CompuPhagozyte Nano Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM



-------------------------
Amiga Virus Encyclopedia    
CompuPhagozyte Nano Virus
-------------------------


=== Computer Virus Catalog 1.2: COMPUPHAGOZYTE NANO Virus (31-July-1993) ===
Entry..............--.: NANO
Alias(es).........--..: ---
Virus Strain......--..: CompuPhagozyte Virus strain
Virus detected when.--: ---
              where--.: ---
Classification....--..: link virus (directory type), resident
Length of Virus..--...: 1. Length on storage medium: 1484 bytes 
                        2. Length in RAM: up to 3976 bytes
----------------------- Preconditions --------------------------------------
Operating System(s)...: AMIGA-OS
Version/Release.......: only AMIGA-OS 1.2 / all releases
Computer model(s).....: All AMIGA models
Caro Name.............: Compuphagozyte.Nano
----------------------- Attributes -----------------------------------------
Easy Identification...: s:startup-sequence contains line with six invisible
                        characters (ASCII code $A0); root directory cotains
                        file of the same name.
Type of infection.....: -
Infection Trigger.....: call to OldOpenLibrary vector
Storage media affected: 
Interrupts hooked.....:  
Damage................: Permanent damage: manipulation of startup-sequence:
                        virus inserts its filename (see above) at the
                        beginning of startup-sequence. Due to a buggy
                        routine, this may corrupt the sartup-sequence if it
                        is longer than 1000 bytes. Sequence may be
                        subsequently infected as virus doesn`t check if
                        change is already present
Transient damage......: a) displays german flag
                        b) diplays alert box containing text: "...another
                        masterpiece by N A N O !!!" "GREETINGS TO:" "Byte
                        Bandit, Byte Warrior,DEF JAM," "DiskDoktors,
                        FANTASY, Foundation For" "The Extermination Of
                        Lamers I.R.Q." "Team, Obelisk Softworks Crew,
                        S.C.A.," " UNIT A ..."
Damage Trigger........: see intection trigger
Transient damage......: a) fifth reset after virus installation 
                        b) fifth infection
Particularities.......: - resident programs using the CoolCapture, Cold-
                        Capture or KickTagPtr vectors are shut down
Similarities..........: CompuPhagozyte Virus family
----------------------- Agents -----------------------------------------------
Countermeasures.......: Virus Workshop V3.6, VT 2.65
Standard means........: VT 2.65
----------------------- Acknowledgement ----------------------------------
Location..............: Virus Test Center, University Hamburg, Germany
Classification by.....: Karim Senoucci
Documentation by......: Karim Senoucci
Date..................: 12-July-1994
Information Source....: Virus analysis, information by H.Schneegold
======================= End of COMPUPHAGOZYTE NANO Virus =====================

Antivirus removal.....: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                        Kickstart all others: VirusZ III with Xvs.library installed


Screenshot of Nano Virus:





Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk