home *** CD-ROM | disk | FTP | other *** search
/ ProfitPress Mega CDROM2 …eeware (MSDOS)(1992)(Eng) / ProfitPress-MegaCDROM2.B6I / UTILITY / VIRUS / PCV4RPT.ZIP / MIRROR.RPT < prev    next >
Encoding:
Text File  |  1991-05-09  |  3.4 KB  |  67 lines
  1.  
  2.              *********************************************
  3.              ***   Reports collected and collated by   ***
  4.              ***            PC-Virus Index             ***
  5.              ***      with full acknowledgements       ***
  6.              ***            to the authors             ***
  7.              *********************************************
  8.  
  9.  
  10.  
  11. ===== Computer Virus Catalog 1.2: Mirror Virus (12-February-1991) ====
  12. Entry................. Mirror Virus
  13. Alias(es)............. Flip Clone Virus
  14. Strain................ ---
  15. Detected: when........ 18-December-1990 (when VTC received virus code)
  16.           where....... Hamburg, Germany
  17. Classification........ Program Virus, indirect action, postfix
  18. Length of Virus....... File: either 925 or 933 bytes
  19.                        RAM:  928 bytes
  20. ---------------------- Preconditions ---------------------------------
  21. Operating System(s)... MS/PC-DOS
  22. Computer models....... All IBM PC compatibles.
  23. ---------------------- Attributes ------------------------------------
  24. Easy identification... ---
  25. Type of infection..... Program virus that only infects files with the
  26.                           extension EXE. The virus loads itself into
  27.                           RAM and hooks various INT 21h functions.
  28.                           When one of these are called, the virus will
  29.                           search the current directory for EXE files
  30.                           to infect. The virus will be located behind
  31.                           the host program. A generation counter is
  32.                           incremented whenever an infected file is run
  33.                           again.
  34. Infection trigger..... Any time an infected file is run.
  35. Media affected........ Any logical disks.
  36. Interrupts hooked..... INT 21h Functions 0fh,16h,3ch,3dh,4b00h,4b03h
  37. Damage................ Permanent damage: ---
  38.                        Transient Damage: when triggered, the screen
  39.                            will flip horizontally character for
  40.                            character, but not as sophisticatedly as
  41.                            Flip virus.
  42. Damage trigger........ If a program is run with a generation counter
  43.                           of 10, a routine will be installed with
  44.                           INT 1ch pointing to it. After approximately
  45.                           10 minutes, the damage will trigger.
  46. Particularities....... There are a number of possible design bugs in
  47.                           the virus, that may cause unpredictable
  48.                           behaviour.
  49. Similarities.......... Although having a similar damage to Flip, this
  50.                           is a completely different virus.
  51. ---------------------- Agents ----------------------------------------
  52. Countermeasures....... ---
  53.  - ditto - successful. McAfee's Scan version 72
  54. Standard Means........ ---
  55. ---------------------- Acknowledgements ------------------------------
  56. Location.............. Virus Test Center, University Hamburg, Germany
  57. Classification by..... Morton Swimmer
  58. Documentation by...... Morton Swimmer
  59. Date.................. 12-February-1991
  60. Information source.... ---
  61. ====================== End of Mirror Virus ===========================
  62.  
  63.  
  64.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  65.   ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
  66.   +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  67.