Virus Name: Ashar
Aliases: Shoe_Virus, UIUC Virus
V Status: Common
Discovery:
Symptoms: BSC; resident-TOM
Origin:
Eff Length: N/A
Type Code: BRt - Resident Boot Sector Infector
Detection Method: ViruScan, F-Prot, AVTK, NAV, Sweep, IBMAV,
NAVDX, VAlert, PCScan, ChAV
Removal Instructions: MDisk, F-Prot, NAV, or
DOS SYS command on bootable diskettes
General Comments:
The Ashar virus is a resident boot sector infector which is a
variant of the Brain virus. It differs from the Brain virus in that
it can infect both floppies and hard disk, and the message in the
virus has been modified to be:
"VIRUS_SHOE RECORD, v9.0. Dedicated to the dynamic
memories of millions of virus who are no longer with us
today".
However, the above message is never displayed. The identification
string "ashar" is normally found at offset 04a6 hex in the virus.
Known variant(s) of Ashar are:
Ashar-B: (Shoe_Virus-B) This variant has been modified so that it
can no longer infect hard drives. The v9.0 in the message
has also been altered to v9.1.
See: Brain
