Vienna Virus (October 31, 1989)
Entry...............: Vienna Virus
Alias(es)...........: "648 Virus", Austrian Virus
Classification......: Programm Virus (Extending), Direct Action
Length of Virus.....: 648 Bytes
--------------------- Preconditions ------------------------------------
Operating System(s).: PC-DOS, MS-DOS
Version/ Release....: 2.xx and upward
Computer model(s)...: IBM-PC XT AT
--------------------- Attributes ---------------------------------------
Type of infection...: Self-Identification: The second-entry of the
                      time stamp of an infected file is set to 62 dec.
                      Infects .COM-files (with length between 10 and
                      64.000 bytes) in the current directory of the
                      current drive and in all directories that are
                      accessible via the PATH-definition.
                      Virus code is appended at the end of the file.
Infection Trigger...: Execution of an infected file.
Storage media affected: Hard and Floppy disks.
Damage..............: The first five bytes of the selected file will
                      be overwritten a long jump to the BIOS
                      initialisation routine.
Damage Trigger......: IF (7 AND second-bits of system-time) equals 0.
Particularities.....: For infection, the virus selects an appropriate 
                      file and, depending on the value of the damage 
                      trigger, either infects that file or overwrites 
                      the first five bytes. The attribute, time- and 
                      date-stamp of an infected file remains unchanged 
                      with exception of the seconds-bits. The READ-ONLY 
                      and HIDDEN attributes do not protect against 
                      infection.
--------------------- Agents: ------------------------------------------
Countermeasures.....: ----
Countermeasures successful: ---
Standard Means......: ----
--------------------- Acknowledgements: --------------------------------
Location............: Virus Test Center. University Hamburg, FRG
Classification by...: Rainer Anscheit (July 4, 1989)
Documentation by....: Rainer Anscheit (July 4,1989)
Updated by..........: Klaus Brunnstein  
Date................: October 31, 1989

.