Scrambler Trojan (19-June-1990)
Entry...............: Scrambler Trojan
Alias(es)...........: KEYBGR Trojan
Virus strain........: ---
Virus detected when.: June 1990
              where.: West Germany
Host................: Keybgr.com
Virus detected when.: November 1987
              where.: Lehigh University (Bethlehem/USA)
--------------------- Preconditions ----------------------------------
Operating system(s).: MS-DOS
Version/release.....: It is not bound to any particular DOS version, 
                         but keybgr is not used on standard DOS later 
                         than 3.3 Computer models PC's with standard 
                         keyboards.
Computer model(s)...: All MS-DOS machines
--------------------- Attributes -------------------------------------
Easy identification.: The Trojan contains many copies of the string 
                         "nothing".
Interrupts hooked...: INT 9 is captured for the host program, and 
                      INT 1C is used for the damage.
Damage..............: A smiley face moves in a random fashion about 
                         the screen displacing characters as it moves. 
                         The face is either ascii 2 or 1 with a 50% 
                         probability.
Damage trigger.......: About 60 minutes after the trojan keybgr is 
                       started.
Particularities......: ---
Similarities.........: ---
--------------------- Agents -----------------------------------------
Countermeasures.....: ---
Detectors...........: ---
Standard Means......: ---
--------------------- Acknowledgement --------------------------------
Location............: Virus Test Center, University Hamburg, FRG
Classification by...: Morton Swimmer
Documentation by....: Morton Swimmer
Date................: June 30, 1990
Information Source..: ---

.