========= Computer Virus Catalog 1.2: 2001 Virus (25-July-1992) ======= Entry...............: 2001 Virus Alias(es)...........: --- Virus Strain........: SCA Virus Virus detected when.: unknown where.: unknown Classification......: System virus (bootblock), resident Length of Virus.....: 1. length on storage medium: 1024 byte 2. length in RAM : 1024 byte --------------------- Preconditions ----------------------------------- Operating System(s).: AMIGA-DOS Version/Release.....: 1.2/33.166, 1.2/33.180 and 1.3/34.20 Computer model(s)...: all AMIGAs --------------------- Attributes -------------------------------------- Easy Identification.: Typical text: 'Hi I m the 2001 Virus by Hacker Cracker GmbH Germany All creatures of... darkness are waiting to the year 2001 when SATAN comes and WORLD is burning' Also: 'A2001200120012001200120012001!' at the end of the bootblock. Virus feature: pressing left mouse/fire button of port 1 during system reboot causes the screen to become green and the virus to shut down it- self by clearing ColdCapture and CoolCapture Vectors Type of infection...: Self-identification method: compares bootblock checksum with precalculated virus checksum System infection: RAM resident, reset resident, bootblock Infection Trigger...: Reset (CONTROL+Left-AMIGA+RIGHT-AMIGA) Storage media affected: Only floppy disks (3.5" and 5.25") Interrupts hooked...: --- Damage..............: Permanent damage: overwriting bootblock Transient damage: screen buffer manipulation: screen becomes black, message (see above) is shown by fading in and out pieces of it Damage Trigger......: Permanent damage: reset Transient damage: 15th infection Particularities.....: A resident program using the CoolCaptureVector is shut down, also when using the ColdCapture Vector when the virus is shut down by its 'suicide' function; DoIO vector is changed Similarities........: AEK virus --------------------- Agents ------------------------------------------ Countermeasures.....: Names of tested products of Category 1-6: Category 1: .2 Monitoring System Vectors: 'CHECKVECTORS 2.2' .3 Monitoring System Areas: 'CHECKVECTORS 2.2','GUARDIAN 1.2', 'VIRUSX 4.0', 'VIRUSKILLER 2.0' Category 2: Alteration Detection: -- Category 3: Eradication: 'CHECKVECTORS 2.2', 'VIRUSX 4.0', 'VIRUSKILLER 2.0' Category 4: Vaccine: 'VIRUSKILLER 2.0' Category 5: Hardware Methods: --- Category 6: Cryptographic Methods: --- Countermeasures successful: 'CHECKVECTORS 2.2', 'GUARDIAN 1.2', 'VIRUSKILLER 2.0', 'SCA-PROTECTOR 1.0', 'VIRUSX 4.0'; own suicide function Standard means......: 'CHECKVECTORS 2.2' --------------------- Acknowledgement --------------------------------- Location............: Virus Test Center, University Hamburg, FRG Classification by...: Wolfram Schmidt, Karim Senoucci Documentation by....: Karim Senoucci Date................: 7-July-1992 Information Source..: --- ===================== End of 2001 Virus =============================== [Go back]