| Barrotes | |
|---|---|
| Type | File virus |
| Creator | |
| Date Discovered | 1992.12 |
| Place of Origin | Spain |
| Source Language | |
| Platform | DOS |
| File Type(s) | .com, .exe, .ovl |
| Infection Length | 1,310 bytes |
| Reported Costs | |
Barrotes is a small family of Windows viruses, which infect .com, .exe and .ovl files. It originates from Spain.
Behavior
When Barrotes is executed, it becomes resident at the top of system memory, taking 1,600 bytes. The virus immediately infects COMMAND.COM. It infects any .com, .exe and .ovl files executed, appending itself to the file.
Payload
Barrotes has a payload that activates on January 5. It overwrites the master boot record of the first hard disk it finds. It then displays colorized bars on the screen with the words "Virus BARROTES pro OSoft". The user will be able to use the machine, but the bars will remain.
Variants
Barrotes produced several variants that function similarly to the original. They are typically between 800 and 1,500 bytes in length and appeared between 1992 and 1996. Barrotes.1303 displays eight vertical bars on the screen, which have a 3d effect and are cycled by the virus. Barrotes.1463 contains a programming error that causes it to attempt destroying data on the 34th of every month.
Other Facts
The Mental Driller studied this virus early in his virus coding career.
Sources
Mikko Hypponen. F-Secure Antivirus, Barrotes.
Symantec, Barrotes. 2007.02.13
Patricia Hoffman. Online VSUM, Barrotes Virus.