%%File: VIRS0519.TXT
%%Name/Aliases: Loren
%%Platform: PC/MS-DOS
%%Type: Program., 
%%Disk Location: EXE application., COM application.
%%Features: Memory resident; TSR.
%%Damage: Corrupts a program or overlay files., Attempts to format the 
disk.
%%Size: 
%%See Also: 
%%Notes: v6-125: Loren infects all .COM and .EXE files opened for 
execution and all files referenced by Int 21 fn 11 and 12, which are 
obsolete commands still used by  the DIR command.  Thus, if the virus is 
in memory, using DIR will infect all COM and .EXE files opened.  The 
virus hides increases in file length when active in memory.

The virus counts the number of files infected, and if the counter 
reaches 20  the warhead is triggered.  This tries to format cylinder 0, 
head 0 on  drive C.  If this fails, it tries drives A and B.  If it 
suceeds in  formatting any drive the following message is put to screen:

	Your disk is formatted by the LOREN virus.
	Written by Nguyen Huu Giap.
	Le Hong Phong School *** 8-3-1992

and the counter is reset.  A low level format will usually be needed to  
recover affected hard disks.