VIRUS CHARACTERISTICS LIST V67 Copyright 1989, McAfee Associates 408 988 3832 The following list outlines the major characteristics of the known IBM PC and compatible virus strains identified by SCAN. The number of known varients of each virus is also listed. This number is listed in parenthesis beside the name of the strain. The total number of known viruses is summed at the end of the list. The Clean-Up virus I.D. code is included in brackets. ========================================================================== Infects Fixed Disk Partition Table-----------------------+ Infects Fixed Disk Boot Sector-------------------------+ | Infects Floppy Diskette Boot ------------------------+ | | Infects Overlay Files------------------------------+ | | | Infects EXE Files--------------------------------+ | | | | Infects COM files------------------------------+ | | | | | Infects COMMAND.COM--------------------------+ | | | | | | Virus Remains Resident---------------------+ | | | | | | | Virus Uses Self-Encryption---------------+ | | | | | | | | Virus Uses STEALTH Techniques----------+ | | | | | | | | | | | | | | | | | | | Increase in | | | | | | | | | | Infected | | | | | | | | | | Program's | | | | | | | | | | Size | | | | | | | | | | | | | | | | | | | | | | Virus Disinfector V V V V V V V V V V V Damage ----------------------------------------------------------------------------- Casper [Casper] Clean-Up . x . x x . . . . . 1200 L,O,P,D 1605 [1605] Clean-Up . . x x x x . . . . 1605 L,O,P,D Violator [Vio] Clean-Up . . . x x . . . . . 1055 O,P,D *Blood-2 [B-2] Clean-Up . . . . x . . . . . 427 O,P,D Wisconsin [Wisc] Clean-Up . x . x x . . . . . 825 O,P,D Christmas-J [C-J] Clean-Up . . x x x x . . . . 600 O,P *Burger [Burg] Clean-Up . . . x x x . . . . 560 O,P,D *Leprosy-B [Lepb] Clean-Up . . . x x x . . . . Overwrites Whale [Whale] Clean-Up x x x x x x x . . . 9216 L,O,P,D Invader [Invader] Clean-Up . x x . x x x x x . 4096 B,L,O,P,D Scott's Valley [Sval] Clean-Up . x x x x x x . . . 2133 L,O,P,D Black Monday [BMON] Clean-Up . . x x x x x . . . 1055 L,O,P,D Nomenclature [Nom] Clean-Up . . x x x x x . . . 1024 O,P,D Anthrax - Boot [Atx] M-Disk . . x . . . . . . x N/A O,P,D Anthrax - File [Atx] Clean-Up . . x x x x . . . . 1206 O,P,D 651 [651] Clean-Up . . x . x . . . . . 651 O,P,D Paris [Paris] Clean-Up . . . x x x x . . . 4909 O,P,D,L *Leprosy [Lep] Clean-Up . . x x x x x . . . Overwrites Mardi Bros. [Mardi] M-DISK . . x . . . . x x . N/A B,O 1253 - Boot [1253] M-DISK . . x . . . . x x x N/A O,P,D,L 1253 - COM [1253] Clean-Up . . x x x . . . . . 1253 O,P,D,L AirCop [AirCop] M-DISK . . x . . . . x . . N/A B,O *400 (5) [400] Clean-Up . . x . x . . . . . Vary O,P,D P1 (3) [P1r] Clean-Up . x x . x . . . . . Vary O,P,D,L Ontario [Ont] Clean-Up . x x x x x . . . . Vary O,P,D 1226 (3) [1226] Clean-Up . x x x x x x . . . 1226 O,P,D V2100 [2100] Clean-Up . . x . x x . . . . 2100 O,P,D,L Plastique (3) [P1q] Clean-Up . . x x x x x . . . 3012 O,P,D Wolfman [Wolf] Clean-Up . . x x x x . . . . 2064 O,P Doom2 [Dm2] Clean-Up . . x . x x . . . . 2504 O,P,D,L Flip [Flip] Clean-Up . x x x x x x . . . 2343 O,P,D,L Fellowship [Fellow] Clean-Up . . x . . x . . . . 1022 O,P,D,L Flash [Flash] Clean-Up . . x x x x . . . . 688 O,P,D,L 1008 [1008] Clean-Up . x x x x . . . . . 1008 O,P,D,L Stoned-II [Stoned] M-DISK . . x . . . . x . x N/A O,B,L Taiwan3 [T3] Clean-Up . . x x x x x . . . 