home *** CD-ROM | disk | FTP | other *** search
- ┌─────────────────────────────┐
- │ VIRUS REPORT │
- │ Vcomm Virus │
- └─────────────────────────────┘
-
- Synonyms: 637
-
- Date of Origin: December, 1989.
-
- Place of Origin: Poland.
-
- Host Machine: PC compatibles.
-
- Host Files: Memory resident. Infects EXE files.
-
- Increase in Size of Infected Files: 637 bytes.
-
- Nature of Damage: Corrupts program files.
-
- Detected by: F-Prot, Scanv60+, IBM Scan, Pro-Scan.
-
- Removed by: F-Prot, Scan/D, or delete infected files.
-
- When an infected file is run, Vcomm attempts to infect one EXE file
- in the current directory. During infection, Vcomm first pads the file so
- that the file's length to a multiple of 512 bytes, then it adds its 637
- bytes of virus code to the end of the file.
-
- The memory resident portion of the virus intercepts any disk writes
- that are attempted, and changes them into disk reads.
-
-
- ╔════════════════════════════════════════════════════════════════════╗
- ║ This document was adapted from the book "Computer Viruses", ║
- ║ which is copyright and distributed by the National Computer ║
- ║ Security Association. It contains information compiled from ║
- ║ many sources. To the best of our knowledge, all information ║
- ║ presented here is accurate. ║
- ║ ║
- ║ Please send any updates or corrections to the NCSA, Suite 309, ║
- ║ 4401-A Connecticut Ave NW, Washington, DC 20008. Or call our BBS ║
- ║ and upload the information: (202) 364-1304. Or call us voice at ║
- ║ (202) 364-8252. This version was produced May 22, 1990. ║
- ║ ║
- ║ The NCSA is a non-profit organization dedicated to improving ║
- ║ computer security. Membership in the association is just $45 per ║
- ║ year. Copies of the book "Computer Viruses", which provides ║
- ║ detailed information on over 145 viruses, can be obtained from ║
- ║ the NCSA. Member price: $44; non-member price: $55. ║
- ║ ║
- ║ The document is copyright (c) 1990 NCSA. ║
- ║ ║
- ║ This document may be distributed in any format, providing ║
- ║ this message is not removed or altered. ║
- ╚════════════════════════════════════════════════════════════════════╝
-
-