Rajaat.144
Description Rajaat.144
These are harmless memory resident viruses. They hook INT 21h and contain the string "Rajaat".
"Rajaat.287,443" are companion viruses. When any .EXE file is executed, they create companion .COM files.
"Rajaat.443" also hooks INT 28h. On INT 28h calls it searches and infects .EXE files.
Other "Rajaat" viruses are parasitic ones, they write themselves to the end of EXE files that are executed.
Rajaat.144,146
These are a dangerous nonmemory resident parasitic viruses. They search for .COM files and write themselves to the beginning of the file. The infection way is quite smart, but they may corrupt files or/and halt the system. They contain the text string:
*Rajaat.COM
Rajaat.RTFM
It is a harmless nonmemory resident polymorphic parasitic virus. It searches for .COM files and writes itself to the end of the file. It contains the text strings:
Rajaat
[RTFM]
Check other viruses! Be aware! Use Antiviral Software
Syrian Family
Description Syrian Family
These are dangerous memory resident overwriting viruses. They hook INT 21h and overwrite COM and EXE files that are executed or loaded as overlays. They display the message "Bad command or filename" before return to DOS. They contain the text strings:
"Syrian.241": Syrian Brain II
MS-DOS v4.22 Volume label for drive Z is Infected!
"Syrian.412": Syrian Brain II
"Syrian.412" searches and deletes the files
C:SYRIAN??.II?
C:*.BAT
C:*.SYS
C:*.COM
C:*.EXE
C:AUTOEXEC.*
C:CONFIG.*
and then creates the subdirectories:
C:The
C:Syrian
C:Brain
C:II
C:Has
C:Struck
Sysman.249
Description Sysman.249
It is a harmless nonmemory resident parasitic virus. It searches for SYS files (DOS device drivers), then writes itself to the end of the file. The virus does not manifests itself in any way. It contains the text strings:
*.SYS
[SYSMAN]
Copyright (C) 1998-99 Deadman
|