2905 O,P,D,L Armagedon [Arma] Clean-Up . . x x x . . . . . 1079 O,P 1381 [1381] Clean-Up . . . . . x x . . . 1381 O,P Tiny (7) [Tiny] Clean-up . . . x x . . . . . 163 O,P Subliminal [Sub] Clean-Up . . x x x . . . . . 1496 O,P Sorry [Sorry] Clean-Up . . x x x . . . . . 731 O,P RedX [Redx] Clean-Up . . . x x . . . . . 796 O,P 1024 [1024] Clean-Up . . x x x . . . . . 1024 O,P Joshi [Joshi] M-DISK x . x . . . . x x x N/A B,O,D Microbes [Micro] M-DISK . . x . . . . x x . N/A B,O,D Print Screen [Prtscr] M-DISK . . x . . . . x x . N/A B,O,D Form [Form] M-DISK . . x . . . . x x . N/A B,O,D July 13th [J13] Clean-Up . x . . . x . . . . 1201 O,P,D,L *5120 (2) [5120] Clean-Up . . . x x x x . . . 5120 O,P,D,L Victor [Victor] Clean-Up . . x x x x x . . . 2458 P,D,L JoJo [JoJo] Clean-Up . . x . x . . . . . 1701 O,P W-13 (2) [W13] Clean-Up . . . . x . . . . . 532 O,P Slow [Slow] Clean-Up . x x . x x x . . . 1721 O,P,L Frere Jacques [Frere] Clean-Up . . x . x x x . . . 1811 O,P Liberty [Liberty] Clean-Up . . x x x x x . . . 2862 O,P Fish-6 [Fish] Clean-Up x x x x x x x . . . 3584 O,P,L Shake [Shake] Clean-Up . . x . x . . . . . 476 O,P Murphy [Murphy] Clean-Up . . x x x x x . . . 1277 O,P V800 [V800] Clean-Up x x x . x . . . . . none O,P,L Kennedy [Kennedy] Clean-Up . . x . x . . . . . 308 O,P 8 Tunes/1971 [1971] Clean-Up . . x . x x x . . . 1971 O,P Yankee - 2 [Doodle2] Clean-Up . . . . x x . . . . 1961 O,P June 16th [June16] Clean-Up . . . x x . . . . . 1726 F,O,P,L XA1 [XA1] Clean-Up . x . . x . . . . . 1539 F,O,P,L 1392 [1392] Clean-Up . . x x x x . . . . 1392 O,P,L 1210 [1210] Clean-Up . . x . x . . . . . 1210 O,P,L 1720 [1720] Clean-Up . . x . x x x . . . 1720 F,O,P,L Saturday 14th [Sat14] Clean-Up . . x . x x x . . . 685 F,O,P,L Korea (2) [Korea] M-DISK . . . . . . . x x . N/A B,O Vcomm (3) [Vcomm] Clean-Up . . . . . x . . . . 1074 O,P,L ItaVir [Ita] Clean-Up . . . . . x . . . . 3880 O,P,L,B Solano (2) [Solano] Clean-Up . . x . x . . . . . 2000 O,P,L V2000 (3) [2000] Clean-Up . . x x x x x . . . 2000 O,P,L 1559 [1559] SCAN/D . . x x x x . . . . 1554 O,P,L 512 (4) [512] SCAN/D x . x x x . . . . . none O,P,L EDV (2) [EDV] M-DISK x . x . . . . x x x N/A B,O *Joker [Joke] Clean-Up . . x x x . . . . . O,P Icelandic-3 [Ice-3] Clean-Up . . x . . x . . . . 853 O,P *Virus-101 [101] Clean-Up . x x x x x x x . . 2560 P 1260 [1260] Clean-Up . x . . x . . . . . 1260 P *Perfume (2) [Fume] Clean-Up . . . . x . . . . . 765 P Taiwan (2) [Taiwan] Clean-Up . . . . x . . . . . 708 P Chaos [Chaos] MDISK . . x . . . . x x . N/A B,O,D,F *Virus-90 [90] Clean-Up . . x . x . . . . . 857 P Oropax (3) [Oro] Clean-Up . . x . x . . . . . 2773 P,O 4096 (2) [4096] Clean-Up x . x x x x x . . . 4096 D,O,P,L Devil's Dance [Dance] Clean-Up . . x . x . . . . . 941 D,O,P,L *Amstrad (5) [Amst] Clean-Up . . . . x . . . . . 847 P Payday [Payday] Clean-Up . . x . x x x . . . 1808 P *Datacrime II-B [Crime-2] Clean-Up . x . x x x . . . . 1917 P,F Sylvia/Holland [Holland] Clean-Up . . . . x . . . . . 1332 P *Do-Nothing [Nothing] Clean-Up . . x . x . . . . . 608 P Sunday (2) [Sunday] Clean-Up . . x . x x x . . . 1636 O,P Lisbon (2) [Lisb] Clean-Up . . . . x . . . . . 648 P *Typo/Fumble [Typo] Clean-Up . . x . x . . . . . 867 O,P *Dbase [Dbase] Clean-Up . . x . x . . . . . 1864 D,O,P Ghost Boot [Ghost] MDISK . . x . . . . x x . N/A B,O Ghost COM [Ghost] Clean-Up . . . . x . . . . . 2351 B,P New Jerusalem [Jeru] Clean-Up . . x . x x x . . . 