Virus Database

Flat.1000.a

Description Flat.1000.a

This is a harmless, memory-resident encrypted parasitic virus. It hooks INT 21h, and writes itself to the start of COM files that are executed. The virus contains eight subroutines. It moves their places upon each installation in memory. The virus stores new subroutine addresses in its table, and restores the original INT 21h address after infecting ten files. The virus contains the following text strings:
You have a flat tire, mate!

Check other viruses! Be aware! Use Antiviral Software

Shiny Family

Description Shiny Family

These are not dangerous memory resident parasitic viruses. They hook INT 1, 3, 9, then they trace INT 21h and patch the first byte of DOS part of INT 21h handler with CCh opcode (INT 3 call). On execution of COM and EXE files thise viruses write themselves to the end of these files. Sometimes they change the letters on the screen:
from to
----------
:-) :-(
:=) :=(
;) ;(
|) |(

These viruses contain the text:
Shiny Happy Virus by Hellraiser and Dark Angel of Phalcon/Skism

Shire Family

Description Shire Family

These are relatively harmless non-memory resident parasitic viruses. They search for .COM files of the current directory and infect them. "Shire.143 and 155" write themselves to the beginning of the file, although other viruses write their code to the end of the file. "Shire.155, 210, 220, and 300" are encrypted viruses.
On Thursdays, "Shire.149" displays a message (see the strings below), "Shire.300" runs itself by some video effect.
The viruses contain the following text strings:
"Shire.117": *.com +TIME+
"Shire.143": *.?Om
"Shire.149": *.COM *LAVA*
"Shire.155": *.CoM MrTiny
"Shire.199": *.CTL
"Shire.210": -Kiss-*.cOm
"Shire.220": -Purple-*.cOm
"Shire.253": *.com +TIME+ +Chemical Clock+
"Shire.300": *EFIL*.COM

Home