Malware Wiki


1,239pages on
this wiki
Add New Page
Add New Page Comments0

Not to be confused with Shoerec, a Windows 9x virus.

Virus.DOS.Shoe.1904 or Shoe is a very dangerous memory resident parasitic polymorphic encrypted virus that runs on MS-DOS.


When the virus is run, it copies itself to upper memory block when there is a free block available, or to the conventional memory, and then it hooks INT 8, 21h, and writes itself to the end of EXE files that are accessed.

Payload Edit

On 1st of any even month (February, April, ...) and the virus is in memory, when the user attempts to copy a file, the virus clears the screen and displays the message:

OOPS .. Sorry
For help call now:
555-SHOE or
No rights reserved by M.WEINHOLD

And then it erases the disk sectors.

Videos Edit

Shoe DOS Virus01:21

Shoe DOS Virus

Shoe virus review by danooct1

Also on Fandom

Random Wiki