VIRUS CHARACTERISTICS LIST V72 Copyright 1989, 1990 McAfee Associates 408 988 3832 The following list outlines the major characteristics of the known IBM PC and compatible virus strains identified by SCAN. The number of known varients of each virus is also listed. This number is listed in parenthesis beside the name of the strain. The total number of known viruses is summed at the end of the list. The Clean-Up virus I.D. code is included in brackets. ========================================================================== Infects Fixed Disk Partition Table-----------------------+ Infects Fixed Disk Boot Sector-------------------------+ | Infects Floppy Diskette Boot ------------------------+ | | Infects Overlay Files------------------------------+ | | | Infects EXE Files--------------------------------+ | | | | Infects COM files------------------------------+ | | | | | Infects COMMAND.COM--------------------------+ | | | | | | Virus Remains Resident---------------------+ | | | | | | | Virus Uses Self-Encryption---------------+ | | | | | | | | Virus Uses STEALTH Techniques----------+ | | | | | | | | | | | | | | | | | | | Increase in | | | | | | | | | | Infected | | | | | | | | | | Program's | | | | | | | | | | Size | | | | | | | | | | | | | | | | | | | | | | Virus Disinfector V V V V V V V V V V V Damage ----------------------------------------------------------------------------- Jeff [Jeff] Clean-Up . . . x x . . . . . 828 O,P,D,F Bloody! [Bloody] M-Disk . x x . . . . x . x N/A B,O ZeroHunt [Hunt] Clean-Up x x x . x . . . . . N/A O,P,D Music Bug [MBug] M-Disk . . x . . . . x . x N/A B,O Dot Killer [Dot] Clean-Up . . x x x . . . . . 944 O,P Father Christmas [FC] Clean-Up . . . x x . . . . . 1881 O,P 3445 [3445] Clean-Up x x x . x x . . . . 3445 O,P,D,L Mirror [Mirror] Clean-Up . . x . . x . . . . 928 O,P Polish-2 [P-2] Clean-Up . . x x x . . . . . 512 O,P,D Polish 217 [P-217] Clean-Up . . . x x . . . . . 217 O,P,D Happy Day [Happy] Clean-Up . . . x x . . . . . 453 O,P Monxla [Monxla] Clean-Up . . . x x . . . . . 939 O,P USSR [USSR] Clean-Up . x . . . x . . . . 575 O,P Polimer [Polimer] Clean-Up . . . x x . . . . . 512 O,P,D DataLock [Data] Clean-Up . . x . . x . . . . 920 O,P Carioca [Carioca] Clean-Up . . x . x . . . . . 951 O,P 529 [529] Clean-Up . . x x x . . . . . 529 O,P,D Spyer [Spyer] Clean-Up . . x . x x x . . . 1181 O,P Taiwan4 [T4] Clean-Up . . x x x x x . . . 2576 O,P,D Keypress [Key] Clean-Up . . x x x x . . . . 1232 O,P,D Casper [Casper] Clean-Up . x . x x . . . . . 1200 L,O,P,D 1605 [1605] Clean-Up . . x x x x . . . . 1605 L,O,P,D Violator [Vio] Clean-Up . . . x x . . . . . 1055 O,P,D Blood-2 [B-2] Clean-Up . . . . x . . . . . 427 O,P,D Wisconsin [Wisc] Clean-Up . x . x x . . . . . 825 O,P,D Christmas-J [C-J] Clean-Up . . x x x x . . . . 