Sex Guide Macro Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM
Amiga Antivirus Website



------------------------    
Amiga Virus Encyclopedia
Sex Guide Macro Virus
------------------------    
    
    
===== Computer Virus Catalog 2.0: Sex Guide (16.4.1997) ===========
Entry...............: 
Alias(es)...........: Macro.1, Beol5, First Macro
Virus Strain........: 
Virus detected when.: 4/1997
              where.: 
Classification......: Macro Trojan
Length of Virus.....: 1. Length on storage medium: 1199
                      2. Length in RAM: -
--------------------- Preconditions ------------------------------------
Operating System(s).: AMIGA-DOS and Amigaguide Help-System
Version/Release.....: 2.01 and Above
Computer model(s)...: all models
--------------------- Attributes ---------------------------------------
Easy Identification.: When reading the guide-file in ascii mode 
                      there is a comment (see below).
Type of infection...: Appends commands to startup-sequence 
Infection Trigger...: Startup of the system
Storage media affected: all DOS-devices
Interrupts hooked...: -
Damage..............: Permanent damage: Deletes some Virusscanners
                      Transient damage: Displays the text:
                           "I am a perverse teeny-f**ker, I am not 
                            worth living!"

Damage Trigger......: Next Startup of the computer after Trojan startup
Particularities.....: This Trojan shows, how easy it is to infect the
                      Amiga's own helpsystem. The author writes in a 
                      Remark: 
                           "!!!!!! First Amiga Macro Virus !!!!!!"
                      which is not true (it's not a virus)

                      Also he writes:
                           "Coming soon Installer Macro Virus !!!"
                      The code seems to be a kind of demonstration
                      for the av-programmer.

Similarities........: -
--------------------- Agents -------------------------------------------
Countermeasures.....: Not tested
Countermeasures successful: 
Standard means......: Delete the file, remove the additional commands 
                      from the startup-sequence
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Soenke Freitag
Documentation by....: Soenke Freitag
Date................: 16-April-1997
Information Source..: Virus analysis
===================== End of Virus =========================


Antivirus...........: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                      Kickstart all others: VirusZ III with Xvs.library installed





Virus Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk