Virus Database

Rape.1882

Description Rape.1882

This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and 27h, and writes itself to the end of the COM and EXE files that are accessed.
It erases disk sectors and displays:
DataRape! v2.0
-CONFIGURABLE-
(c)1991 Zodiac
RABID, USA

Check other viruses! Be aware! Use Antiviral Software

Russel Family

Description Russel Family

These are memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed.
"Russel.1200,1235" are the dangerous viruses, they also hook INT 13h and sometimes disable writing to the disks ("Russel.1200"), or write to disk instead of reading ("Russel.1235").
"Russel.3072" is dangerous polymorphic virus. It deletes the CHKLIST.MS file, and contains the text strings:
CHKLIST.MS
RUSSEL FARADAY

Rust.1710

Description Rust.1710

This is a relatively harmless memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are loaded into the memory. From the 19th of any month, before infecting a file, the virus buzzes the speaker. This virus contains the text:
(C) Dialogue, Rust. 1990

While installing into the memory, the virus allocates a block of memory, fixes the MCB list, copies itself there, sets the INT 21h vector to the value 0000:0200, and writes, to the address 0000:0200, the Jmp-Virus command (FAR JMP) that brings the control to the virus INT 21h handler. Apparently, by these actions, the virus tries to bypass some resident anti-virus monitors.

Home