home *** CD-ROM | disk | FTP | other *** search
- ┌─────────────────────────────┐
- │ VIRUS REPORT │
- │ Chaos │
- └─────────────────────────────┘
-
- Date of Origin: First reported by James Berry in December, 1989.
-
- Place of Origin: Possibly Kent, England
-
- Host Machine: PC compatibles.
-
- Host Files: hard disk and floppy disk boot sectors.
-
- OnScreen Symptoms: None. Infected boot sectors will contain these
- messages: "Welcome to the New Dungeon", "Chaos", and "Letz be cool
- guys".
-
- Increase in Size of Infected Files: n/a
-
- Nature of Damage: Remains resident. Corrupts or overwrites boot sector,
- affects system run-time operation, corrupts data files, formats or
- erases all/part of disk.
-
- Detected by: Scanv53+.
-
- Removed by: MDisk, Cleanup, or the DOS SYS command.
-
- Chaos overwrites the boot sector, and flags the disk as being full of
- bad sectors upon activation, though these bad sectors are still
- readable. The activation criteria are unknown.
-
-
- ╔════════════════════════════════════════════════════════════════════╗
- ║ This document was adapted from the book "Computer Viruses", ║
- ║ which is copyright and distributed by the National Computer ║
- ║ Security Association. It contains information compiled from ║
- ║ many sources. To the best of our knowledge, all information ║
- ║ presented here is accurate. ║
- ║ ║
- ║ Please send any updates or corrections to the NCSA, Suite 309, ║
- ║ 4401-A Connecticut Ave NW, Washington, DC 20008. Or call our BBS ║
- ║ and upload the information: (202) 364-1304. Or call us voice at ║
- ║ (202) 364-8252. This version was produced May 22, 1990. ║
- ║ ║
- ║ The NCSA is a non-profit organization dedicated to improving ║
- ║ computer security. Membership in the association is just $45 per ║
- ║ year. Copies of the book "Computer Viruses", which provides ║
- ║ detailed information on over 145 viruses, can be obtained from ║
- ║ the NCSA. Member price: $44; non-member price: $55. ║
- ║ ║
- ║ The document is copyright (c) 1990 NCSA. ║
- ║ ║
- ║ This document may be distributed in any format, providing ║
- ║ this message is not removed or altered. ║
- ╚════════════════════════════════════════════════════════════════════╝
-
-