Specializovan² t²denφk o v²poΦetnφ technice
Virov² kalendß°
zß°φ '96
(tabulka vir∙ aktivujφcφh se v zß°φ)
M∞sφc zß°φ je stejn∞ jako jinΘ m∞sφce pln² p°φle₧itostφ pro aktivaci nejr∙zn∞jÜφch poΦφtaΦov²ch vir∙. Na rozdφl od p°edchßzejφcφch m∞sφc∙ se vÜak tentokrßt programßto°i vir∙ strefili do ΦernΘho svou pozornostφ na pßtek 13. ZaΦn∞me tedy t∞mito viry.
V∞tÜina z nich vychßzφ z viru Jerusalem, kter² zaΦal oblibu tohoto termφnu. P°ipome≥me si tedy, ₧e charakteristick²mi symptomy p°φtomnosti tohoto viru (a jeho mnoh²ch nßsledovnφk∙, variant a odvozenin) je zpomalenφ systΘmu po urΦitΘ dob∞, po kterou je virus rezidentnφ v pam∞ti, Φern² ΦtvereΦek na obrazovce, viditelnß p°φtomnost charakteristick²ch °et∞zc∙ v infikovan²ch programech a aktivace. P°i aktivaci je obvykle smazßn program, kter² u₧ivatel spustil.
Do tΘto kategorie pat°φ v∞tÜina vir∙, aktivujφcφch se v pßtek 13. zß°φ. Jsou to virus Friday 13th, Jerusalem, RAM Virus, Suriv 3.00 a virus Westwood. Z tΘto °ady se trochu vymykß virus 1720, kter² krom∞ smazßnφ spuÜt∞nΘho programu jeÜt∞ zkontroluje, zda existuje v poΦφtaΦi pevn² disk, a pokud jej nalezne, p°epφÜe boot sektor a tabulku rozd∞lenφ tohoto disku. Data na n∞m se tak stanou pro u₧ivatele nep°φstupnß. TakΘ virus Hybryd je p°i svΘ aktivaci v pßtek 13. destruktivnφ. P°epφÜe boot sektor aktußlnφ mechaniky p°i spuÜt∞nφ infikovanΘho programu. Navφc je schopen tΘ₧ i poÜkodit programovΘ soubory, kterΘ jsou spouÜt∞ny.
V pr∙b∞hu celΘho m∞sφce zß°φ se op∞t m∙₧eme setkat s aktivacφ skupiny vir∙, kterΘ znßme ji₧ z minul²ch m∞sφc∙. P°ipome≥me si jen, ₧e "Θra" varianty Plastique.Cobol sice konΦφ 21. zß°φ, ale 22. zß°φ je tento virus vyst°φdßn hned jin²mi dv∞ma velmi podobn²mi variantami, variantou Plastique a Plastique-B. Ob∞ se p°i aktivaci projevujφ bu∩ v²razn²m zpomalenφm systΘmu, nebo periodicky emitovan²m zvukem bomby ze systΘmovΘho reproduktoru.
Krom∞ star²ch znßm²ch se tu p°idßvajφ i n∞kterΘ novΘ viry, aktivujφcφ se v pr∙b∞hu celΘho m∞sφce zß°φ. Jednφm z nich je virus AirCop.AirCop-B, co₧ je boot sektorov² virus napadajφcφ boot sektory floppy disket. P°i nabootovßnφ z infikovanΘ diskety se na obrazovce rozsvφtφ (blikß a roluje dßle) nßpis "This is Aircop". Zprßvou se projevuje tΘ₧ aktivace viru Sad, kter² p°i spuÜt∞nφ infikovanΘho programu v pr∙b∞hu m∞sφce zß°φ zobrazφ zprßvu: "Sad virus -- 24/8/91"
MΘn∞ p°φjemn² je virus TenBytes, kter² dostal svΘ jmΘno prßv∞ na zßklad∞ svΘho projevu p°i aktivaci. JakΘmukoliv zapsanΘmu souboru toti₧ chybφ prvnφch deset byt∙ (jsou vynahrazeny deseti byty smetφ na konci souboru). Dochßzφ tak k poÜkozenφ programov²ch i datov²ch soubor∙.
