"PIRATE TRAP" VIRUS (5-June-1990) Entry............... "PIRATE TRAP" Virus Alias............... --- Strain.............. --- Detected when....... May 1989 where...... Classification...... System (Boot sector) Virus, Reset-resident Length of virus..... 512 Bytes ------------------------Preconditions---------------------------------- Operating System(s). Atari TOS Version\Release..... all TOS versions Computer models..... All Atari ST -------------------------Attributes------------------------------------ Easy identification. In memory behind screen memory and in the boot sector, the following string can be found.: "*** The Pirate Trap *** * Youre being watched * *** [C] P.M.S. 1987 ***" Type of infection... Boot sector of drive A. Infection trigger... Execution of XBIOS floprd on bootsector of drive A. Execution of boot code. Media affected...... Drive A. Interrupts hooked... TRAP #14 XBIOS, reset vector. Damage.............. The the message mentioned above appears on screen, and the computer waits for a keystroke; then, the computer continues execution. Damage trigger..... Internal counter = 0. Particularities..... A lower counter on disk than the one in memory is not changed. Similarities........ --- ----------------------------------------------------------------------- Countermeasures..... Make sure that the virus is not in memory. Search boot sector for the string mentioned above. Modify the last byte in boot sector to another value. Standard means...... Clear all bytes in boot sector beginning at offset 30 decimal. -----------------------Acknowledgements-------------------------------- Location............ Virus Test Center, University of Hamburg, FRG Classification by... Ronald Greinke Documentation by.... Ronald Greinke Information Source.. George R. Woodside Date................ 5-June-1990 .