Fandom

Malware Wiki

BugsBunny

1,344pages on
this wiki
Add New Page
Talk0 Share

Virus.DOS.BugsBunny is a virus on DOS.

There are 3 variants in 2 versions:

  • Virus.DOS.BugsBunny.282
  • Virus.DOS.BugsBunny.497 (plus B)

Behavior

BugsBunny.282

This is a dangerous non-memory resident file overwriting variant. When it is run, it overwrites every DOS executable in current directory except COMMAND.COM.

BugsBunny.497 and 497.b

These are the harmless memory resident parasitic variants. When the virus is loaded into memory, it infects any DOS executable that is run, except COMMAND.COM and files that are smaller than 200 bytes.

Infected files will have the seconds value of 62 in their timestamp.

Memory usage

The following table shows the memory usage of the variants.

Variant Memory usage in bytes
BugsBunny.282 NON-TSR
BugsBunny.497 (plus B) 544

Payload

BugsBunny.282

On running infected programs, instead of running the host program, the following message is displayed:

Datei nicht ausführbar. Neujahrsgrüße von Bugs-Bunny (߁_¿-߁TTí)
Bugs-Bunny Virus, Created by iRS-EB 03848

Translation (from German):

File can not be executed. New Year Greetings from Bugs-Bunny (߁_¿-߁TTí)
Bugs-Bunny Virus, Created by iRS-EB 03848

BugsBunng.497 and 497.b

These variants do not manifest themselves at anyway.

Other details

BugsBunny.282 contains the internal text string:

BB/iRSCOMMAND*.COM

BugsBunny.497 and 497.b contain the internal text strings:

COMMAND.COM
BUGS BUNNY

Videos

Virus.DOS.BugsBunny01:14

Virus.DOS.BugsBunny.282

BugsBunny virus review by Alles Sandro

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.