"Ambulance Car" Virus

 


             *********************************************

             ***   Reports collected and collated by   ***

             ***            PC-Virus Index             ***

             ***      with full acknowledgements       ***

             ***            to the authors             ***

             *********************************************




== Computer Virus Catalog 1.2: "Ambulance Car" Virus (20-July-1990) ==

Entry................. "Ambulance Car" Virus

Alias(e).............. REDX-Virus

Strain................ ---

Detected: when........ West-Germany

          where....... June 1990

Classification........ Program virus, direct action COM infector

Length of virus....... 796 bytes added to COM files

-------------------- Preconditions ---------------------------------


Operating System(s)... MS-DOS

Version/Release....... 2.0 and up

Computer models....... Any IBM-compatibles

---------------------Attributes -----------------------------------

Easy identification... ---

Type of infection..... Direct action COM infection. The virus tries to

                          find two victims which it randomly selects

                          in the current directory or via the PATH

                          variable in the environment. Thus by in-

                          voking an infected file, either none, one or

                          two files can be infected.

Infection trigger..... Loading of an infected file.

Interrupts hooked..... ---

Damage................ If the lowest 3 bits of the generation counter

                          (incremented upon each infection attempt)

                          contain 110b (110 is the German police phone

                          number), an ambulance car is running from

                          left to right across the bottom of the

                          screen and the typical siren sound is played

                          by the speaker. The car is made up of block

                          graphic characters and has a flashing light

                          on top. A flag is set, and the police car

                          will not run until the next bootup.

Particularities....... The inhibit flag for the car collides with the

                          LPT3: base address. (This will usually not

                          be not installed.)


----------------------- Acknowledgement ------------------------------

Location.............. Micro-BIT Virus Center RZ Universitaet

                          Karlsruhe


Classification by..... Christoph Fischer

Dokumentation by ..... Christoph Fischer

Date.................. 24-June-1990


====================== End of "Ambulance Car" Virus ==================


  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++

  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Comments

Popular posts from this blog

WHAT THE WATCH TOWER BIBLE AND TRACT SOCIETY OF PENNSYLVANIA HAD TO SAY ABOUT WHAT WERE SUPPOSED TO HAVE HAPPENED in 1874

Uninterruptable Power Source (UPS) FAQ

Blade Runner FAQ