Virus Database

Dada_II.786

Description Dada_II.786

It is a harmless memory resident parasitic virus. It hooks INT 21h, 2Fh and writes itself to the end of COM files that are accessed. The virus does not manifest itself in any way. It was named after its "Are You Here?" call INT 2Fh, AX=ABBAh. The memory resident virus code returns AX=DADAh.

Check other viruses! Be aware! Use Antiviral Software

Russel Family

Description Russel Family

These are memory resident encrypted parasitic viruses. They hook INT 21h and write themselves to the end of COM and EXE files that are accessed.
"Russel.1200,1235" are the dangerous viruses, they also hook INT 13h and sometimes disable writing to the disks ("Russel.1200"), or write to disk instead of reading ("Russel.1235").
"Russel.3072" is dangerous polymorphic virus. It deletes the CHKLIST.MS file, and contains the text strings:
CHKLIST.MS
RUSSEL FARADAY

Rust.1710

Description Rust.1710

This is a relatively harmless memory resident parasitic virus. It hooks INT 21h, and writes itself to the end of COM and EXE files that are loaded into the memory. From the 19th of any month, before infecting a file, the virus buzzes the speaker. This virus contains the text:
(C) Dialogue, Rust. 1990

While installing into the memory, the virus allocates a block of memory, fixes the MCB list, copies itself there, sets the INT 21h vector to the value 0000:0200, and writes, to the address 0000:0200, the Jmp-Virus command (FAR JMP) that brings the control to the virus INT 21h handler. Apparently, by these actions, the virus tries to bypass some resident anti-virus monitors.

Home