| Alias: | |
| Strain: | Dark Avenger |
| detected when: | November 1989 |
| where: | USA |
| Classification: | February 1990 |
| Length: | about 1800 Bytes |
Preconditions | |
| Operating System(s): | DOS |
| Version/Release: | |
| Computer model(s): | IBM-compatible |
| Caroname: | Dark_Avenger.1800.A |
Attributes | |
| Easy identification: | Two Texts: "Eddie lives...somewhere in time" at beginning and "This Program was written in the City of Sofia (C) 1988-89 Dark Avenger" near end of file |
Type of Infection: | Link-virus COM-files: appends to the program and installs a short jump EXE-files: appends to the program at the beginning of the next paragraph |
| Infection Technique: | |
| Infection Trigger: | COM and EXE files are corrupted on any read attempt even when VIEWING!!! |
| Storage Media affected: | Any Drive |
| Interrupts hooked: | Int 21 DOS-services Int 27 Terminate and Stay Resident |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Overwrites a random sector with bootblock |
| Damage Trigger: | each 16th infection; counter located in Bootblock |
| Particularities: | - |
| Similarities: | - |
Agents | |
| Countermeasures: | |
| Standard means: | Good luck! Hopefully the virus did not destroy too many of your programs and data. |
Acknowledgements | |
| Location: | VTC Uni Hamburg |
| Classification by: | Matthias Jaenichen |
| Documentation by: | Matthias Jaenichen |
| Date: | 31.01.1990 |
| Information Source: | --- |
(c) 1996 Virus-Test-Center, University of Hamburg