home *** CD-ROM | disk | FTP | other *** search
/ ProfitPress Mega CDROM2 …eeware (MSDOS)(1992)(Eng) / ProfitPress-MegaCDROM2.B6I / UTILITY / VIRUS / PCV4RPT.ZIP / FORM.RPT < prev    next >
Encoding:
Text File  |  1991-05-09  |  3.3 KB  |  86 lines
  1.  
  2.              *********************************************
  3.              ***   Reports collected and collated by   ***
  4.              ***            PC-Virus Index             ***
  5.              ***      with full acknowledgements       ***
  6.              ***            to the authors             ***
  7.              *********************************************
  8.  
  9.  
  10. ======= Computer Virus Catalog 1.2: "Form" Virus (5-June-1990) =======
  11.  
  12. Entry.................. "Form" Virus
  13. Alias(es).............. ---
  14. Strain................. ---
  15. Detected: when......... February 1990
  16.           where........ Zuerich, Switzerland (reported to be very
  17.                         widely spread amongst the Swiss schools in
  18.                         canton Zug)
  19.  
  20. Classification.........  Boot sector virus Length of Virus........
  21.                          Exactly 03F9h bytes (approx.  2 sectors)
  22.  
  23. ------------------------ Preconditions---------------------------------
  24.  
  25. Operating System(s).... MS-DOS
  26. Version/Release........ Any
  27. Computer models........ IBM-PS and compatibles
  28.  
  29. -------------------------- Attributes----------------------------------
  30.  
  31. Easy identification.... The boot sector will contain the following
  32.                         text (amongst others): "The FORM-Virus sends
  33.                         greetings to everyone who's read this text.".
  34.                         (See also:  Damage)
  35.  
  36. Type of infection...... Direct action: at boot time the virus will
  37.                                attempt to infect the hard disk.
  38.                                Indirect: At every read from a floppy,
  39.                                an attempt will be made to infect it.
  40.  
  41. Infection trigger...... Every read any time.
  42.  
  43. Media affected......... Any floppy and the first active partition on
  44.                         a harddisk.
  45.  
  46. Interrupts hooked...... Int 13 (disk) and Int 9 (keyboard) on every
  47.                         24th of the month.
  48.  
  49. Damage................. The virus makes the keys click and delays key
  50.                         action slightly.
  51.  
  52. Particularities........ Economically programed. It is a rare example
  53.                         of both direct and indirect action in the same
  54.                         virus.
  55.  
  56. Similarities........... ---
  57.  
  58. -------------------------- Agents------------------------------------
  59.  
  60. Countermeasures........
  61.  
  62.  - ditto - successful.. Most checksumming programs that check the boot
  63.                         sector.
  64.  
  65. Standard Means......... The text mentioned above will be found in a
  66.                         cluster marked as bad. Disks can usually be
  67.                         disinfected by booting from a write protected
  68.                         clean boot disk, and using the SYS command on
  69.                         any infected disk.
  70.  
  71. --------------------- Acknowledgements-------------------------------
  72.  
  73. Location............... Virus Test Center, University of Hamburg, FRG
  74. Classification by...... Morton Swimmer
  75. Documentation by....... Morton Swimmer
  76. Date................... 5-June-1990
  77. Information source..... Ralf Brown's interrupt list.
  78.  
  79.  
  80. ===================== End of "FORM" Virus ===========================
  81.  
  82.  
  83.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  84.   ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
  85.   ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  86.