home *** CD-ROM | disk | FTP | other *** search
- Name : Compuphagozyte 5
-
- Aliases : Compuphagozyte 5b
-
- Type/Size : File/936
-
- Clones : No Clones
-
- Symptoms : No Symptoms
-
- Discovered : 22-10-92
-
- Way to infect: File Infection
-
- Rating : Less Dangerous
-
- Kickstarts : 1.2/1.3/2.X/3.X
-
- Damage : Destroys the startup-sequence.
-
- Removal : Delete virusfile.
-
- Comments : If you`re staring the virus it copies itself at
- address $7C000 by opening the (invisible) file ":
- $a0a0a0a0".
-
- After that it copies itself again but this time at
- address $7C600. Then it patches the CoolCapture and
- the OldOpenLib-Vector. The OldOpenLib-Vector is used
- to infect other disks.
-
- If an other program is using the OldOpenLib-Vector the
- virus creates the virusfilename called ":$a0a0a0a0".
- This filename is invisible, that means that you can`t
- see it by doing a "dir".
-
- After that, the virus tries to manipulate the startup-
- sequence but this routine is so lame coded that ALL
- entries in the startup-sequence will be destroyed...
- After a COMPUPhagozyte infection is the startup-seq.
- 5 bytes long and contains only the virusname.
-
- In the end of the virus you can read:
-
- "The might of The Emperor is unlimited!!!"
-
- A.D 11-94
-