Peach Virus (25-July-1992)
Entry...............: Peach Virus
Standard CARO Name..: Peach Virus
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.:
              where.:
Classification......: Program (COM&EXE) Virus (appending), resident
Length of Virus.....: On media: 887 Bytes.
--------------------- Preconditions ----------------------------------
Operating System(s).: MS-DOS
Version/Release.....: 2.00 and above
Computer model(s)...:
--------------------- Attributes -------------------------------------
Easy Identification.: The following text can be found in infected files:
                      "Roy XuatroNo 2 Peach GardenMeyer Rd. Spore 1543"
Self Identification.: In memory: at position 0040:00fc, the string
                         "Roy" can be found.
                      In file: in the EXE header, the IP field will con-
                         tain 01fch at position 14h; in COM file, virus
                         compares the COM startup code it inserts.
Type of infection...: Virus infects COM and EXE files. It identifies
                         EXE files by looking for "Z" at position 1.
                      Virus goes memory-resident. 
Infection Trigger...:Load and Execute (Int 21h function 4B00) 
Storage media affected:Anything that can be addressed using DOS calls
                         (floppy diskettes, hard disks) 
Interrupts hooked...: Int 21h, Int 23h and Int 24h (Control-C and
                         Critical Error Handler) during infection. 
Damage..............: Transient Damage: ---
                      Permanent Damage: if file "chklist.cps" (crea-
                         ted by Central Point AntiVirus) is found, 
                         this file is deleted.
Damage Trigger......: If file "chklist.cps" is found.
Particularities.....: ---
Similarities........: ---
--------------------- Agents -----------------------------------------
Countermeasures.....: Skulason F-PROT 2.02, Solomon FindViru 3.5
Standard means......: ---
--------------------- Acknowledgement --------------------------------
Location............: Virus Test Center, University Hamburg, Germany
                      S&S International (Deutschland)
Classification by...: Morton Swimmer
Documentation by....: Morton Swimmer
Date................: 7-July-1992
Information Source..: Original virus 

.