Virus Database

Sarampo Family

Description Sarampo Family

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are executed. The viruses infect C:COMMAND.COM file while executing any infected program. Depending on the system date they also hook INT 1Ch and manifest themselves with some video effects. The viruses contain the text strings:
c:command.com

They also contain the strings:
"Sarampo.1371": Do you like this Screen Saver ? I hope so.
Created by Sarampo virus.
"Sarampo.1470": Do you like this Screen Saver ?
Cavaco - A virus created by The Portuguese Government

Check other viruses! Be aware! Use Antiviral Software

Cordobes.3294

Description Cordobes.3294

These are dangerous memory resident parasitic polymorphic viruses. They hook INT 21h, intercept FindFirst/Next ASCII calls (AH=4Eh,4Fh) and write themselves to the end of EXE files that are accessed. The viruses delete the CHKLIST.MS file. In four month after infection the viruses append to the end of the C:AUTOEXEC.BAT file the commands:
@Echo Virus "EL MOSTRO CORDOBES".
@Echo No tema por sus datos. Que pase un buen día.
@Echo.
@Pause

CorporateLife.1937

Description CorporateLife.1937

These are not dangerous memory resident parasitic polymorphic viruses. They hook INT 21h and write themselves to the end of EXE files on DOS calls FindFirst/Next FCB. During infection they use old FCB calls. The viruses have bugs and may corrupt the files while infecting them. If there is a sound blaster installed with the Speech driver, the viruses pass to the driver the string to speak it:
"CorporateLife.1929,1937": Fuck Corporat Life.
"CorporateLife.1931,1935,1939,1943,1947,1951,1957,1961,1971":
Mini Cat

The viruses also contain the text strings:
"CorporateLife.1929,1937": $B -=[$$$ Corporate Life $$$]=- P$
"CorporateLife.1931,1935,1939,1943,1947,1951,1957,1961,1971":
$B Mini-Cat 4/96 P$

Home