------------------------
Amiga Virus Encyclopedia
Smily Cancer II Virus
------------------------
- The Smily Cancer II Filevirus length: 4676 2x coded
after 1x decoding with eori.b #$90,d1
subi.b #$22,d1
at file-end:
CENTURIONS STRIKES BACK: THE SMILY CANCER II
when starting the program the loadWB command is simulated and the
virus copies itself to memory. Spreading is done like Smily 1,
that is: No spreading as Smily II! See Smily I
Note 03.09.92:
VT now removes several SmileyLinks in one operation. If not,
please get in touch.
Note 16.04.93:
a smily clone is found.
Length: extends a file with 3916 bytes
Almost all infected files are not executable. This leads me to
think that the addbuffers command was manipulated by hand.
VT shortens the files to their original length, and then the
startup-sequence can be executed again.
Difference from the original: the jump-command to the decoding
routine is changed.
How to cope: see above.
Note 12.06.93:
More and more often there comes defective Smiley-files. VT should
recognize a defect hunk-structure when trying to repair, and then
offer to delete. Please don't forget to test the s-seq and - if
needed - re-copy the original file.
Translated text from VT-Knows by Heiner Schneegold
Translated by Torben Danoe