Virus Database

Rasek.1310

Description Rasek.1310

This is a dangerous memory resident multipartite encrypted virus. While executing an infected file it writes itself to the MBR of the hard drive and hooks INT 13h, 12h. By hooking INT 13h this virus releases the stealth mechanism on reading the infected MBR. It also writes a trojan program to the floppy disk boot sectors. That program erases the hard drive FAT while loading from that floppy. Sometimes the virus also erases the FAT on loading from infected MBR.
By hooking INT 21h the virus infects COM and EXE files that are executed, it writes itself to the end of the files. The virus contains the text string "AND.COM" and does not infect the files that contains that string in their names (COMMAND.COM). The virus also contains the text strings:
RASEK v1.1,from LA CORUÑA(SPAIN).Jan93

Check other viruses! Be aware! Use Antiviral Software

Shame.1455

Description Shame.1455

It is a dangerous nonmemory resident encrypted parasitic virus. It searches for EXE files and writes itself to the end of the file. It deletes the TBSCAN.EXE, ANTI-VIR.DAT, CHKLIST.MS, CHKLIST.CPS, IVB.NTZ files. In some cases it erases the disk sectors and reboots the computer. The virus displays the messages:
Shame on you!
Where did I come from?
Dedicated to the people of Chung-Li, Tiawan.
I feel safe, don't you?
Dope!
Tiwanese rise to the top while looking down at the empty bottomall
Wait for the departure of you life...
God loves you!
Ur virux protexion sux.
It's a Shame.

Shanghai.848

Description Shanghai.848

It is a dangerous memory resident parasitic virus. It hooks INT 21h and intercepts the DOS functions 36h, 3Bh. On these calls the virus searches for .COM files and writes itself to the end of the file. On December, 20th it displays the message:
ShangHai Railway Institute
[high ASCII chars, not properly displayable]

and erases the hard drive sectors. It also contains the text string:
*.COM

Home