"Ambulance Car" Virus
*********************************************
*** Reports collected and collated by ***
*** PC-Virus Index ***
*** with full acknowledgements ***
*** to the authors ***
*********************************************
== Computer Virus Catalog 1.2: "Ambulance Car" Virus (20-July-1990) ==
Entry................. "Ambulance Car" Virus
Alias(e).............. REDX-Virus
Strain................ ---
Detected: when........ West-Germany
where....... June 1990
Classification........ Program virus, direct action COM infector
Length of virus....... 796 bytes added to COM files
-------------------- Preconditions ---------------------------------
Operating System(s)... MS-DOS
Version/Release....... 2.0 and up
Computer models....... Any IBM-compatibles
---------------------Attributes -----------------------------------
Easy identification... ---
Type of infection..... Direct action COM infection. The virus tries to
find two victims which it randomly selects
in the current directory or via the PATH
variable in the environment. Thus by in-
voking an infected file, either none, one or
two files can be infected.
Infection trigger..... Loading of an infected file.
Interrupts hooked..... ---
Damage................ If the lowest 3 bits of the generation counter
(incremented upon each infection attempt)
contain 110b (110 is the German police phone
number), an ambulance car is running from
left to right across the bottom of the
screen and the typical siren sound is played
by the speaker. The car is made up of block
graphic characters and has a flashing light
on top. A flag is set, and the police car
will not run until the next bootup.
Particularities....... The inhibit flag for the car collides with the
LPT3: base address. (This will usually not
be not installed.)
----------------------- Acknowledgement ------------------------------
Location.............. Micro-BIT Virus Center RZ Universitaet
Karlsruhe
Classification by..... Christoph Fischer
Dokumentation by ..... Christoph Fischer
Date.................. 24-June-1990
====================== End of "Ambulance Car" Virus ==================
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comments
Post a Comment