------------------------
Amiga Virus Encyclopedia
Smily Cancer I Virus
------------------------
Name : Smily Cancer I
Aliases : No Aliases
Type : Link virus
Size : 3916 bytes
Symptoms : No Symptoms
Discovered : 1 january 1990
Way to infect: Link infection
Rating : Less Dangerous
Kickstarts : 1.2
1.3
2.0
Damage : Some files cause an GURU after infection.
Comments : The Smily Cancer virus is a very well coded virus.
Although the virus doesn`t work with HD-Disks, I must
must say that the programmers had a lot of knowledge
in virus programming.
The virus copies itself to $7F000 and stay resident
over the KICK-Vectors. To infect files the virus uses
the BeginIO() (!!!) Vector from the trackdisk.device.
The special thing of the virus is that it DOESN`T uses
any dos.library routines to infect other files and
that means a lot of hard work, belive me.
If you are inserting an unprotected disk the virus
scans it immediately for the Rootblock (Only DD-Disks).
After that it reads the startup-sequence and searches
for the first file entry. That means the virus just
infects the 1.st file of the startup-sequence.
After every 10.th infection your mousepointer will be
turned into a yellow "Smily" with a hat. Under this
"Smily" a little scroller appeares which tells you the
following (this routine just works with kickstart 1.2/
1.3):
"HI THERE ??? A NEW AGE IN VIRUS MAKING HAS BEGUN !!!
THANX TO US" THANX TO: --- CENTURIONS --- AND WE HAVE
THE PLEASURE TO INFORM YOU THAT SOME OF YOUR DISKS ARE
INFECTED WITH OUR FIRST MASTER PIECE CALLED: THE SMILY
CANCER HAVE FUN LOOKING FOR IT AND STAY TUNED FOR OUR
NEXT PRODUCTIONS CENTURIONS: THE FUTURE IS NEAR"
In memory you can read the following message:
"HELLO HACKERS OUT THERE!! A NEW FORCE HAS BORN IN
ITALY: --- CENTURIONS --- OUR TEAM IS COMPOSED OD 2
GUYZ: ME & HIM. (AHAHHA!) THE AIM OF -- CENTURIONS --
IS JUST VIRUSMAKING WE HAVE LOTTA FUN DOING THIS AND
WE ALSO HOPE TO GIVE FUN TO THE KILLERS MAKERS (HI
STEVE TIBBETT!) HAW! HAW! HAW!"
"SIGNED: ME & HIM / CENTURIONS"
Removal : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III, and also Xvs.library must be installed
Test made by : Safe Hex International
Animated picture of the Smily Cancer I Virus:
