| Description:
|
Details
T_Power family
These are dangerous memory resident encrypted parasitic viruses. They hook INT 1Ch, 21h, and on file opening, execution and creating these viruses search for COM and EXE files and write themselves to the end of the file. The viruses do not infect several anti-virus programs, they also search for some anti-virus data files and delete them. Depending on their internal counter "T_Power.Cowa" reboots the computer, "T_Power.Zarma" disables/enables the video refresh. The viruses contain the text strings:
OMSPEC=
*.COM *.EXE
SMART*.* CHK*.* ANTI-VIR.DAT *.VIR NAV_._*
SCAN F- VIR VSH AV .S BMB BMD TB IM IV
They also contain the strings:
"T_Power.Cowa": COWA-BUNGA VIRUS (C) 1994 by Turbo Power *** Claudia
Schieffer Lives !!!
"T_Power.Sodo": [Sodomizator/T.Power] Do you like me ?
"T_Power.Zarma": ZARMA-VIR by T.Power *** Claudia Schiffer Lives !!! |