VIRUS CHARACTERISTICS LIST V91 Copyright 1989-1992 by McAfee Associates All Rights Reserved. TEL 1-(408) 988-3832 The following list outlines the major characteristics of the known IBM PC and compatible virus strains identified by SCAN. The number of known variants of each virus is also listed. This number is listed in parenthesis beside the name of the strain. The total number of known viruses is summed at the end of the list. The Clean-Up virus I.D. code is included in brackets. ========================================================================== A Infects Fixed Disk Partition Table-A-------------------+ 9 Infects Fixed Disk Boot Sector-----9-----------------+ | 8 Infects Floppy Diskette Boot-------8---------------+ | | 7 Infects Overlay Files--------------7-------------+ | | | 6 Infects EXE Files------------------6-----------+ | | | | 5 Infects COM files------------------5---------+ | | | | | 4 Infects COMMAND.COM----------------4-------+ | | | | | | 3 Virus Installs Self in Memory------3-----+ | | | | | | | 2 Virus Uses Self-Encryption---------2---+ | | | | | | | | 1 Virus Uses STEALTH Techniques------1-+ | | | | | | | | | | | | | | | | | | | Increase in | | | | | | | | | | Infected | | | | | | | | | | Program's | | | | | | | | | | Size 1 2 3 4 5 6 7 8 9 A | | | | | | | | | | | | Virus Disinfector V V V V V V V V V V V Damage ----------------------------------------------------------------------------- Invader (8) [Invader] Clean-Up . x x . x x x x x . 4096 B L O P D LEGEND: Size Increase: N/A - Virus does not attach to files. None - Virus does not change file size (attaches to tag end of file) Overwrites - Virus overwrites beginning of file no file size change All Others - The length in bytes by which a file will increase when infect Damage Fields: B - Corrupts or overwrites the boot sector D - Corrupts data files F - Formats or overwrites all/part of disk L - Directly or indirectly corrupts file linkage O - Affects system run-time operation P - Corrupts program or overlay files Disinfectors: Clean-Up - Clean-Up universal virus disinfector SCAN /D - VIRUSCAN with /D option SCAN /D /A - VIRUSCAN with /D and /A options MDISK /P - MDISK with "P" option All Others - The name of disinfecting program ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ This quality file was downloaded from E X T R E M E ------------+------------ ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿ /|\ ³ ³ / | \ ³ Portland Metro All Text BBS ³ / | \ ³ ³ / | \ ³ 9600: 503-775-0374 ³ / | \ ³ SysOp: Thing One ³ / | \ ³ ³ / | \ ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ d r e a m e s