Fandom

Malware Wiki

BugsBunny

1,319pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.BugsBunny is a virus on DOS.

There are 3 variants in 2 versions:

  • Virus.DOS.BugsBunny.282
  • Virus.DOS.BugsBunny.497 (plus B)

BehaviorEdit

BugsBunny.282Edit

This is a dangerous non-memory resident file overwriting variant. When it is run, it overwrites every DOS executable in current directory except COMMAND.COM.

BugsBunny.497 and 497.bEdit

These are the harmless memory resident parasitic variants. When the virus is loaded into memory, it infects any DOS executable that is run, except COMMAND.COM and files that are smaller than 200 bytes.

Infected files will have the seconds value of 62 in their timestamp.

Memory usageEdit

The following table shows the memory usage of the variants.

Variant Memory usage in bytes
BugsBunny.282 NON-TSR
BugsBunny.497 (plus B) 544

PayloadEdit

BugsBunny.282Edit

On running infected programs, instead of running the host program, the following message is displayed:

Datei nicht ausführbar. Neujahrsgrüße von Bugs-Bunny (߁_¿-߁TTí)
Bugs-Bunny Virus, Created by iRS-EB 03848

Translation (from German):

File can not be executed. New Year Greetings from Bugs-Bunny (߁_¿-߁TTí)
Bugs-Bunny Virus, Created by iRS-EB 03848

BugsBunng.497 and 497.bEdit

These variants do not manifest themselves at anyway.

Other detailsEdit

BugsBunny.282 contains the internal text string:

BB/iRSCOMMAND*.COM

BugsBunny.497 and 497.b contain the internal text strings:

COMMAND.COM
BUGS BUNNY

VideosEdit

Virus.DOS.BugsBunny01:14

Virus.DOS.BugsBunny.282

BugsBunny virus review by Alles Sandro

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.