Virus Database

NMSG.214

Description NMSG.214

It is a dangerous nonmemory resident parasitic virus. It searches for .EXE files, then writes itself into the file middle. The file length does not grow, but the virus may corrupt the files while infecting them. The virus contains the text string:
*.exe <<NMSG>>

While infecting the virus overwrites the area of Microsoft C error messages. That area presents in EXE files compiled with MSC compiler, and contains the text strings:
<<NMSG>>
R6000 - stack overflow
R6003 - integer divide by 0

e.t.c. While infecting the virus searches for the string
<<NMSG>>

in the file body, then overwrites that area with the virus code.

Check other viruses! Be aware! Use Antiviral Software

Shiny Family

Description Shiny Family

These are not dangerous memory resident parasitic viruses. They hook INT 1, 3, 9, then they trace INT 21h and patch the first byte of DOS part of INT 21h handler with CCh opcode (INT 3 call). On execution of COM and EXE files thise viruses write themselves to the end of these files. Sometimes they change the letters on the screen:
from to
----------
:-) :-(
:=) :=(
;) ;(
|) |(

These viruses contain the text:
Shiny Happy Virus by Hellraiser and Dark Angel of Phalcon/Skism

Shire Family

Description Shire Family

These are relatively harmless non-memory resident parasitic viruses. They search for .COM files of the current directory and infect them. "Shire.143 and 155" write themselves to the beginning of the file, although other viruses write their code to the end of the file. "Shire.155, 210, 220, and 300" are encrypted viruses.
On Thursdays, "Shire.149" displays a message (see the strings below), "Shire.300" runs itself by some video effect.
The viruses contain the following text strings:
"Shire.117": *.com +TIME+
"Shire.143": *.?Om
"Shire.149": *.COM *LAVA*
"Shire.155": *.CoM MrTiny
"Shire.199": *.CTL
"Shire.210": -Kiss-*.cOm
"Shire.220": -Purple-*.cOm
"Shire.253": *.com +TIME+ +Chemical Clock+
"Shire.300": *EFIL*.COM

Home