"Lisbon" Virus

 


             *********************************************

             ***   Reports collected and collated by   ***

             ***            PC-Virus Index             ***

             ***      with full acknowledgements       ***

             ***            to the authors             ***

             *********************************************


 

 

===== Computer Virus Catalog 1.2: "Lisbon Virus" (5-June-1989) ======


Entry...............: "Lisbon" Virus

Alias(es)...........: ---

Virus strain........: Vienna Virus strain

Virus detected when.: ---

              where.: ---

Classification......: Program virus (extending), direct action

Length of virus.....: 648 bytes


--------------------- Preconditions ----------------------------------


Operating system(s).: MS-DOS

Version/release.....: 2.0 and higher

Computer model(s)...: All MS-DOS machines


--------------------- Attributes -------------------------------------


Easy identification.: Last five bytes of file = "@AIDS" (Ascii)


Type of infection...: Self-Identification: The time stamp of an

                           infected file is changed: the seconds are

                           set to 62 (= 2 * 1Fh).

                           When infected file is executed, .COM-files

                           in the current directory as well as in the

                           directories in the DOS-PATH are extended by

                           appending the viral code; no infection if

                           the file size<10 or file size>64000 bytes.


Infection trigger...: A selected .COM-file is infected by "random" IF

                           (system seconds AND 58h) <> 0 ELSE damaged!


Storage media affected: Current media and media accessed via DOS-PATH.


Interrupts hooked...: --


Damage..............: A selected .COM-file is damaged permanently:

                           Overwriting the first five bytes by "@AIDS"


Damage trigger......: IF (system seconds AND 58h) = 0, ELSE infection!


Particularities.....: The virus ignores READ-ONLY and HIDDEN

                      attributes.


Similarities........: Dissimilarities to Vienna:

                           Different trigger byte (7);

                           the five damage bytes are changed.


--------------------- Agents -----------------------------------------


Countermeasures.....: Category 3: ANTI!LIS.EXE (d:) (/f)


Countermeasures successful: My Antivirus ANTI!LIS.EXE looks for

                           infected files on a given drive (d:) and

                           optionally removes the virus (if /f given).


Standard means......: ---


--------------------- Acknowledgement -------------------------------


Location............: Virus Test Center, University Hamburg, FRG

Classification by...: Daniel Loeffler

Documentation by....: Daniel Loeffler

Date................: June 5, 1990

Information Source..: ---



===================== End of "Lisbon"-Virus =========================

 


  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++

  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



Comments

Post a Comment

Popular posts from this blog

BOTTOM LIVE script

                                  BOTTOM                                   ======                     by Adrian Edmondson and Rik Mayall                                 Bottom Live                                 ===========                               Richie  Rik Mayall                                Eddie  Adrian Edmondson Introduction ------------ [Opening shot of theatre, with huge pictures of Richie and Eddie. Caption: "Live from the Mayflower Theatre, Southampton".] Vox Pop 1:  So I'm hoping that this is a lot ruder than the TV, because             they can get away with it. [Cut to Ade's dressing-room door. It opens to reveal a clothes rail, its only contents a brown jacket.] Vox Pop 2:  I just think they're ace, you know, absolutely excellent. [Cut to dressing-gown, pan across a pair of glasses and a revolver.] Vox Pop 3:  It couldn't be too rude, I mean that's what young people want. [Rik's dressing-room door.]
Read more

Fawlty Towers script for "A Touch of Class"

Fawlty Towers A Touch of Class Written by John Cleese and Connie Booth First of first series, first broadcast on September 19, 1975 on BBC2 Transcribed by Jason R. Heimbaugh (jrh@uiuc.edu) on October 10, 1993 Basil Fawlty  John Cleese Sybil Fawlty  Prunella Scales Manuel        Andrew Sachs Polly         Connie Booth Major Gowen   Ballard Berkeley Miss Tibbs    Gilly Flower Miss Gatsby   Renee Roberts Lord Melbury  Michael Gwynn Danny Brown   Robin Ellis Sir Richard   Morris Martin Wyldeck Mr Watson     Lionel Wheeler Mr Wareing    Terence Conoley Mr Mackenzie  David Simeon               [The Fawlty Towers reception lobby. The main entrance is at the               back, with the stairs to the right. The entrance to the dining               room is in the right wall; on the left, the reception desk               running along the left wall, with the entrance to the office               behind it. The entrance to the bar is beyond the desk.] Basil         [on th
Read more