Rape.500
Description Rape.500
This is a dangerous memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of the COM files that are executed. It erases the disk sectors, and then decrypts and displays the following:
DataRape! v1.0
(C)1991 Zodiac
RABID, USA
Check other viruses! Be aware! Use Antiviral Software
HellAwaits.500
Description HellAwaits.500
It is a not dangerous memory resident parasitic virus. It hooks INT 21h and writes itself at the end of .COM-files that are executed. The virus displays the messages while infecting the system memory:
Hell awaits
and while infecting the files:
Infectingall
The virus also contains the text string:
Start works
Hellfire.1040
Description Hellfire.1040
These are very dangerous nonmemory resident overwriting viruses, they were published in "Slam #2 E-Zine". The viruses (except "Hellfire.1040,1041.a,b") use simple procedure for encryption virus code. They search for .COM files and overwrite them. The infected files are not recoverable. After infection the viruses display the text:
Bad command or file name
If there are no files for infection or all files are already infected, the viruses display a picture.
This family contains many viruses:
Hellfire.1040
Hellfire.1041.a
Hellfire.1041.b
Hellfire.1085 - encrypted
Hellfire.1086.a - - " -
Hellfire.1086.b - - " -
Hellfire.1089.a - - " -
Hellfire.1089.b - - " -
Hellfire.1091.a - - " -
Hellfire.1091.b - - " -
Hellfire.1091.c - - " -
Hellfire.1091.d - - " -
Hellfire.1099 - - " - set new Int 24h
Hellfire.1101.a - - " - - " -
Hellfire.1101.b - - " - - " -
Hellfire.1122.a - - " - - " - clear and restore file attributes
Hellfire.1122.b - - " - - " - - " -
Hellfire.1123 - - " - - " - - " -
Hellfire.1124.a - - " - - " - - " -
Hellfire.1124.b - - " - - " - - " -
Hellfire.1124.c - - " - - " - - " -
Hellfire.1131 - - " - - " - - " -
Hellfire.1132 - - " - - " - - " -
Hellfire.1133 - - " - - " - - " -
Hellfire.1146 - - " - - " - - " - restore date&time stamp
Hellfire.1147 - - " - - " - - " - - " -
Hellfire.1148 - - " - - " - - " - - " -
text: (c) Michael Egler
|