Telecom Virus:
        ---------------

        This virus works like the old Jeff viruses. It adds a "$a00a"string
        at first position in the  startup-sequence and writes  itself  with 
        the name "$a0" in the rootdir. The file is only 756 bytes long (un-
        packed).

        This virus uses direct  memoryadresses and expects  RANGER RAM  and
        Kickstart 1.3. 


        Some resourced parts of the virus:
        ----------------------------------

        MOVE.L        #$00C71082,$002E(A6)
        MOVE.L        #$00C710B0,$00C00218.L
        MOVE.L        #$00C710CA,$00C000B0.L
        MOVE.L        #$00C71126,$00C03C5A.L
        MOVE.L        #$00FC0AFC,$00C00218.L


        
        Test by Markus Schmall         Detection tested on 17.01.1993.


[Go back]