Fullname: | AntiCMOS |
Common Name: | AntiCMOS |
Technical Name: | AntiCMOS.A |
Family: | AntiCMOS |
Aliases: | Lenart, Anti-CMOS |
Isolationdate: | January 1994 |
Author: | Unknown (possibly Li Xibin) |
Common Name: | AntiCMOS.B |
Technical Name: | AntiCMOS.B |
Family: | AntiCMOS |
Aliases: | LiXi |
Isolationdate: | Mid-1995 |
Isolation: | Unknown |
Author: | Li Xibin |
Common Name: | AntiCMOS.C |
Technical Name: | AntiCMOS.C |
Family: | AntiCMOS |
Aliases: | Anti-CMOS.C |
Isolationdate: | 1995 |
Isolation: | Unknown |
Origin: | China (?) |
Author: | Unknown (possibly Li Xibin) |
AntiCMOS is a boot virus. Its first discovery was at Lenart, Slovenia, which led to its alias of Lenart. It was isolated in Hong Kong several times at the beginning of 1994, but did not become common until it spread to North America in the Spring of 1995. AntiCMOS is a fairly standard boot virus, and is primarily notable for being one of the few DOS viruses to remain in the wild as of 2020.[1]
AntiCMOS is so named because it has the intended effect of erasing all CMOS information. This does not occur because of a bug in the virus code. This is true of all AntiCMOS variants that have appeared in the wild. The payload date of December 1993 and the obsolete nature of these variants makes it very unlikely that AntiCMOS's payload will ever be a threat.
AntiCMOS.B is a boot virus. It was isolated in mid-1995. Like AntiCMOS.A, AntiCMOS.B became common worldwide. However, this variant never reached the success level of the original, and is now considered obsolete.Infected floppy disks contain the following text:
I am Li Xibin
Additionally, AntiCMOS.B attempts to play a tune, but this fails due to coding errors http://www.f-secure.com/v-descs/anticmos.shtml. AntiCMOS.B is otherwise a typical boot virus, much like its predecessor.
AntiCMOS.C is a boot virus and very minor variant of the AntiCMOS family. Unlike AntiCMOS and AntiCMOS.B, AntiCMOS.C remained in the field for a very short period of time, and is now considered entirely obsolete.