VirTool.DOS.TPE

Technical Details

This is a benign memory resident stealth polymorphic

parasitic TPE-based virus. It hooks INT 21h and writes itself to the

end of accessed COM and EXE files. It contains the text strings:

This is KELA-17 version virus.
KELA-17 very nice virus . Ha Ha HaHa
KELA – 17. Copyright (c) 1994 by KELA. All Rights Reserved.

and the text strings in Russian. On Friday the 13th, it runs itself utilizing a video

effect.