home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
System Booster
/
System Booster.iso
/
Virushunter
/
VIB
/
Virus
/
L
/
Liberator 5.01
< prev
next >
Wrap
Text File
|
1996-09-26
|
2KB
|
69 lines
Name : Liberator Virus V5.01
Aliases : PV
Type/Size : File/16924
Discovered : 18-10-92
Way to infect: Several files
Rating : Dangerous
Kickstarts : 1.2/1.3/2.0
Damage : A new update of Liberator V3.0
The real name is PV. Tries to hide its
evil purpose by the following menu:
"PV (Protect Vectors) v1.02 by Peter Stuer July 22, 1992 FREEWARE
Reset vectors ok, Nothing resident, Trackdisk.device not
intercepted, DoIO ok, VBlank ok, low interrupts ok, dos.library
not intercepted.
monitoring vectors...
Fully Kickstartv2.xx compatible, stops all viruses, checks
disk-validators,
Use run to push this program into the background"
The analyze tests is done at device df0: and df1:
The viruses writing :c/run, :c/br (runback), :s/.info
.info-length: 4 Bytes, .info-Startvalue: $00000064
The original s-startup :
cls
After infection:
br c:pe
cls
Manifestation:The text:
"Congratulations this disk has been liberated of virus protection!!
Hello from the Liberator virus v5.01 - Random Disaster
The anti-anti-virus is here again!
Lets play trash the hard disk
and ram the disk heads
The piracy curse
Liberator V - The future is near.
Look out for Liberator VI - The final nightmare ...
coming soon from a lame swapper near you!
Respect to the virus masters Lamer Exterminator,crime &
Contrast.
And remember - be excellent to each other!
The liberator 27/07/92
Virus Generation :"
Remowal : Remove the Liberator 5 virus, .info and all .fastdir
and s.-seq.
Remember to change back the
startup-sequence to good old original one.
General comments: The virus changes its name like c/PV,
/PE, /PB and so on, that means the last letter
is always changed, maybe to hide itself
JN 08.93