Selected viruses, spyware, and other threats: sorted alphabetically
This is a family of memory resident COM and EXE infectors. Their common feature is that after an infected file is executed they reserve a memory block, mark it as a system one and hook the Interrupt INT 21h. Files are attacked when their attributes are altered and when they are executed and opened. The variant CPW.1527 is encrypted. These viruses contain encrypted strings in their bodies. Some of them display themselves depending on date, some mark the files they are going to erase or atatck.
Cpw.1527: CWP fue hecho en Chile en 1992: VIVA CHILE MIERDA! C:\COMMAND.COM TGUARD guard CPAV SCAN CHKVIRUS CLEAN TOOLKIT VSAFE CHKLIST.CPS
Cpw.1459: Este programa fue hecho en Chile en 1992 por CPW Feliz compleanos CPW! C:\COMMAND.COM
Variants with length of 1395, 1457, 1459 and 1527 bytes are known.
© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.