home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Amiga Plus 1995 #3 & #4
/
Amiga Plus CD - 1995 - No. 3 and 4.iso
/
pd
/
anti-virus
/
vib
/
virus
/
f
/
fileghost
< prev
next >
Wrap
Text File
|
1995-07-20
|
2KB
|
48 lines
Name : FileGhost
Aliases : Friend (?)
Clones : No clones
Type/Size : Link/872
Symptoms : No symptoms
Discovered : 16-11-93
Way to Infect: Link infection
Rating : Less Dangerous (Many Infections !!)
Kickstarts : 2.0/3.0 with & without cachet !
Removal : Use good viruskiller or delete infected programms.
Comments : It uses the LoadSeg and the NewLoadSeg
to get the names of all executed programms.
Then it links itself behind the 1. Hunk by
searching a RTS. (Just as Crime)
The virus just infects files which are:
- executeable
- smaller than 100000 bytes
- don`t have a "-" or a "." in their names.
The virus doesn`t infect libraries and handlers
In the virus there is a coded message:
"Hi Friend! Don`t worry... it`s only the FileGhost"
The virus isn`t resident.
A trojan is spread around which installs this virus.
(HardSpeeder - please look there !!)
ATTENTION: HD-Users! Be careful with this virus.
^^^^^^^^^ It infects files VERY FAST !!!
And because of the short length, the virus
doesn`t conspicuous.
A.D 12-93