Name: Barrotes famil Category: Viruses Description: Details Barrotes family These are dangerous memory resident parasitic viruses. While executing they infect C:COMMAND.COM file. Then they hook INT 21h, stay memory resident and infect the COM and EXE files that are executed. They contain the internal text string "c:command.com". On January, 5th they erase MBR sector, hook INT 1Ch, display several vertical lines and the message: Virus BARROTES por OSoft "Barrotes.849" infects COM files only. "Barrotes.1310.d" does not corrupt MBR. On installation it uses i386 inctruction. It displays the message: "Virus MIKELON por MSoft". "Barrotes.1461" on March 3rd corrupts disk sectors and displays: This is virus RETRETE! Don't attempt to recover your disk yourself! "Barrotes.1463" tryes to manifest itself with the video effect, but fails. It contains the encrypted text: ViRUS de G.D.R. (c)PutoSOŸT, NO HAY NADA COMO G.D.R. ¿¿ VERDAD ?? ;-) "Barrotes.1874" plays a tune. Barrotes.Tecla.1303 It is not a dangerous memory resident encrypted parasitic virus. It hooks INT 21h and writes itself to the end of COM and EXE files that are executed. When installing it infects C:COMMAND.COM file. On September, 23th it also hooks INT 16h and changes the scancodes of keys that are entered. This virus contains the text strings: C:COMMAND.COM Sta Tecla (MAD1) ST