TimeBomb_09 Bomb (31-July-1993) Entry...............: TimeBomb_09 Bomb Alias(es)...........: .info Time Bomb Virus Strain........: --- Virus detected when.: --- where.: --- Classification......: Time bomb Length of Virus.....: Length of file: 7840 bytes (+1 byte in "pic.xx") --------------------- Preconditions ------------------------------------ Operating System(s).: AMIGA-OS Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all Computer model(s)...: All AMIGA models --------------------- Attributes --------------------------------------- Easy Identification.: There is a "startup-sequence" entry called ".info", and there is always a 2nd file called "pic.xx" with 1 byte length in root directory (serving as counter). If diskette is write protected, bomb writes to Shell: "User Request: Please remove write Protection and press left Mouse Button to continue.." Type of infection...: None (damage-only) Infection Trigger...: --- Storage media affected: Floppy disks only Interrupts hooked...: --- Damage..............: Permanent damage: formating floppy disks Damage Trigger......: Starting this program when the specific byte in "pic.xx" counted down to zero. Particularities.....: --- Similarities........: VirusTest bomb (seems to be an "older version") --------------------- Agents ------------------------------------------- Countermeasures.....: VirusZ 3.06, VT 2.54, VirusChecker 6.28 Countermeasures successful: VirusZ 3.06, VT 2.54, VirusChecker 6.28 Standard means......: Delete files ".info", "pic.xx" and the "startup-sequence" entry, or use VT 2.54. --------------------- Acknowledgement ---------------------------------- Location............: Virus Test Center, University Hamburg, Germany Classification by...: Jens Vogler Documentation by....: Jens Vogler Date................: 31-July-1993 Information Source..: Reverse analysis of virus code .