600 O,P Austria [Austria] Clean-Up . . . x x x . . . . Overwrites Leprosy-B [Lepb] Clean-Up . . . x x x . . . . Overwrites Whale [Whale] Clean-Up x x x x x x x . . . 9216 L,O,P,D Invader [Invader] Clean-Up . x x . x x x x x . 4096 B,L,O,P,D Scott's Valley [Sval] Clean-Up . x x . x x x . . . 2133 L,O,P,D Black Monday [BMON] Clean-Up . . x x x x x . . . 1055 L,O,P,D Nomenclature [Nom] Clean-Up . . x x x x x . . . 1024 O,P,D Anthrax - Boot [Atx] M-Disk . . x . . . . . . x N/A O,P,D Anthrax - File [Atx] Clean-Up . . x x x x . . . . 1206 O,P,D 651 [651] Clean-Up . . x . x . . . . . 651 O,P,D Paris [Paris] Clean-Up . . . x x x x . . . 4909 O,P,D,L Leprosy [Lep] Clean-Up . . x x x x x . . . Overwrites Mardi Bros. [Mardi] M-DISK . . x . . . . x x . N/A B,O 1253 - Boot [1253] M-DISK . . x . . . . x x x N/A O,P,D,L 1253 - COM [1253] Clean-Up . . x x x . . . . . 1253 O,P,D,L AirCop [AirCop] M-DISK . . x . . . . x . . N/A B,O 400 (5) [400] Clean-Up . . x . x . . . . . Vary O,P,D P1 (3) [P1r] Clean-Up . x x . x . . . . . Vary O,P,D,L Ontario [Ont] Clean-Up . x x x x x . . . . Vary O,P,D 1226 (3) [1226] Clean-Up . x x x x x x . . . 1226 O,P,D V2100 [2100] Clean-Up . . x . x x . . . . 2100 O,P,D,L Plastique (3) [P1q] Clean-Up . . x x x x x . . . 3012 O,P,D Wolfman [Wolf] Clean-Up . . x x x x . . . . 2064 O,P Doom2 [Dm2] Clean-Up . . x . x x . . . . 2504 O,P,D,L Flip [Flip] Clean-Up . x x x x x x . . . 2343 O,P,D,L Fellowship [Fellow] Clean-Up . . x . . x . . . . 1022 O,P,D,L Flash [Flash] Clean-Up . . x x x x . . . . 688 O,P,D,L 1008 [1008] Clean-Up . x x x x . . . . . 1008 O,P,D,L Stoned-II [Stoned] Clean-Up . . x . . . . x . x N/A O,B,L Taiwan3 [T3] Clean-Up . . x x x x x . . . 2905 O,P,D,L Armagedon [Arma] Clean-Up . . x x x . . . . . 1079 O,P 1381 [1381] Clean-Up . . . . . x x . . . 1381 O,P Tiny (7) [Tiny] Clean-up . . . x x . . . . . 163 O,P Subliminal [Sub] Clean-Up . . x x x . . . . . 1496 O,P Sorry [Sorry] Clean-Up . . x x x . . . . . 731 O,P RedX [Redx] Clean-Up . . . x x . . . . . 796 O,P 1024 [1024] Clean-Up . . x x x . . . . . 1024 O,P Joshi [Joshi] Clean-Up x . x . . . . x x x N/A B,O,D Microbes [Micro] M-DISK . . x . . . . x x . N/A B,O,D Print Screen [Prtscr] M-DISK . . x . . . . x x . N/A B,O,D Form [Form] M-DISK . . x . . . . x x . N/A B,O,D July 13th [J13] Clean-Up . x . . . x . . . . 1201 O,P,D,L 5120 (2) [5120] Clean-Up . . . x x x x . . . 5120 O,P,D,L Victor [Victor] Clean-Up . . x x x x x . . . 2458 P,D,L JoJo [JoJo] Clean-Up . . x . x . . . . . 1701 O,P W-13 (2) [W13] Clean-Up . . . . x . . . . . 532 O,P Slow [Slow] Clean-Up . x x . x x x . . . 1721 O,P,L Frere Jacques [Frere] Clean-Up . . x . x x x . . . 1811 O,P Liberty [Liberty] Clean-Up . . x x x x x . . . 2862 O,P Fish-6 [Fish] Clean-Up x x x x x x x . . . 3584 O,P,L Shake [Shake] Clean-Up . . x . x . . . . . 476 O,P Murphy [Murphy] Clean-Up . . x x x x x . . . 