antiviral Software
BAT.Sys
Description BAT.Sys
This is a harmless batch virus just 602 bytes of length. It uses "worm" technology to spread: on floppy disks the virus replaces the AUTOEXEC.BAT file and is automatically executed when the system is loaded from such disk, on hard drive the virus replaces SYS.COM file and is executed when DOS is transferred on a new disk.
On loading from infected floppy disk the virus looks for C:WINDOWSCOMMANDSYS.COM file, renames it to SYS.OLD in the same directory, sets Hidden attribute for this file and copies itself to the SYS.BAT file to the same directory.
As a result when a users runs SYS command the virus takes control. The virus then temporary renames SYS.OLD to SYS.COM, executes it, renames it back to SYS.OLD and copies itself to the AUTOEXEC.BAT file on destination disk.
BAT.Tus.1680
Description BAT.Tus.1680
This is a relatively harmless memory resident polymorphic parasitic virus. It stores inside itself a COM dropper. After starting from a COM file, the virus keeps in memory its TRS copy and hooks INT 21h. The new handler INT 21h writes into BAT files that are opened. The virus does not manifest itself in any way.
|