%%File: VIRS0636.TXT
%%Name/Aliases: Plovdiv, Plovdiv 1.1, Plovdiv 1.3, Damage 1.1, Damage 
1.3, Bulgarian Damage 1.3
%%Platform: PC/MS-DOS
%%Type: Program., 
%%Disk Location: COM application., EXE application.
%%Features: Memory resident; TSR above TOM.
%%Damage: Corrupts a program or overlay files., Attempts to format the 
disk.
%%Size: Overlays application, no increase1000 bytes in files, 1328 bytes 
in memory
%%See Also: 
%%Notes: The virus identifies infection by the seconds field in file 
time.  It allocates a memory block at high end of memory, 1344 bytes 
long  Programs are infected at load time (using the functionload/execute 
of MS-DOS) 
and whenever a file is opened with the extension of .COM or .EXE  The 
virus carries an evolution counter that 
is decreased every time the virus is executed.  At 0, virus reads system 
timer, if the value of hundreds > 50 
virus will format all available tracks on current drive (effectively 50% 
chance of destruction)
The virus knocks out the transient part of COMMAND.COM forcing it to be 
reloaded and thereby infected, therefore it is a "fast infector"     
contains string "(c)Damage inc. Ver 1.3 1991 Plovdiv S.A."