Virus Database

Rape.1882

Description Rape.1882

This is a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and 27h, and writes itself to the end of the COM and EXE files that are accessed.
It erases disk sectors and displays:
DataRape! v2.0
-CONFIGURABLE-
(c)1991 Zodiac
RABID, USA

Check other viruses! Be aware! Use Antiviral Software

Ester

Description Ester

It is a very dangerous memory resident boot virus. It hooks INT 13h and overwrites MBR of the hard drive and boot sectors of the floppy disks. While infecting the virus does not store original code of the sectors. While loading the virus searches for active boot sectors on hard drive, and loads it.
The virus contains the encrypted text strings:
E s t e r

Estier.2126

Description Estier.2126

This is a very dangerous, memory resident parasitic stealth virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are executed or closed. Upon opening an infected file, the virus disinfects it. The virus does not infect anti-viruses: TBAV, TBSCAN, NAV, VSAFE, F-PROT, and SCAN.
When the TBSCAN anti-virus is executed, the virus appends, to the end of the command line, the option "co" and hooks INT 1Ch. By hooking INT 1Ch, the virus looks for the string "DOS OWN" in the code of TBSCAN, and pathes it. The virus also searches for TBDRV anti-virus and patches it too.
On July 17 and 28, September 7 and on any day at 14:10, the virus erases the C: drive sectors and displays the following message:
ESTIERCOL! - Paraguay

Home