home *** CD-ROM | disk | FTP | other *** search
-
- *********************************************
- *** Reports collected and collated by ***
- *** PC-Virus Index ***
- *** with full acknowledgements ***
- *** to the authors ***
- *********************************************
-
-
- BURGER VIRUSES
- ==============
-
- Several primitive viruses have emerged as a result of Ralf Burger's
- book "Das Grosse Computervirenbuch" which was first published in
- 1987 with an official English edition in 1988 and an (unofficial ?)
- Russian edition in 1990.
-
- A virus called 405 has given rise to several variants. 405 is an
- early primitive overwriting virus that infects COM files only. It
- is believed to have originated in Germany. Some anti-virus scanners
- simply identify it as BURGER. It only infects files in the current
- directory and will continually reinfect the same file.
-
- Viruses called VIRDEM, also described in the book, have also
- appeared.
-
- One of the Aids Viruses, described below, is also from the same
- stable.
-
- AIDS VIRUS 1 (VIRUS INFECTING VGA2CGA FILE)
- ===========================================
-
- Extract from Virus-L 2.231
-
- Date: 01 Nov 89 15:16:07 -0500
-
- Subject: re: VGA2CGA infected with virus? (PC)
-
- I have a sample of this thing (or what I assume is the same thing)
- now; it seems to be a rather silly overwriting-virus (that is,
- rather than arranging to execute more or less silently before the
- victim, it simply arranges to execute *instead of* the victim; the
- victim code, at least much of it, no longer exists). It also seems
- to be written in a Borland language, perhaps Turbo Pascal. It's
- very possible that it's based on the Turbo Pascal overwriting-virus
- "Number One", source for which was published in the Burger book
- "Computer Viruses, a high-tech disease". I haven't taken it apart
- enough to know, for instance, what damage if any it does, or when it
- prints its message; it's hard to reverse-compile compiler output,
- and this virus isn't likely to spread very far (since an infected
- file is obviously infected, in that it doesn't do what it used
- to...).
-
- DC
-
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++