Viry, aktivujφcφ se v konkrΘtnφm zß°ijovΘm datu, jsou jen t°i. Prvnφm z nich je virus It, varianta Viva Mexico, kterß se aktivuje v den nezßvislosti Mexika, tedy v₧dy 16. zß°φ ka₧d² rok. Jednß se o nerezidentnφ infektor COM program∙, kter² p°i spuÜt∞nφ infikovanΘho programu v tento den vypφÜe zprßvu "Viva Mexico!". Zprßva je uvozena obrßcen²m vyk°iΦnφkem.
Druh²m virem je virus RIP-699, tentokrßt rezidentnφ infektor COM program∙. P°i svΘ aktivaci, k nφ₧ dochßzφ jen tehdy, jestli₧e u₧ivatel 8. zß°φ spustφ n∞jak² program, kter² p°epφnß video mod do textovΘho modu 80 x 25, zobrazuje tento virus nßsledujφcφ zprßvu: "RIP Patsy Cline 8th September 1932 -- 6th March 1963"
Poslednφ virus u₧ nenφ tak neÜkodn². Jednß se o virus Violator, varianta Violator B1. Tento op∞t nerezidentnφ infektor COM program∙ v den svΘ aktivace (4. zß°φ) p°i spuÜt∞nφ infikovanΘho programu p°eformßtuje stopu 0 vÜech dostupn²ch mechanik.
Za zmφnku stojφ jeÜt∞ dalÜφ velmi nep°φjemn² virus, kter² se aktivuje v obdobφ od 22. zß°φ do konce roku. Jednß se o rezidentnφ COM a EXE infektor nazvan² podle svΘ efektivnφ dΘlky 4096. Tento virus je siln∞ a zßludn∞ destruktivnφ. Pomalu toti₧ "cross-linkuje" datovΘ i spustitelnΘ soubory. Na prvnφ pohled tedy u₧ivatele nic neupozor≥uje na tyto Ükody, teprve po urΦitΘ dob∞, kdy u₧ je Ükod vφce, dochßzφ k ΦastΘmu zablokovßnφ systΘmu, kterΘ m∙₧e u₧ivatele upozornit, ₧e n∞co v jeho systΘmu nenφ v po°ßdku. DalÜφ zßludnostφ tohoto viru je, ₧e zasahuje i do datov²ch soubor∙. Na infikovanΘm systΘmu se soubory zdajφ b²t zcela v po°ßdku, ale jakmile je virus ze systΘmu odstran∞n, ukß₧e se, ₧e tyto soubory jsou takΘ, a v∞tÜinou nevratn∞, poÜkozeny.
Last minute
Na zßv∞r opravdu informaci z poslednφ minuty o rezidentnφm infektoru COM soubor∙, kter² se objevil na Slovensku a byl analyzovßn kolegou Miro Trnkem z firmy ESET. Na tomto viru je zajφmavΘ to, ₧e p°eje Ü¥astnΘ narozeniny panu ╚ernochovi a toto blahop°ßnφ zobrazuje 8. Φervna. Miro Trnka jej ve svΘm Φlßnku v PC Revue 8/1996 dßvß do souvislosti s Milanem ╚ernochem z naÜφ firmy AEC. Je pot∞ÜitelnΘ, ₧e jak pro konkurenci, tak (mo₧nß) pro pisatele viru je firma AEC pojem, kter² nelze nezmφnit. Rßd bych vÜak touto cestou upozornil oba, ₧e Milan ╚ernoch mß narozeniny v zim∞ a tato gratulace tedy byla p°edΦasnß.
