Fandom

Malware Wiki

Raving

1,327pages on
this wiki
Add New Page
Comments0 Share

Virus.DOS.Raving.2300 is a companion file virus on DOS.

BehaviorEdit

When the virus is run, it drops a file called HUNDRED.COM and activates immediately. If such file is already existed, the virus would overwrite it.

The virus does not infect any executable.

PayloadEdit

The virus hooks INT 16h and disrupt the keyboard by substituting the characters to jibberish one, but not include some control inputs such as Shift, Ctrl, Alt and Del, making it impossible to execute any program (the Enter key is also interfered) but resetting the system. It displays the message after a number of keystrokes:

I DON'T THINK YOU WOULD LIKE TO SMILE, BECAUSE I HAVE INFECTED A FILE!!!
HAVE YOU HEARD OF A RAVING VIRUS MC, YES YOU GUESSED IT THAT IS ME!!!
YOU WONT SEE ANOTHER RHYME UNTIL IT IS INFECTING TIME!!!

Other DetailsEdit

The virus contains the internal text strings:

*.com
command.com
HUNDRED.COM

VideosEdit

Virus.DOS04:38

Virus.DOS.Raving

Raving virus review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.