====== Computer Virus Catalog 1.2: VIRCONSET2 Virus (31-July-1993) ===== Entry...............: VirConSet2 Virus Alias(es)...........: bbtest Virus Virus Strain........: --- Virus detected when.: --- where.: --- Classification......: System virus (bootblock), memory resident Length of Virus.....: 1.Length on storage medium: 1024 byte 2.Length in RAM: 1024 byte --------------------- Preconditions ------------------------------------ Operating System(s).: AMIGA-OS Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all Computer model(s)...: All AMIGA models --------------------- Attributes --------------------------------------- Easy Identification.: Typical string: " > test" visible in bootblock Type of infection...: System infection: RAM resident, reset resident, bootblock infector Infection Trigger...: Insertion of a floppy disk Storage media affected: Only floppy disks Interrupts hooked...: --- Damage..............: Permanent damage: overwriting bootblock Transient damage: displaying AlertBox containing silly text Damage Trigger......: Permanent damage: insertion of a floppy disk Transient damage: directly before 5th infection Particularities.....: 1) Virus contains flag which indicates whether or not to de/encode the virus. 2) Virus has been written with some kind of generator; three versions of the virus are known which only differ in a text string at the begin of the virus and the content of the de/encode flag. Similarities........: --- --------------------- Agents ------------------------------------------- Countermeasures.....: VT 2.54, VirusZ 3.06, VirusChecker 6.28 Countermeasures successful: VT 2.54 Standard means......: VT 2.54 --------------------- Acknowledgement ---------------------------------- Location............: Virus Test Center, University Hamburg, Germany Classification by...: Jens Vogler, Karim Senoucci Documentation by....: Karim Senoucci, Jens Vogler Date................: 31.July-1993 Information Source..: Reverse analysis of virus code / Heiner Schneegold ===================== End of VIRCONSET2 Virus ========================== [Go back]