 DEN AKTIVACE |  JM╔NO VIRU
|
|---|---|
| ned∞le 1. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Mindless, Sunday, Sunday-2, Witcode, 10 Past 3, Pinworm
|
| pond∞lφ 2. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Witcode, Kalah.Kalah-499, VirDem. VirDem-833, Beware, Flip. Tormentor.Nuke
|
| ·ter² 3. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Ah, I-B.Demon, I-B.Demon-B, Murphy.Kamasya, Emo-899, VCL.Miles
|
| st°eda 4. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, PS-MPC.No Wednesday, VCl.Red Team, Victor, Violator.Violator-B1
|
| Φtvrtek 5. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, TPE-Girafe, Frogs
|
| pßtek 6. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Bryansk, Immolation, Frere Jacques, PS-MPC.Mimic-Den Zuk, PS-MPC.Mimic-Jerusalem, Murphy.Smack, Murphy.Italian Pest, NaziPhobia, Talking Heads, VCL.Diarrhea, Wild Thing 2
|
| sobota 7. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram, Bones
|
| ned∞le 8. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Mindless, Sunday, Sunday-2, Witcode, Taiwan, RIP-699
|
| pond∞lφ 9. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833
|
| ·ter² 10. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Ah, Emo-899, I-B.Demon, I-B. Demon-B, Murphy.Kamasya, Day 10, Leprosy. Leprosy-664A
|
| st°eda 11. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Victor, VCL. Red Team, PS-MPC.No Wednesday
|
| Φtvrtek 12. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, TPE.Girafe, CD
|
| pßtek 13. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Bryansk, Immolation, Frere Jacques, PS-MPC.Mimic-Den Zuk, PS-MPC. Mimic-Jerusalem, Murphy.Smack, Murphy. Italian Pest, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2, 1720, Friday 13th, Jerusalem, RAM Virus, Suriv 3.00, Westwood,Witcode, Hybryd, NPox.NPox 2.1, Monxla, Rocko
|
| sobota 14. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram, Saturday the 14th
|
| ned∞le 15. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2
|
| pond∞lφ 16. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833 10 Past 3, It.Viva Mexico
|
| ·ter² 17. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Ah, Emo-899, I-B. Demon, I-B.Demon-B, Murphy.Kamasya
|
| st°eda 18. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, PS-MPC.No Wednesday, VCL.Red Team, Victor, NPox, FORM-Virus (Form-18)
|
| Φtvrtek 19. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, TPE.Girafe
|
| pßtek 20. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, Bryansk, Immolation, Frere Jacques, PS-MPC. Mimic-Den Zuk, PS-MPC.Mimic-Jerusalem, Murphy.Smack, Murphy.Italian Pest, NaziPhobia, TalkingHeads, VCL. Diarrhea, Wild Thing 2, Jerusalem.Skism, Jerusalem.Skism-1, Day 10
|
| sobota 21. zß°φ | Plastique.COBOL, Italian Boy, Jerusalem. June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, Murphy. Finger, Jerusalem.Phenome, Murphy.Migram
|
| ned∞le 22. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2, 10 Past 3, VCL.Beva 32
|
| pond∞lφ 23. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833
|
| ·ter² 24. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Ah, Emo-899, I-B.Demon, I-B.Demon-B, Murphy.Kamasya, FORM-Virus, Rocko.Mutating Rocko
|
| st°eda 25. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, PS-MPC.No Wednesday, VCL.Red Team, Victor
|
| Φtvrtek 26. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, TPE.Girafe
|
| pßtek 27. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Bryansk, Immolation, Frere Jacques, PS-MPC.Mimic-Den Zuk, PS-MPC.Mimic-Jerusalem, Murphy.Smack, Murphy.Italian Pest, NaziPhobia, TalkingHeads, VCL.Diarrhea, Wild Thing 2, Jerusalem.Skism, Jerusalem.Skism-1, Jerusalem.Sub-Zero B
|
| sobota 28. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Murphy.Finger, Jerusalem.Phenome, Murphy.Migram
|
| ned∞le 29. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Mindless, Sunday, Sunday-2, Witcode, Doctor Qumak 2, 10 Past 3, Geek, Highlander
|
| pond∞lφ 30. zß°φ | Italian Boy, Jerusalem.June17TH, Got-You, Jerusalem.Jerusalem-PLO, Jerusalem.Mendoza, AirCop.AirCop-B, Sad, TenBytes, Plastique, Plastique-B, 4096, Carfield, I-B.Bad Guy, I-B.Bad Guy 2, I-B.Exterminator, Immolation, Kalah.Kalah-499, Witcode, VirDem.VirDem-833, Day 10 |