Specializovan² t²denφk o v²poΦetnφ technice
Virov² kalendß°
Φervenec '96
(tabulka vir∙ aktivujφcφh se v Φervenci)
Jak u₧ pravideln² Φtenß° jist∞ tuÜφ, ani Φervenec, by¥ je m∞sφcem prßzdninov²m, a v mnoha oborech lidskΘho Φin∞nφ okurkovou sez≤nou, nenφ m∞sφcem klidu v oblasti bezpeΦnosti poΦφtaΦ∙ a jejich dat.
V obvyklΘ tabulce najdeme u ka₧dΘho dne na prvnφm mφst∞ viry, kterΘ se aktivujφ v pr∙b∞hu celΘho m∞sφce. Proto jsou zaΦßtky °ßdk∙ v₧dy stejnΘ. N∞kterΘ viry ji₧ znßme z minul²ch m∞sφc∙ (a u₧ jsme o nich i podrobn∞ji psali) -- to jsou viry Plastique.COBOL, Italian Boy a Jerusalem.June17TH, ostatnφ jsou novinkou.
Virus ARCV 330 se aktivuje v pr∙b∞hu celΘho m∞sφce Φervence, a jednß se o celkem nezajφmav² nerezidentnφ infektor COM program∙. P°i ka₧dΘm spuÜt∞nφ infikovanΘho programu v pr∙b∞hu m∞sφce Φervence (a tedy p°i ka₧dΘ dalÜφ infekci) dojde k zobrazenφ zprßvy "[330] by ICE-9" a k nßslednΘmu zablokovßnφ systΘmu. Virus tedy v Φervenci rozhodn∞ nep°ehlΘdnete, pokud se s nφm setkßte.
DalÜφ viry aktivujφcφ se v pr∙b∞hu celΘho Φervence nßs budou doprovßzet i v nßsledujφcφch m∞sφcφch. Jednß se o viry Got-You, Jerusalem.Jerusalem-PLO a Jerusalem.Mendoza.
Virus Got-You je nerezidentnφ infektor EXE program∙, kter² se m∙₧e projevovat v dob∞ svΘ aktivace velmi r∙znorod∞. V p°φpad∞ poΦφtaΦe zapojenΘho do sφt∞ se zajφmß p°edevÜφm o tiskßrnu. Bu∩ zm∞nφ jejφ setup a nebo zcela znemo₧nφ jejφ pou₧φvßnφ zruÜenφm vÜech p°φsluÜn²ch p°esm∞rovßnφ na tiskßrnu. V ostatnφch p°φpadech bu∩ vytiskne obsah obrazovky (jakoby u₧ivatel pou₧il tlaΦφtko PrintScreen), nebo si ohledß p°φtomnΘ mechaniky v systΘmu a poslednφ z nich znep°φstupnφ a nebo vytvo°φ na nßhodnΘ mechanice skryt² soubor o dΘlce 10 240 bajt∙, pojmenovan² G OT YOU. x, kter² obsahuje nßhodnß data ze systΘmovΘ pam∞ti.
Zb²vajφcφ dv∞ varianty viru Jerusalem se chovajφ velmi podobn∞ jako klasick² virus Jerusalem. Zpomalujφ chod systΘmu po urΦitΘ dob∞ setrvßnφ v pam∞ti a ma₧ou v Φas aktivace spuÜt∞nΘ soubory. Rozdφl je pouze v tom, ₧e zatφmco u varianty Jerusalem-PLO dojde v₧dy ke smazßnφ, u varianty Mendoza ke smazßnφ souboru p°i jeho spuÜt∞nφ dojde pouze s pravd∞podobnostφ asi 10 %.
V dalÜφ Φßsti tabulky pak najdeme viry aktivujφcφ se v zßvislosti na po°adovΘm dni v m∞sφci a na dni v t²dnu. Zastavme se dnes u vir∙ aktivujφcφch se v ned∞li. VÜechny majφ spoleΦnΘ to, ₧e virovφ programßto°i se v nich velmi zajφmajφ o to, abyste se snad nep°et∞₧ovali pracφ i v ned∞li. ZobrazovanΘ zprßvy i jmΘna vir∙ tomu napovφdajφ.
Viry Sunday a Sunday-2 (v obou p°φpadech se jednß o rezidentnφ infektor EXE a COM program∙) se sice liÜφ zobrazovanou zprßvou, ale nikoliv jejφm smyslem. V obou p°φpadech se dozvφte, ₧e je ned∞le a vy nemßte co pracovat.
