Name         : The Curse of little Sven

     Aliases      : - (Cameleon)

     Type/Size    : Bootblock

     Incidence    : ?

     Discovered   : ?

     Way to infect: Become active if you start the trojan XCopyPro V6.5  
                    this version is false! and is found at BBS as
                    xcopy65e.lha  Length: 25360 bytes

     Rating       : Dangerous!

     Kickstarts   : ?

     Damage       : Overwrites bootblock, and DATA BLOCKS!!!

     Manifestation: Text in memory after decoding: The Curse of Little Sven!

     Removal      : Install new bootblock on infected disk. Fix damaged files
                    with a virus killer. Use VT for instance. (Recommended)

        General comments: The virus moves the original bootblock to block 2+3
                          BUT, IF!!..... the block was used by a file, then
                          have the virus damaged the two data blocks.
                          This file is destroyed and NOT..... possible to repair.
                          The virus contains a routine, which overwrites data
                          after you have done 80 steps.


PAT 08.93