Virus Database

Ieronim.512

Description Ieronim.512

These are not dangerous memory resident parasitic viruses. They hook INT 21h and INT 8, or INT 9, or INT 1Ch depending on the virus version. They infect .COM files (except COMMAND.COM) that are executed. Depending on their versions these viruses write themselves to the end, or the beginning of the file. "Ieronim.1166,2048" write themselves to the end of EXE files.
These viruses display the messages:
+--------------------------------------+
ƒ Mulier pulchra est janua diaboli, ƒ
ƒ via iniquitatis,scorpionis percussio.ƒ
ƒ St. Ieronim ƒ
+--------------------------------------+
+--------------------------------------+
ƒBeautiful woman is a devil's entrance,ƒ
ƒa way of misfortunes,a scorpion's biteƒ
ƒ St. Ieronim ƒ
+--------------------------------------+

They also contain the string "command".
"Ieronim.Condom" depending on the system timer starts to poetry: it displays a funny poem "Le voyage de condom" in Russian.

Check other viruses! Be aware! Use Antiviral Software

Mand.1061

Description Mand.1061

It is a harmless memory resident parasitic virus. It hooks INT 21h and writes itself to the end of COM- and EXE-files (except COMMAND.COM) that are accessed. The virus does not manifest itself in any way. There are two text word in the virus body that are used by the virus to detect the COMMAND.COM file:
MA ND

These words are the only reason to name that virus.

Mandra family

Description Mandra family

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed.
Depending on the system timer the viruses display the messages:
"Mandra.533": Mandragore for president !!!
"Mandra.562": Mandragore'z sPirIt haunts ur computah !
"Mandra.664,669": BEER and TEQUILA forever !'

The viruses also contain the text strings:
"Mandra.533": Mandragore [Mdrg v3.7]
"Mandra.562": Mandragore [Mdrg v4]
"Mandra.664,669": Mandragore [Mdrg v5]
Error 8869: processor drunk 8*)
Eddy iz still alive somwhere in time all...

Mandra.866,886
These are memory resident encrypted viruses infecting EXE files that are opened or executed. The viruses write themselves to the end of files while infecting them. The viruses use not documented DOS calls, and have a bug in this part of code: these functions are called incorrectly. As a result, if there are several files opened, or a file is executed when some other files are opened, the viruses can use wrong file offsets and corrupt files.
The viruses call a video effect - running cow. The viruses also contain the strings:
[MAD COW]
Mandragore

Home