Virus Sunday vßm krom∞ tΘto zprßvy Φasto jeÜt∞ poÜkodφ FAT tabulku (existuje vÜak i varianta, kterß nezobrazuje ani zprßvu, ani nepoÜkozuje FAT).
Virus Sunday-2 po spuÜt∞nφ infikovanΘho programu v ned∞li zobrazφ takΘ zprßvu zaΦφnajφcφ "It's Sunday. Why are you working?" a pak zablokuje vßÜ systΘm, aby vßm prßci alespo≥ znep°φjemnil, kdy₧ ne zcela znemo₧nil. Ve viru je k≤d pro formßtovßnφ disku, ale vzhledem k jeho chybnosti k niΦemu tak drastickΘmu nedochßzφ. Do tΘto skupiny by jeÜt∞ pat°il virus Witcode, kter² takΘ (ne v₧dy, jen s urΦitou pravd∞podobnostφ) p°i spuÜt∞nφ infikovanΘho EXE programu zobrazφ zprßvu "You really shouldn't work on Sundays...".
Trochu jinΘho ra₧enφ a mnohem mΘn∞ p°φjemnΘ jsou dva zb²vajφcφ ned∞lnφ viry: virus Mindless a virus Doctor Qumak 2.
Virus Mindless je p°episujφcφ nerezidentnφ COM infektor. To znamenß, ₧e infikovanΘ programy jsou trvale poÜkozeny, nebo¥ jejich prvnφch 423 bajt∙ je p°epsßno p°i infekci virov²m k≤dem. Navφc virus niΦφ i datovΘ soubory, jejich₧ extenze zaΦφnß na pφsmeno "C", nebo¥ si je splete s COM soubory a jako s takov²mi s nimi jednß. V pr∙b∞hu svΘ aktivace virus p°epφÜe boot sektory a zaΦßtky mechaniky C: a aktußlnφ mechaniky, pokud je jinß. V poÜkozenΘm boot sektoru (v infikovan²ch souborech nikoliv) najdeme zprßvu, kterß jasn∞ ukazuje na americk² p∙vod viru:
[Youngsters Against McAffee] - NATAS KAUPAS
The Mindless Virus v1.0
Virus Doctor Qumak 2 je rezidentnφ infektor COM program∙, kter² v dob∞ svΘ aktivace ka₧dou ned∞li po devßtΘm dni v m∞sφci simuluje write protect error p°i pokusu u₧ivatele o zßpis na disketu. To je sice nep°φjemnΘ, ale ne kritickΘ. HorÜφ je jeho druh² typ aktivace, kter² nenφ zßvisl² na dni v t²dnu, ale na poΦtu uskuteΦn∞n²ch zßpis∙ na disk od chvφle, kdy se virus stal rezidentnφm v systΘmu. Jakmile je dosa₧eno 100 zßpis∙, virus zaΦn∞ pomalu (po t°ech) m∞nit byty v nßsledujφcφm sektoru. Teprve a₧ jich tφmto zp∙sobem zm∞nφ 100, upozornφ na to u₧ivatele zprßvou:
The famous cooperation strikes again: IT IS DOCTOR QUMAK II!
Watch out for the next virus from Krak≤w, Poland!
KoneΦn∞ zßv∞r ka₧dΘ rubriky tvo°φ viry aktivujφcφ se v konkrΘtnφ ΦervencovΘ datum. T∞ch tentokrßt nenφ mnoho. Jednß se o tyto viry: VCL.Beva 96, July 13TH, Arale a July 26TH.
Virus Beva 32 je vytvo°en pomocφ virovΘho toolkitu VCL, jak nßzev napovφdß. Jednß se o nerezidentnφ COM infektor, kter² p°i ka₧dΘ infekci (tedy p°i ka₧dΘm spuÜt∞nφ infikovanΘho programu) 4. Φervence zobrazφ u₧ivateli zprßvu:
Happy 4th! Hope you enjoy your messed up computer!
-=BEv#A96=-
Virus July 13TH je generick² nerezidentnφ EXE infektor, kter² p°ipomφnß p°i svΘ aktivaci virus Ping Pong, proto₧e po obrazovce skßΦe odrß₧ejφcφ se mφΦek. N∞kdy za sebou zanechßvß stopy ve form∞ teΦek, n∞kdy zp∙sobuje rolovßnφ obrazovky. Aktivuje se, jak napovφdß jeho jmΘno, 13. Φervence.
TakΘ virus July 26TH dßvß jasn∞ znßt, kter² je jeho den. Je to destruktivnφ, nebezpeΦn² nerezidentnφ COM infektor, kter² v den svΘ aktivace p°i spuÜt∞nφ infikovanΘho COM programu poÜkodφ aktußlnφ mechaniku tak, ₧e je nadßle nep°φstupnß.
