MBDF A Virus

Alias:---
Strain:---
detected when:February 1992
where:Wales
Classification:Link virus, System & applications
Length:Resource fork extension 638 bytes

Preconditions

Operating System(s):MacOS proprietary
Version/Release:System 4 or greater including system 7
Computer model(s):Apple Macintosh: See ROMs under Traps affected. All other sy
Caroname:MBDF.A

Attributes

Easy identification:MBDF resources with ID 0 and 1 in System file; MBDF 0 with size 630 bytes

Type of Infection:

All files that use menus and have no MBDF 0

Infection Technique:MBDF ID 0 630 Bytes
Infection Trigger:Executing an infected file to infect System. Running an application under an infected system.
Storage Media affected:
Interrupts hooked:For the following ROMs: Mac II,x,cx,ci,SE,SE/30,Portable ROMs, the following traps are called via direct ROM calls: AddResource SetResAttrs ChangedResource WriteResource
Stealth:
Tunneling/Selfprot:
Oligo/Polymorphism:
Encoding Method:
Damage:Permanent damage: none Transient damage: none
Damage Trigger:---
Particularities:Applications may have MBDF resources (compare size)
Similarities:---

Agents

Countermeasures:Use of a commercial anti-viral product or a public domain utility such as Virus detective, VirusRx, Interferon or Disinfectant >= 2.6 to carry out virus signature scans.
Standard means:

Acknowledgements

Location:VTC University Hamburg,Germany
Classification by:Ronald Greinke
Documentation by:Ronald Greinke
Date:04-April-1992
Information Source:

(c) 1996 Virus-Test-Center, University of Hamburg