Virus Database

RatSoft.753

Description RatSoft.753

These are dangerous nonmemory resident parasitic viruses. They search for .COM-files, then writes themselves to the end of the file. The viruses have lot of bugs, and infected files may halt the system. The viruses display the messages:
"RatSoft.753": ratsoft company!!!
"RatSoft.821,828": death you!!!!!!
ratsoft co

Check other viruses! Be aware! Use Antiviral Software

Leech.1024

Description Leech.1024

These are memory resident encrypted viruses. They hook INT 21h and write themselves into COM files that are executed or closed. If the first instruction of the file is a JMP (E9h or EBh), then the virus inserts itself into the file middle at the address to where JMP instruction points, else the virus writes itself to the beginning of the file. While infecting the virus uses undocumented System File Table.
Depending on the current time "Leech.1024", "Glist.1014" and "Tazta.1008" display the messages and erase the sectors of the root directory of the current drive:
"Leech.1024": The leech liveall
"Leech.Tazta.1008": Super, Super! ... March 1993, Tazta.
"Leech.Glist.1014": Mr.Tapeworm May 1996 The GLIST

"Leech.Warrier.768" is a harmless virus. It contains the text:
The WARRIER!

Legion.3274

Description Legion.3274

This is a benign non-memory resident encrypted parasitic virus. It searches for .COM files, then writes itself to the end of the file. The virus does not infect files with names that begin with two-letter variants from the string: "COSODETSANIB-D-UWIPU" (COMMAND.COM, SO*.*, all).
If the date and month correspond in number(January 1, February 2, ...), the virus displays the following message:
ATTENTION !!! PERM RESEARCH CENTER
OF AUTO-TRANSFERRING SOFTWARE PRESENT:
+++ ++---++++---+++-+++-+++--++++-+ ++
||| |+-- || --++ ||| || |||| ++||
+++-++++---++++---+++-+++-+++--++++ +++ Version 5.00
(C) TEAM O'SHEEN DA 12-Feb-1997
PRESS TO EXECUTE PROGRAM

Home