Virus Arale dob°e znßme ji₧ z minul²ch m∞sφc∙. Jeho ΦervencovΘ datum je 15. Φervence. V tento den poblahop°eje panφ Esther F. P. a pak vrßtφ u₧ivatele do DOSu.
 DEN AKTIVACE |  JM╔NO VIRU
|
|---|---|
| pond∞lφ 1. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, 10 Past 3, Pinworm, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, Witcode, I-B.Exterminator, Immolation, Kalah. Kalah-499, VirDem.VirDem-833, Beware
|
| ·ter² 2. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Flip, Tormentor.Nuke, Emo-899,Ah, I-B.Demon, I-B.Demon-B, Murphy. Kamasya
|
| st°eda 3. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, PS-MPC.No Wednesday, Victor, VCL.Red Team
|
| Φtvrtek 4. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, TPE.Girafe, VCL. Beva 96
|
| pßtek 5. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Frogs, Bryansk, Immolation, Frere Jacques, PS-MPC. Mimic-Den Zuk, PS-MPC.Mimic -Jerusalem,Murphy.Smack, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2, Jerusalem.PayDay
|
| sobota 6. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram
|
| ned∞le 7. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Bones, Mindless, Sunday, Sunday-2, Witcode
|
| pond∞lφ 8. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Taiwan, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B. Exterminator, Immolation, Witcode, Kalah.Kalah-499, VirDem.VirDem-833
|
| ·ter² 9. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza Ah, Emo-899, I-B.Demon, I-B.Demon-B, Murphy. Kamasya
|
| st°eda 10. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Day10, Leprosy. Leprosy-664A, VCL.Red Team, Victor, PS-MPC.No Wednesday
|
| Φtvrtek 11. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, TPE.Girafe
|
| pßtek 12. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Bryansk, Immolation, Frere Jacques, PS-MPC.Mimic-Den Zuk, PS-MPC.Mimic- Jerusalem, Murphy.Smack, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2, Jerusalem-PayDay
|
| sobota 13. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza NPox.NPox 2.1, Monxla, Rocko, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram, July 13TH
|
| ned∞le 14. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2
|
| pond∞lφ 15. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Carfield, I-B. Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah. Kalah-499, Witcode, VirDem.VirDem-833, Arale
|
| ·ter² 16. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, 10 Past 3, Ah, Emo-899, I-B.Demon, I-B.Demon-B, Murphy.Kamasya
|
| st°eda 17. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, PS-MPC.No Wednesday, Victor, VCL.Red Team
|
| Φtvrtek 18. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, NPox, FORM-Virus. Form-18, TPE.Girafe
|
| pßtek 19. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Bryansk, Immolation, Frere Jacques, PS-MPC. Mimic-Den Zuk, Murphy.Smack, PS-MPC.Mimic-Jerusalem, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2,Jerusalem.PayDay, Jerusalem. Skism, Jerusalem.Skism-1
|
| sobota 20. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Day 10, Murphy. Finger, Jerusalem.Phenome, Murphy.Migram
|
| ned∞le 21. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2
|
| pond∞lφ 22. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, 10 Past 3, VCL.Beva 32, Carfield, I-B.Bad Guy, I-B. Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833
|
| ·ter² 23. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza Ah, Emo-899, I-B.Demon, I-B.Demon-B, Murphy. Kamasya
|
| st°eda 24. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, FORM-Virus, Rocko.Mutating Rocko, PS-MPC.No Wednesday, VCL.Red Team, Victor
|
| Φtvrtek 25. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, TPE.Girafe
|
| pßtek 26. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Bryansk, Immolation, Frere Jacques, PS-MPC. Mimic-Den Zuk, PS-MPC.Mimic-Jerusalem,Murphy.Smack, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2, Jerusalem.PayDay, Jerusalem.Skism, Jerusalem.Skism-1, Jerusalem. Sub-Zero.B, July 26TH
|
| sobota 27. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram
|
| ned∞le 28. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2
|
| pond∞lφ 29. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, 10 Past 3, Geek, Highlander, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833
|
| ·ter² 30. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Day10, Ah, Emo-899, I-B.Demon, I-B.Demon-B, Murphy.Kamasya
|
| st°eda 31. Φervence | Plastique.COBOL, Italian Boy, Got-You, Jerusalem.June 17TH, ARCV 330, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, Tormentor-Lixo Nuke, VCL.Diogenes, PS-MPC.No Wednesday, Victor, VCL.Red Team |