Virus Database

Win32.RainSong.3891

Description Win32.RainSong.3891

This is a dangerous per-process memory resident parasitic polymorphic Win32 virus. It searches for PE EXE files (Windows executable files) in the Windows directory and infects them. Then it stays in Windows memory as a component of the host application and infects PE EXE files that are accessed by the host application.
While infecting, the virus writes itself to the end of the file by increasing the size of the last file section. The virus uses "Entry Point Obscuring" methods, and while infecting, it does not modify a program's entry address. To receive control when an infected program is run, the virus scans a victim file body, looks for a CALL command and replaces it with "JUMP VirusEntry" code. As a result, the virus gets only when the patched file code receives control, not at the beginning.
The virus has a bug, and often corrupts files while infecting them.
The virus avoids several anti-virus file infections, and it detects them according to the two first letters in the file name: AV*, AN*, DR*, ID*, OD*, TB*, F-*.
On April 6th, it generates a Windows error message with the text:
ASIMOV Jan.2.1920 - Apr.6.1992
The virus also contains the text:
< The Rain Song Coded By Bumblebee/29a >

Check other viruses! Be aware! Use Antiviral Software

Stupid.1355

Description Stupid.1355

It is a very dangerous memory resident virus. While installing memory resident if does not fix MCB list, that may halt the computer. Then it hooks INT 21h and infects .COM files that are accessed. Depending on the current date the virus erases the sectors of the current drive. It contains the text:
*-BNL

Stupidus.1504

Description Stupidus.1504

It is a dangerous memory resident encrypted parasitic virus. It hooks INT 9, 21h and writes itself to the end of COM and EXE files that are executed. Depending on its internal counter the virus displays the message and halts the computer:
(C)Copyright Microsoft Corp. 1993.
WARNING! No 786SDX processor detected!
System killed!
Scorpio(R) Pfeifer Virus(R) Version 1.00 (ha,ha,ha,khhhall pffuj!)
(C)Copyright Scorpio Software Ltd.
Created in 1993 - POLAND.
See ya, lamer!
A>

It also contains the text string:
Virus versus debuggerus !?! Yous stupidus foolus !

Home