Name: Liberty. Category: Viruses Description: Details Liberty.a This is a resident and dangerous virus. It infects COM and EXE files while executing. The virus infects EXE files in a standard way. To infect COM file the virus adds itself to the end of the file and puts 78 h bytes of the virus code into the beginning of the file (the virus encryption and activating); the virus decrypts the old part of the file from the beginning and saves it into the own body. This virus infects boot sector of the floppy disk if there isn't free space on the disk to infect the files. The virus places the original boot sector and the body of the virus onto the 40th track of the disk (a non standard formatting is used in that case). This process can destroy information on high capacity floppy disks (1M). The virus infects memory if an infected COM-file was started or if it was used for the system rebooting. Some time after rebooting the system from a floppy disk the virus encrypts and outputs to the screen, printer and communication ports the string "MAGIC MAGIC MAGIC MAGIC all...". This virus cures the floppy disk on the 10th rebooting from it. It hooks INT 8, 10h, 13h, 14h, 17h, 1Ch, 21h and contains the strings: "Liberty", "- MYSTIC - COPYRIGHT (C) 1989-2000, by SsAsMsUsEsL".