Virus Database

Hippie.a

Description Hippie.a

It is a harmless memory resident stealth boot virus. While loading from an infected disk it hooks INT 1Ch, 2Fh, waits for DOS loading process, hooks INT 13h and releases INT 1Ch. Then the virus infects the disks that are accessed. While loading from any infected disk the virus also infects the MBR of the hard drive. While infecting the MBR the virus uses direct calls to the hard drive ports.
Before installing memory resident the virus reserves a block of the system memory by decreasing the RamSize word at the address 0000:0413. When DOS loads itself into the memory, the virus restores RamSize and stays in the memory as a DOS block.
The virus contains the text strings:
DrW-4
RPL
Dr White - Sweden 1996
Hippie Virus - Written in MalmoallB01F

Check other viruses! Be aware! Use Antiviral Software

Russel Family

Description Russel Family

These are memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed.
"Russel.1200,1235" are the dangerous viruses, they also hook INT 13h and sometimes disable writing to the disks ("Russel.1200"), or write to disk instead of reading ("Russel.1235").
"Russel.3072" is dangerous polymorphic virus. It deletes the CHKLIST.MS file, and contains the text strings:
CHKLIST.MS
RUSSEL FARADAY

Rust.1710

Description Rust.1710

This is a relatively harmless memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are loaded into the memory. From the 19th of any month, before infecting a file, the virus buzzes the speaker. This virus contains the text:
(C) Dialogue, Rust. 1990

While installing into the memory, the virus allocates a block of memory, fixes the MCB list, copies itself there, sets the INT 21h vector to the value 0000:0200, and writes, to the address 0000:0200, the Jmp-Virus command (FAR JMP) that brings the control to the virus INT 21h handler. Apparently, by these actions, the virus tries to bypass some resident anti-virus monitors.

Home