------------------------
Amiga Virus Encyclopedia    
CompuPhagozyte 1 Virus
------------------------


=== Computer Virus Catalog 1.2: COMPUPHAGOZYTE 1 Virus (31-July-1993) ==
Entry...............: CompuPhagozyte 1 Virus
Alias(es)...........: ---
Virus Strain........: CompuPhagozyte Virus strain
Virus detected when.: ---
              where.: ---
Classification......: Link Virus (directory type), non-resident
Length of Virus.....: 1.Length on storage medium: 1452 byte
                      2.Length in RAM:            1452 byte
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-OS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes ---------------------------------------
Easy Identification.: The following text appears in infected files:
                      "The CompuPhagozyte has attached to your system !
                      Wait for much more better virus on other systems, too!
                      The CompuPhagozyte in 9.91 by The Emperor Of Trillion
                      Bytes ! Virus-Checker V4.0 by Michael Ortmanns"
Type of infection...: System infection: overwriting the file
                         ":c/virus-checker" if this exists.
Infection Trigger...: Inserting a disk-like medium while virus program
                         is active.
Storage media affected: All disk-like media
Interrupts hooked...:    None
Damage..............: 1) Writing file ":c/virus-checker" on disk.
                      2) Potentially destroying floppy disk structure
                         (see Particularities).
Damage Trigger......: Upon inserting a disk-like medium.
Particularities.....: 1) Virus pretends to be "virus-checker 4.0".
                         Virus' infectivity is small as it always tries
                         to write to current directory.
                      2) If for some reason file ":c/virus-checker"
                         could not be written to disk, some obscure
                         hardware banging routine is called which seems
                         to destroy disk structure (of floppy disk only).
                      3) If real ":c/Virus-checker" exists, it is
                         corrupted and shortened to 1452 byte (poten-
                         tially due to an error of AmigaDOS-Write
                         routine; cause not fully verified)
Similarities........: CompuPhagozyte Virus family
--------------------- Agents -------------------------------------------
Countermeasures.....: VT 2.54, VirusZ 3.06, VirusChecker 6.28
Countermeasures successful: VT 2.54
Standard means......: VT 2.54
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Karim Senoucci
Documentation by....: Karim Senoucci
Date................: 31-July-1993
Information Source..: Virus disassembly / SHI / Heiner Schneegold
================== End of COMPUPHAGOZYTE 1 Virus =======================

Antivirus removal...: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                      Kickstart all others: VirusZ III with Xvs.library installed