1277 O,P V800 [V800] Clean-Up x x x . x . . . . . none O,P,L Kennedy [Kennedy] Clean-Up . . x . x . . . . . 308 O,P 8 Tunes/1971 [1971] Clean-Up . . x . x x x . . . 1971 O,P Yankee - 2 [Doodle2] Clean-Up . . . . x x . . . . 1961 O,P June 16th [June16] Clean-Up . . . x x . . . . . 1726 F,O,P,L XA1 [XA1] Clean-Up . x . . x . . . . . 1539 F,O,P,L 1392 [1392] Clean-Up . . x x x x . . . . 1392 O,P,L 1210 [1210] Clean-Up . . x . x . . . . . 1210 O,P,L 1720 [1720] Clean-Up . . x . x x x . . . 1720 F,O,P,L Saturday 14th [Sat14] Clean-Up . . x . x x x . . . 685 F,O,P,L Korea (2) [Korea] M-DISK . . . . . . . x x . N/A B,O Vcomm (3) [Vcomm] Clean-Up . . . . . x . . . . 1074 O,P,L ItaVir [Ita] Clean-Up . . . . . x . . . . 3880 O,P,L,B Solano (2) [Solano] Clean-Up . . x . x . . . . . 2000 O,P,L V2000 (3) [2000] Clean-Up . . x x x x x . . . 2000 O,P,L 1559 [1559] Clean-Up . . x x x x . . . . 1554 O,P,L 512 (4) [512] Clean-Up x . x x x . . . . . none O,P,L EDV (2) [EDV] Clean-Up x . x . . . . x x x N/A B,O Joker [Joke] Clean-Up . . x x x . . . . . O,P Icelandic-3 [Ice-3] Clean-Up . . x . . x . . . . 853 O,P Virus-101 [101] Clean-Up . x x x x x x x . . 2560 P 1260 [1260] Clean-Up . x . . x . . . . . 1260 P Perfume (2) [Fume] Clean-Up . . . . x . . . . . 765 P Taiwan (2) [Taiwan] Clean-Up . . . . x . . . . . 708 P Chaos [Chaos] MDISK . . x . . . . x x . N/A B,O,D,F Virus-90 [90] Clean-Up . . x . x . . . . . 857 P Oropax (3) [Oro] Clean-Up . . x . x . . . . . 2773 P,O 4096 (2) [4096] Clean-Up x . x x x x x . . . 4096 D,O,P,L Devil's Dance [Dance] Clean-Up . . x . x . . . . . 941 D,O,P,L Amstrad (5) [Amst] Clean-Up . . . . x . . . . . 847 P Payday [Payday] Clean-Up . . x . x x x . . . 1808 P Datacrime II-B [Crime-2] Clean-Up . x . x x x . . . . 1917 P,F Sylvia/Holland [Holland] Clean-Up . . . . x . . . . . 1332 P Do-Nothing [Nothing] Clean-Up . . x . x . . . . . 608 P Sunday (2) [Sunday] Clean-Up . . x . x x x . . . 1636 O,P Lisbon (2) [Lisb] Clean-Up . . . . x . . . . . 648 P Typo/Fumble [Typo] Clean-Up . . x . x . . . . . 867 O,P Dbase [Dbase] Clean-Up . . x . x . . . . . 1864 D,O,P Ghost Boot [Ghost] M-DISK . . x . . . . x x . N/A B,O Ghost COM [Ghost] Clean-Up . . . . x . . . . . 2351 B,P New Jerusalem [Jeru] Clean-Up . . x . x x x . . . 1808 O,P Alabama (2) [Alabama] Clean-Up . . x . . x . . . . 1560 O,P,L Yank Doodle (3) [Doodle] Clean-Up . . x . x x . . . . 2885 O,P 2930 [2930] Clean-Up . . x . x x . . . . 2930 P Ashar [Brain] Clean-Up . . x . . . . x . . N/A B AIDS (3) [Aids] Clean-Up . . . . x . . . . . Overwrites Disk Killer (2) [Killer] Clean-Up . . x . . . . x x . N/A B,O,P,D,F 1536/Zero Bug [Zero] Clean-Up . . x . x . . . . . 1536 O,P MIX1 [Ice] Clean-Up . . x . . x . . . . 1618 O,P Dark Avenger (2) [Dav] Clean-Up . . x x x x x . . . 1800 O,P,L 3551/Syslock [Syslock] Clean-Up . x . . x x . . . . 