1808 O,P *Alabama (2) [Alabama] Clean-Up . . x . . x . . . . 1560 O,P,L Yank Doodle (3) [Doodle] Clean-Up . . x . x x . . . . 2885 O,P 2930 [2930] Clean-Up . . x . x x . . . . 2930 P Ashar [Brain] Clean-Up . . x . . . . x . . N/A B *AIDS (3) [Aids] Clean-Up . . . . x . . . . . Overwrites Disk Killer (2) [Killer] Clean-Up . . x . . . . x x . N/A B,O,P,D,F *1536/Zero Bug [Zero] Clean-Up . . x . x . . . . . 1536 O,P MIX1 [Ice] Clean-Up . . x . . x . . . . 1618 O,P Dark Avenger (2) [Dav] Clean-Up . . x x x x x . . . 1800 O,P,L 3551/Syslock [Syslock] Clean-Up . x . . x x . . . . 3551 P,D VACSINA (2) [Vacs] Clean-Up . . x . x x x . . . 1206 O,P Ohio [Ohio] MDISK . . x . . . . x . . N/A B Typo Boot [Typo] MDISK . . x . . . . x x . N/A O,B Swap Boot [Swap] MDISK . . x . . . . x . . N/A B *Datacrime II [Crime-2] Clean-Up . x . . x x . . . . 1514 P,F *Icelandic II [Ice-2] Clean-Up . . x . . x . . . . 661 O,P Pentagon [Pentagon] MDISK . . . . . . . x . . N/A B *Traceback (2) [3066] M-3066 . . x . x x . . . . 3066 P Datacrime-B [Crime-B] Clean-Up . x . . x . . . . . 1168 P,F *Icelandic (2) [Ice] Clean-Up . . x . . x . . . . 642 O,P Saratoga [Ice] Clean-Up . . x . . x . . . . 632 O,P *405 [405] Clean-Up . . . . x . . . . . Overwrites 1704 Format [170x] Clean-Up . x x . x . . . . . 1704 O,P,F Fu Manchu (2) [Fu] Clean-Up . . x . x x x . . . 2086 O,P Datacrime (2) [Crime] Clean-Up . x . . x . . . . . 1280 P,F 1701/Cascade [170x] Clean-Up . x x . x . . . . . 1701 O,P CASCADE-B (9) [170x] Clean-Up . x x . x . . . . . 1704 O,P Stoned (2) [Stoned] Clean-Up . . x . . . . x . x N/A O,B,L 1704/CASCADE [170x] Clean-Up . x x . x . . . . . 1704 O,P Ping Pong-B (2) [Ping] Clean-Up . . x . . . . x x . N/A O,B Den Zuk (3) [Zuk] MDISK . . x . . . . x . . N/A O,B Ping Pong (3) [Ping] Clean-Up . . x . . . . x . . N/A O,B Vienna-B [Vienna] Clean-Up . . . . x . . . . . 648 P Lehigh [Lehigh] Clean-Up . . x x . . . . . . Overwrites P,F Vienna/648 (14) [Vienna] M-VIENNA . . . . x . . . . . 648 P Jerusalem-B [Jeru] Clean-Up . . x . x x x . . . 1808 O,P Alameda (2) [Alameda] Clean-Up . . x . . . . x . . N/A B Friday 13th COM [Fri13] Clean-Up . . . . x . . . . . 512 P Jerusalem (9) [Jeru] Clean-Up . . x . x x x . . . 1808 O,P SURIV03 [SurivB] Clean-Up . . x . x x x . . . O,P SURIV02 [SurivA] Clean-Up . . x . . x . . . . 1488 O,P *SURIV01 [SurivA] Clean-Up . . x . x . . . . . 897 O,P Brain (3) [Brain] Clean-Up . . x . . . . x . . N/A B Total Known Viruses - 223 Legend: * - Extinct Viruses (Viruses that are research only viruses, or have not been reported in the public domain for more than 12 months.) Damage Fields - B - Corrupts or overwrites Boot Sector O - Affects system run-time operation P - Corrupts program or overlay files D - Corrupts data files F - Formats or erases all/part of disk L - Directly or indirectly corrupts file linkage Size Increase - The length, in bytes, by which an infected program or overlay file will increase Characteristics - x - Yes . - No Disinfectors - SCAN/D - VIRUSCAN with /D option SCAN/D/A - VIRUSCAN with /D and /A options MDISK/P - MDISK with "P" option All Others - The name of disinfecting program Note: The SCAN /D option will overwrite and then delete the entire infected program. The program must then be replaced from the original program diskette. If you wish to try and recover an infected program, then use the named disinfector if available.