Virus Database

RMS.1472

Description RMS.1472

It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of EXE files that are executed or opened. The virus checks the file name and does not infect the anti-virus programs: AVG, CLEAN, GUARD, NOD, SCAN, TBAV, TOOLKIT, FINDVIRU, VSAN. On December 1st the virus displays the message:
Hello !
I'm RMS2 virus. I was born in Slovakia about one year ago.
Don't be worry, I won't format your hdd all :-)
Press any key to continue.

The virus also contains the text strings:
Kurt lives ... somewhere in time.
Zrdavim virusovy radar

Check other viruses! Be aware! Use Antiviral Software

Renegade.1176

Description Renegade.1176

Renegade.1176
It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself into the middle of EXE files that are executed, opened or closed. On 17th of any month it displays the message:
(C) Renegade 1994. Hello Hacker`s !!!

Renegade.4509
It is a very dangerous memory resident encrypted multipartite virus. It hooks INT 8, 13h, 21h and writes itself into the middle of COM and EXE files that are executed or opened. The virus does not infect the files:
WEB AIDS ADINF HIEW CHKDSK SCAN VSAFE MSAV CLEAN -V

The virus also infects the MBR of the hard drive.
The virus manifests itself in several ways. It corrupts the files, calls some video effects, displays the messages:
Say THANKS to lovely Dr.Web for damage this fileall
Please wait ...Hey , LAMER ! Are you all right ?.. Not so good ?..Oh, don't
be afraid my little baby ,angry wolf if far away !...... bUt I aM sTiLL
HeRe ! AnD i Am HuNGRrry ! Aaarrrgghhh !... YoU iS _fOxPro or
pAsCAL_pROGraMmeR , iSn't It ?... Oogghh , YeEsss ! I WaNt to EaT YoU NoWww
! NoW YoU WiLL bEcOme ViCTiM of HACKER's REVENGE !

The virus also contains the text:
(C) Renegade 1995.

ReplayII.666.a

Description ReplayII.666.a

It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM files that are executed. After starts from infected file the virus executes and infects the file:
c:windowscommandkeyb.com

On 14th day of each month the virus sends command to CD-ROM drive. The virus contains the text string:
[replay II]

Home