== Computer Virus Catalog 2.0: ZACCESS V1.0 Virus (14-December-1993) === Entry...............: ZACCESS V1.0 Virus Alias(es)...........: --- Virus Strain........: 16 Bit Crew Virus strain detected when.: --- where.: --- Classification......: system virus (bootblock), resident Length of Virus.....: 1. Length on storage medium: 1024 bytes 2. Length in RAM: 1024 bytes --------------------- Preconditions ------------------------------------- Operating System(s).: AMIGA-OS Version/Release.....: all system releases Computer model(s)...: all models --------------------- Attributes ---------------------------------------- Easy identification.: text visible in bootblock: "ZACCESS V1.0 / 1991" Type of Infection...: Self-identification method: Virus checks if the sum of two matchwords in the bootblock equals zeros; if yes, the virus assumes to have found itself on disk System infection: RAM resident, reset resident, bootblock Infection Trigger...: reset Storage Media affec.: only floppy disks Systemcalls hooked..: DoIO vector of exec-library, CoolCapture Stealth.............: Tunneling/Selfprot.¾:ºOligo¿Pÿnymorphism..: Encoding Method...,.: Damage..............: Permanent damage: overwriting bootblock ° °Transùeþv damage: LED flashing 10 or 3 times) Damage Trigger......: Permanent damage: reset Transient damage: depending on infection counter value and mouse button during boot Particularities.....: a resident program using the CoolCapture vector is shut down Similarities........: --- -------½-----½-½/--- Agents ----------- -------------------------------- Countermeasures.....: Virus Workshop V3.0, VirusChecker V6.3³,º ° °" VT 2.58, FirusZ 3.07 Standard means......: VT 2.58, Virus Workshop V3.0 --------------------- Acknowledgements ---------------------------------- Location............: Virus Test Center, University of Hamburg, Germany Classification by...: Karim Senoucci Documentation by....: Karim Senoucci Date................: 14-December-1993 Information Source..: Virus analysis ======================= End of ZACCESS V1.0 Virus ======================= [Go back]