Virus Database

RatSoft.753

Description RatSoft.753

These are dangerous nonmemory resident parasitic viruses. They search for .COM-files, then writes themselves to the end of the file. The viruses have lot of bugs, and infected files may halt the system. The viruses display the messages:
"RatSoft.753": ratsoft company!!!
"RatSoft.821,828": death you!!!!!!
ratsoft co

Check other viruses! Be aware! Use Antiviral Software

Coup.2052.b

Description Coup.2052.b

This is very dangerous memory resident multipartite virus. When an infected file is executed, the virus infects the MBR of the hard drive and then returns to DOS. While loading from infected MBR the virus cuts a block of the system memory, copies itself to there, hooks INT 13h, 1Ch and returns control to the original MBR code.
By hooking INT 13h the virus realizes a stealth routine while accessing to the infected MBR. By hooking INT 1Ch (timer) the virus waits for DOS loading process, hooks INT 21h and then writes itself to the end of .COM and .EXE files (except COMMAND.COM) that are executed. The virus checks the file names and corrupts several anti-virus scanners: SCAN, MSAV, PART*, CLEAN, VSAFE, TOOLKIT, GUARD, FINDVIRU. The virus overwrites them with a trojan program that displays the message:
If you are boy,go and play ball !!
Otherwise,Our "Blind Date" every day in "4-Bagh" at 6-9(pm).

Cowboy.2483

Description Cowboy.2483

It is a very dangerous nonmemory resident parasitic virus. It searches for COM and EXE files, then writes itself to the end of the file. The virus does not infect the anti-virus programs and utilities: IBM*.*, NAV*.*, SCAN*.*, CLEAN*.*, F-PROT*.*, V*.*, FINDVIRU.*.
In February, on Thursday at 9:xx, 10:xx, 15:xx the virus erases the disk C: sectors. The virus contains the text string:
IBMNAVSCANCLEANF-PROTVFINDVIRU
*.* *.com *.exe
Have you ever danced with the devil under the pale moon light?
This program was written in the state of Texas(C) 1994-95 Dark Cow-boy

Home