home *** CD-ROM | disk | FTP | other *** search
-
- *********************************************
- *** Reports collected and collated by ***
- *** PC-Virus Index ***
- *** with full acknowledgements ***
- *** to the authors ***
- *********************************************
-
-
- ARMAGEDON THE GREEK VIRUS
- =========================
-
- Extracts from Virus-L
-
- Date: Mon, 04 Jun 90 23:20:23 +0300
- From: Yuval Tal, Rehovot, Israel
-
- I've just received a copy of a virus called "Armageddon the GREEK".
- Have anyone ever seen this virus? SCAN 62 did not identify this
- virus so I consider this as a new virus. I've checked it a bit and
- from what I found out, at a certain time, the virus sends a special
- command to your ports which a Hayes compatible modem can
- understand!
-
- ========= more ===========
-
-
- Date: Thu, 14 Jun 90 02:08:06 +0700
- From: Hmm70@GRATHUN1.BITNET
- Subject: armageddon the GREEK virus (PC)
-
- *****************************************************************************
- * *
- * Vaccine for the >> Armagedon the GREEK << virus *
- * *
- * (c) copyright 1990 George Spiliotis *
- * English documentation by Lefteris Kalamaras *
- *****************************************************************************
-
- This is a public domain program. It is in NO way allowed for anyone
- to sell this program or its documentation for profit. (Usual public
- domain rules apply)
-
- DISCLAIMER
-
- The author of this program is in NO way liable for any damage caused
- by this program, its use or its modifications. (Usual disclaimer
- rules apply)
- "Armageddon the GREEK" scan
-
- I received a copy of a program recently, which contained a virus
- SCAN V62 could NOT identify! After having worked on its code for
- some time, I discovered the following:
-
- 1) The virus becomes resident in memory
- 2) It infects .COM files ONLY
- 3) It sends the message "Armageddon the GREEK" to the 4 com ports
- from time to time
-
- It is possible that this virus is a modified existing one in which
- the author, by changing the message to "Armageddon the GREEK",
- managed to get SCAN V62 inoperative.
-
- This program is a vaccine for "Armageddon the GREEK". It can also
- scan and clean modified versions of this virus if the only thing
- changed is the message.
-
- You can stop the vaccine from cleaning the infected files from the
- virus by specifying "/n" in the command line.
-
- VALIDATE gave the following results:
- File Name: scanarma.exe
- Size: 7,584
- Date: 6-1-1990
- File Authentication:
- Check Method 1 - C9FC
- Check Method 2 - 192C
-
- Examples:
-
- (SCANARMA c: (checks drive c:)
- (SCANARMA a:\temp (checks drive a: dir temp) (SCANARMA /n b:
- (checks b: but does NOT clean the infected files) ( Good Luck!
-
- For more information, you can contact the author of the vaccine,
- George Spiliotis at the address below, or call LinK BBS in Athens,
- where you will find the latest version of the vaccine, or send a
- message to LEKA@GRATHUN1 to contact Lefteris Kalamaras.
-
- George Spiliotis
- 26-28 Digeni st. Voula
- Athens, 16673 GREECE
-
- or
-
- Lefteris Kalamaras
- 43 Serifou st. K.Patissia
- Athens 11254 Greece
- BBS phone : 30-1-867-4834
- voice # : 30-1-864-5363
- BitNet : LEKA@GRATHUN1 or ELKALAMARAS@VASSAR
-
-
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++