3551 P,D VACSINA (2) [Vacs] Clean-Up . . x . x x x . . . 1206 O,P Ohio [Ohio] M-DISK . . x . . . . x . . N/A B Typo Boot [Typo] M-DISK . . x . . . . x x . N/A O,B Swap Boot [Swap] M-DISK . . x . . . . x . . N/A B Datacrime II [Crime-2] Clean-Up . x . . x x . . . . 1514 P,F Icelandic II [Ice-2] Clean-Up . . x . . x . . . . 661 O,P Pentagon [Pentagon] M-DISK . . . . . . . x . . N/A B Traceback (2) [3066] Clean-Up . . x . x x . . . . 3066 P Datacrime-B [Crime-B] Clean-Up . x . . x . . . . . 1168 P,F Icelandic (2) [Ice] Clean-Up . . x . . x . . . . 642 O,P Saratoga [Ice] Clean-Up . . x . . x . . . . 632 O,P 405 [405] Clean-Up . . . . x . . . . . Overwrites 1704 Format [170x] Clean-Up . x x . x . . . . . 1704 O,P,F Fu Manchu (2) [Fu] Clean-Up . . x . x x x . . . 2086 O,P Datacrime (2) [Crime] Clean-Up . x . . x . . . . . 1280 P,F 1701/Cascade [170x] Clean-Up . x x . x . . . . . 1701 O,P CASCADE-B (9) [170x] Clean-Up . x x . x . . . . . 1704 O,P Stoned (2) [Stoned] Clean-Up . . x . . . . x . x N/A O,B,L 1704/CASCADE [170x] Clean-Up . x x . x . . . . . 1704 O,P Ping Pong-B (2) [Ping] Clean-Up . . x . . . . x x . N/A O,B Den Zuk (3) [Zuk] M-DISK . . x . . . . x . . N/A O,B Ping Pong (3) [Ping] Clean-Up . . x . . . . x . . N/A O,B Vienna-B [Vienna] Clean-Up . . . . x . . . . . 648 P Lehigh [Lehigh] Clean-Up . . x x . . . . . . Overwrites P,F Vienna/648 (14) [Vienna] Clean-Up . . . . x . . . . . 648 P Jerusalem-B [Jeru] Clean-Up . . x . x x x . . . 1808 O,P Alameda (2) [Alameda] Clean-Up . . x . . . . x . . N/A B Friday 13th COM [Fri13] Clean-Up . . . . x . . . . . 512 P Jerusalem (9) [Jeru] Clean-Up . . x . x x x . . . 1808 O,P SURIV03 [SurivB] Clean-Up . . x . x x x . . . O,P SURIV02 [SurivA] Clean-Up . . x . . x . . . . 1488 O,P SURIV01 [SurivA] Clean-Up . . x . x . . . . . 897 O,P Brain (3) [Brain] Clean-Up . . x . . . . x . . N/A B Total Known Viruses - 241 Legend: * - Extinct Viruses (Viruses that are research only viruses, or have not been reported in the public domain for more than 12 months.) Damage Fields - B - Corrupts or overwrites Boot Sector O - Affects system run-time operation P - Corrupts program or overlay files D - Corrupts data F - Formats or erases all/part of disk L - Directly or indirectly corrupts file linkage Size Increase - The length, in bytes, by which an infected program or overlay file will increase Characteristics - x - Yes . - No Disinfectors - SCAN/D - VIRUSCAN with /D option SCAN/D/A - VIRUSCAN with /D and /A options MDISK/P - MDISK with "P" option All Others - The name of disinfecting program Note: The SCAN /D option will overwrite and then delete the entire infected program. The program must then be replaced from the original program diskette. If you wish to try and recover an infected program, then use the named disinfector if available.