Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Sarampo

Sarampo is a memory resident COM and EXE infector. It also attacks COMMAND.COM. In the virus body there is no destructive code. When an infected file is executed the virus installs itself into memory. It takes over control of the following interrupts: INT 21h, INT 1Ch (only on specific days of the years) and INT 24h (when attacking a file). On days when installation of the interrupt service INT 1Ch takes place the following text may, at certain circumstances, appear on the screen:

Sarampo.1371:
Do you like this Screen Saver ? I hope so. Created by Sarampo virus.

Sarampo.1470:
Do you like this Screen Saver ? Cavaco - A virus created by The Portuguese Government

© 1992-2004 Eset s.r.o. All rights reserved. No part of this Encyclopedia may be reproduced, transmitted or used in any other way in any form or by any means without the prior permission.