Virus Database

Rael.3211

Description Rael.3211

This is a dangerous memory resident parasitic polymorphic virus. It hooks INT 21h, and writes itself to the end of COM files (except COMMAND.COM) that are executed or opened. It also infects files when searching DOS functions FindFirst/Next ASCII.
The virus contains the text strings:
c:dossys.com
c:dosdosshell.com
c:dosformat.com
c:doskeyb.com

and infects these files when an infected file is executed. Depending on the system timer, this virus infects the files with a Trojan program that erases the disk sectors being executed.
On the 14th of every month, it deletes files after infection, and starting from 12:00, it displays the following message:
___ __ ___ _
_ _ _ _ _ _
___ ____ ___ _
_ _ _ _ _ _
_ _ _ _ ___ ____
IMPERIAL AEROSOL KID
V 01/NOV/93 por RAEL

It also contains the text strings:
com
COMMAND
command
RAEL-IMPERIAL AEROSOL KID VIRUS III
-Buenos Aires-Argentina-
allRael, Imperial Aerosol Kid-exits in the daylight, spraygun head...
- SaTaNiC BRaIn B.B.S. 383-7480 Las 24 Horas -

Check other viruses! Be aware! Use Antiviral Software

Normal.789

Description Normal.789

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are executed. Depending on the system date the viruses display the message in Russian.

Norway.673

Description Norway.673

It is not a dangerous nonmemory resident encrypted parasitic virus. It searches for .COM files and writes itself to the end of the file. On May, 17th the virus displays the message:
Happy birthday, Norway!

Home