Virus Database

Drop.1131

Description Drop.1131

It is a memory resident harmless virus. It infects COM- and EXE-files by standard way when they are accessed. It hooks INT 1Ch and 21h. Depending on its internal counter the infector can drop letters on the screen.

Check other viruses! Be aware! Use Antiviral Software

SoFar.254

Description SoFar.254

These are memory resident encrypted (except "SoFar.254") parasitic viruses. They copy themselves into Interrupt Vectors Table and DOS data area, hooks INT 21h, and write themselves to the end of the files that are executed.
"SoFar.254" infects only COM files. Other viruses infect both COM and EXE files. While selecting a new directory (ChDir command) or executing any file the viruses search for COM and EXE files and infect them.
"SoFar.841" deletes CHKLIST.MS file. On 29th of any month it erases the hard drive sectors and displays the message:
So Far,So Good,allSo What?

Other viruses contain the text strings:
"SoFar.254": Sh
"SoFar.973": Sh
(C) Shel,NSTU,1994,v3.1
*.exe *.com
"SoFar.988": Sh
Novosibirsk,NSTU,1994,(-) Shel,v3.1
*.exe *.com

Sofia.432

Description Sofia.432

These are not dangerous memory resident parasitic viruses. They hook INT 21h and write themselves to the end of COM files that are executed. They create the file SOFIA, display/contain the strings:
This Virus is named after a very nice, clever and cute girl, Sofia
Sweden
LoRD Zer0

Home