home *** CD-ROM | disk | FTP | other *** search
/ ProfitPress Mega CDROM2 …eeware (MSDOS)(1992)(Eng) / ProfitPress-MegaCDROM2.B6I / UTILITY / VIRUS / PCV4RPT.ZIP / CANCER.RPT < prev    next >
Encoding:
Text File  |  1991-05-09  |  3.4 KB  |  85 lines
  1.  
  2.              *********************************************
  3.              ***   Reports collected and collated by   ***
  4.              ***            PC-Virus Index             ***
  5.              ***      with full acknowledgements       ***
  6.              ***            to the authors             ***
  7.              *********************************************
  8.  
  9.  
  10. ====== Computer Virus Catalog 1.2: "CANCER" Virus (11-June-1990) =====
  11.  
  12. Entry.................. "CANCER" Virus
  13. Alias(es).............. ---
  14. Strain................. Amstrad Virus Strain
  15. Detected: when......... Fall 1989
  16.           where........ Bulgaria
  17. Classification......... Program virus, direct action, prefix
  18. Length of Virus........ COM file will be increased by multiples of
  19.                            740 bytes, but the actual virus is only
  20.                            228 bytes long!
  21.  
  22. ------------------------ Preconditions--------------------------------
  23.  
  24. Operating System(s).... MS-DOS
  25. Version/Release........ 2.xx and upward
  26. Computer models........ IBM-PC's and compatibles
  27.  
  28. -------------------------- Attributes---------------------------------
  29.  
  30. Easy identification.... An infected file will contain the string "IV"
  31.                            at offset 3 in the COM file. Unlike the
  32.                            other variants of Amstrad, this is never
  33.                            used by this virus.
  34.  
  35. Type of infection...... A program virus that infects all COM files in
  36.                            the current directory by prepending itself
  37.                            to its victim. The virus will not spread
  38.                            very quickly.
  39.  
  40. Infection trigger...... As it is a direct action virus, it will only
  41.                            infect on run-time, but will do this at
  42.                            any time.
  43.  
  44. Media affected......... Any logical drive that is the "current" drive.
  45.  
  46. Interrupts hooked...... ---
  47.  
  48. Damage................. The virus will repeatedly infect a file, until
  49.                            it is no longer loadable (hence its name).
  50.  
  51. Damage trigger......... none, its damage is its infection and the
  52.                            resulting file length increase.
  53.  
  54. Particularities........ ---
  55.  
  56. Similarities........... Cancer is a variant of Amstrad.
  57.  
  58. ---------------------------- Agents-----------------------------------
  59.  
  60. Countermeasures........ Checksumming programs will detect the changes
  61.                            to the files.
  62.  
  63.  - ditto - successful.. V847clr will find Cancer as a possible variant
  64.                            of Amstrad, but can not destroy it.
  65.  
  66. Standard Means......... Believe it or not, write protecting programs
  67.                            with ATTR will prevent the virus from
  68.                            spreading to them.
  69.  
  70. ----------------------- Acknowledgements------------------------------
  71. Location............... Bulgarian Academy of Science and
  72.                         University of Hamburg, Virus Test Center
  73. Classification by...... Morton Swimmer
  74. Documentation by....... Vesselin Bontchev
  75. Date................... 11-June-1990
  76. Information source..... ---
  77.  
  78.  
  79. ======================= End of "CANCER" Virus ========================
  80.  
  81.  
  82.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  83.   ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
  84.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  85.