Virus Database

Rael.3211

Description Rael.3211

This is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h, and writes itself to the end of COM files (except COMMAND.COM) that are executed or opened. It also infects files when searching DOS functions FindFirst/Next ASCII.
The virus contains the text strings:
c:dossys.com
c:dosdosshell.com
c:dosformat.com
c:doskeyb.com

and infects these files when an infected file is executed. Depending on the system timer, this virus infects the files with a Trojan program that erases the disk sectors being executed.
On the 14th of every month, it deletes files after infection, and starting from 12:00, it displays the following message:
___ __ ___ _
_ _ _ _ _ _
___ ____ ___ _
_ _ _ _ _ _
_ _ _ _ ___ ____
IMPERIAL AEROSOL KID
V 01/NOV/93 por RAEL

It also contains the text strings:
com
COMMAND
command
RAEL-IMPERIAL AEROSOL KID VIRUS III
-Buenos Aires-Argentina-
allRael, Imperial Aerosol Kid-exits in the daylight, spraygun head...
- SaTaNiC BRaIn B.B.S. 383-7480 Las 24 Horas -

Check other viruses! Be aware! Use Antiviral Software

Cernoch.1066

Description Cernoch.1066

It is not a dangerous memory resident parasitic virus. It hooks INT 12h, 21h, 4Ah and writes itself to the end of .COM files that are opened. On ChangeDir DOS calls it searches for .COM files and also infects them. INT 12h is used for virus "Are you here?" call. On any INT 4Ah call the virus decrypts and displays the message, it then halts the computer:
Wish happy birthday to Cernoch

CFSK.918

Description CFSK.918

It's a not dangerous memory resident parasitic virus. It hooks INT 21h and infects by standard manner .COM-file are executed. Sometimes it hooks int 08, 15h also. It delays on INT 08 call ('dummy' loop), disables extended memory by using INT 15h and types:
Sorry. I need some MHz today! (CFSK)

Home