home *** CD-ROM | disk | FTP | other *** search
/ ProfitPress Mega CDROM2 …eeware (MSDOS)(1992)(Eng) / ProfitPress-MegaCDROM2.B6I / UTILITY / VIRUS / PCV4RPT.ZIP / DENZUK.RPT < prev    next >
Encoding:
Text File  |  1991-05-09  |  3.7 KB  |  92 lines
  1.  
  2.              *********************************************
  3.              ***   Reports collected and collated by   ***
  4.              ***            PC-Virus Index             ***
  5.              ***      with full acknowledgements       ***
  6.              ***            to the authors             ***
  7.              *********************************************
  8.  
  9.  
  10.  
  11. ====== Computer Virus Catalog 1.2: "den Zuk" Virus (15-Feb-90) =======
  12.  
  13. Entry.................. den Zuk (B)
  14. Alias(es).............. Venezuelan, "The Search"
  15.  
  16. Strain................. den Zuk
  17. Detected: when......... ---
  18.           where........ ---
  19. Classification......... System (Boot) virus, RAM resident
  20. Length of Virus........ 1 boot sector and 9 sectors on track 40
  21.  
  22. ----------------------- Preconditions --------------------------------
  23.  
  24. Operating System(s).... MS/PC-DOS
  25. Version/Release........
  26. Computer models........ All IBM PC and AT compatibles.
  27.  
  28. ----------------------- Attributes -----------------------------------
  29.  
  30. Easy identification.... The label on an infected disk will read:
  31.                              "Y.C.1.E.R.P", where the "." is the F9h
  32.                              character.
  33.  
  34. Type of infection...... System: the virus resides on the boot sector
  35.                              and at track 40, head 0, sectors 1 - 9.
  36.                              If an infected disk is booted, the virus
  37.                              will load itself into the top of memory.
  38.                              From there it will infect any floppy
  39.                              that is written to.
  40.  
  41. Infection trigger...... Will infect at any time.
  42.  
  43. Media affected......... Only floppies. The virus does not identify
  44.                              other types of floppies larger than
  45.                              360kb.  This means that, for instance,
  46.                              the track 40 of a 1,2kb disk will be
  47.                              overwritten, and data can be lost, if
  48.                              these sectors were in use.
  49.  
  50. Interrupts hooked...... Int 13h, Int 9
  51.  
  52. Damage................. A graphical "DEN ZUK" will stream in from
  53.                              the sides on CGA and EGA screens.
  54.                              (nice effect!)
  55.  
  56. Damage trigger......... The graphics will appear on every Ctrl-
  57.                              Alt-Delete (reset).
  58.  
  59. Particularities........ Den Zuk - B will replace an occurance of
  60.                              den Zuk - A (Ohio) as well as the Brain
  61.                              strains of viruses.
  62.                              The virus will mascarade a clean boot
  63.                              sector.
  64.  
  65. Similarities........... It is a slightly improved version of
  66.                              den Zuk - A.
  67.  
  68. ---------------------------- Agents-----------------------------------
  69.  
  70. Countermeasures........ ---
  71.  
  72.  - ditto - successful.. ---
  73.  
  74. Standard Means......... Boot from a clean disk and use SYS to over-
  75.                              write the infected boot sector. It is,
  76.                              however, always better to format the
  77.                              disk.
  78.  
  79. ----------------------- Acknowledgements------------------------------
  80. Location............... Virus Test Center, University of Hamburg, FRG
  81. Classification by...... Morton Swimmer
  82. Documentation by....... Morton Swimmer
  83. Date................... 15-Feb-1990
  84. Information source..... ---
  85.  
  86.  
  87. ======================= End of den Zuk (B) Virus =====================
  88.  
  89.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  90.   ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
  91.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  92.