Shire Famil
Details
Shire Family
These are relatively harmless non-memory resident parasitic viruses. They search for .COM files of the current directory and infect them. “Shire.143 and 155″ write themselves to the beginning of the file, although other viruses write their code to the end of the file. “Shire.155, 210, 220, and 300″ are encrypted viruses.
On Thursdays, “Shire.149″ displays a message (see the strings below), “Shire.300″ runs itself by some video effect.
The viruses contain the following text strings:
“Shire.117″: *.com +TIME+
“Shire.143″: *.?Om
“Shire.149″: *.COM *LAVA*
“Shire.155″: *.CoM MrTiny
“Shire.199″: *.CTL
“Shire.210″: -Kiss-*.cOm
“Shire.220″: -Purple-*.cOm
“Shire.253″: *.com +TIME+ +Chemical Clock+
“Shire.300″: *EFIL*.COM
Related Posts