FANDOM


Virus.DOS.Deliver.BlueShark.1771 is a very dangerous memory resident parasitic encrypted virus on DOS.

Behavior

The virus infects all the .EXE executable files in current directory when ran, but not every file having this extension will be infected as well. After that it stays memory resident.

The virus behaves stealthy so that there is no observable size change on infected files, however due to its variable infection size, few bytes of change can still be observed on some files.

Advanced details

The TSR memory usage is 1,888 bytes.

MD5 hash:

b9c51ccd08e0103adfeafa818d1e7acd

Payload

When the machine starts up or reboots on November 1st, the virus activates by overwriting the hard drive sectors with the string:

! MAYBE ONE DAY WE BE UNITED !

And then it plays the tune (Star Spangled Banner), displays the US national flag and the message:

!!!    MY NAME IS DISKDELIVER  *  THIS IS ONLY BEGIN  *  I BE BACK   !!!

After restarting, the virus wipes the hard drive.

Other details

The virus contains the encrypted internal text string:

""" CREATED BY BLUE SHARK - FINISHED 7.VIII.1994 15:30 - CIESZYN POLAND """

Videos

Virus DOS Deliver Blueshark 1771

Virus DOS Deliver Blueshark 1771

Demonstration on Virtual PC

Blueshark DOS Virus

Blueshark DOS Virus

Virus.DOS.Deliver.BlueShark.1771 on Standalone PC