Virus Database

Config_Boot.b

Description Config_Boot.b

This is harmless memory resident multipartite virus. It's related to the "HMA_Boot" multipartite virus. It creates a file-dropper in the root directory of the C: drive and appends the instruction to load this file into memory ("INSTALL=") to the end of the C:CONFIG.SYS file. The virus also infects the boot sector of drive A: when selecting this drive. To intercept that, the virus hooks INT 21h. While loading from an infected floppy disk the virus also hooks INT 1Ah.
It contains a text string:
C:CONFIG.SYS INSTALL=

Check other viruses! Be aware! Use Antiviral Software

Pest.2728

Description Pest.2728

This is a very dangerous memory resident parasitic polymorphic virus. It traces INT 13h, hooks INT 21h, and writes itself to the end of COM and EXE files that are executed. The virus checks the file names by using the text string:
ASCECLHVSPF-ACPRVINWI

and does not infect files with names that begin with: SCA, CLE, VSH, F-P, CPA, VIR, and WIN. While infecting a file, the virus also checks it for some specific code and pathes it.
Under a debugger, or on the 13th of any month, and depending on the system timer, the virus corrupts the hard drives sectors and reboots the computer. Starting from the 4096th (1000h) infection, the virus overwrites the data saved on the disk with the following text:
PRIEST V.D.G.I. hopes you can recover your data !!!

The virus also contains the text string:
Pest (c) 12/10/93 by (and best wishes from) PRIEST Int., Gbw/Germany

Peterburg.529

Description Peterburg.529

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the beginning of .COM files that are executed. It does not manifest itself in any way.

Home