=== Computer Virus Catalog 1.2: COMPUPHAGOZYTE 1 Virus (31-July-1993) == Entry...............: CompuPhagozyte 1 Virus Alias(es)...........: --- Virus Strain........: CompuPhagozyte Virus strain Virus detected when.: --- where.: --- Classification......: Link Virus (directory type), non-resident Length of Virus.....: 1.Length on storage medium: 1452 byte 2.Length in RAM: 1452 byte --------------------- Preconditions ------------------------------------ Operating System(s).: AMIGA-OS Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all Computer model(s)...: All AMIGA models --------------------- Attributes --------------------------------------- Easy Identification.: The following text appears in infected files: "The CompuPhagozyte has attached to your system ! Wait for much more better virus on other systems, too! The CompuPhagozyte in 9.91 by The Emperor Of Trillion Bytes ! Virus-Checker V4.0 by Michael Ortmanns" Type of infection...: System infection: overwriting the file ":c/virus-checker" if this exists. Infection Trigger...: Inserting a disk-like medium while virus program is active. Storage media affected: All disk-like media Interrupts hooked...: None Damage..............: 1) Writing file ":c/virus-checker" on disk. 2) Potentially destroying floppy disk structure (see Particularities). Damage Trigger......: Upon inserting a disk-like medium. Particularities.....: 1) Virus pretends to be "virus-checker 4.0". Virus' infectivity is small as it always tries to write to current directory. 2) If for some reason file ":c/virus-checker" could not be written to disk, some obscure hardware banging routine is called which seems to destroy disk structure (of floppy disk only). 3) If real ":c/Virus-checker" exists, it is corrupted and shortened to 1452 byte (poten- tially due to an error of AmigaDOS-Write routine; cause not fully verified) Similarities........: CompuPhagozyte Virus family --------------------- Agents ------------------------------------------- Countermeasures.....: VT 2.54, VirusZ 3.06, VirusChecker 6.28 Countermeasures successful: VT 2.54 Standard means......: VT 2.54 --------------------- Acknowledgement ---------------------------------- Location............: Virus Test Center, University Hamburg, Germany Classification by...: Karim Senoucci Documentation by....: Karim Senoucci Date................: 31-July-1993 Information Source..: Virus disassembly / SHI / Heiner Schneegold ================== End of COMPUPHAGOZYTE 1 Virus ======================= [Go back]