Fandom

Malware Wiki

Shoe

1,327pages on
this wiki
Add New Page
Comments0 Share

Not to be confused with Shoerec, a Windows 9x virus.

Virus.DOS.Shoe.1904 is a very dangerous memory resident parasitic polymorphic encrypted virus on DOS.

BehaviorEdit

When the virus is run, it copies itself to upper memory block when there is a free block available, or to the conventional memory, and then it hooks INT 8, 21h, and infect any EXE executable that is accessed by writing itself to the end of the file.

Memory usageEdit

The exact memory usage is 2,016 bytes.

PayloadEdit

On 1st of any even month (February, April, ...) and the virus is in memory, when the user attempts to copy a file, the virus clears the screen and displays the message:

OOPS .. Sorry
For help call now:
555-SHOE or
555-RGNE
No rights reserved by M.WEINHOLD

And then it erases the disk sectors.

VideosEdit

Shoe DOS Virus01:21

Shoe DOS Virus

Shoe virus review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.