| Alias: | |
| Strain: | |
| detected when: | May 1994 |
| where: | Italy |
| Classification: | Virus companion (EXE), encrypted, memory resident, stealth, |
| Length: | 1) Length in files: 250 bytes 2) Length in memory: 507 bytes |
Preconditions | |
| Operating System(s): | MS-DOS |
| Version/Release: | |
| Computer model(s): | |
| Caroname: | Maaike |
Attributes | |
| Easy identification: | --- |
Type of Infection: | Companion; System infection: File are infected when executed; |
| Infection Technique: | |
| Infection Trigger: | Any file .EXE, which is executed via function 21/4B00; |
| Storage Media affected: | |
| Interrupts hooked: | 21H (DOS-Calls); |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Transient: The virus write this flash text on page B800H: " Maaike I Love You ! " in green on red background 105 times; Permanent: --- |
| Damage Trigger: | |
| Particularities: | |
| Similarities: | --- |
Agents | |
| Countermeasures: | |
| Standard means: | |
Acknowledgements | |
| Location: | TG Soft Anti-Virus, University of Padova - Italy |
| Classification by: | Gianfranco Tonello Via Sardegna n. 5, 35030 Rubano (PD) - It |
| Documentation by: | Gianfranco Tonello |
| Date: | 01-June-1994 |
| Information Source: | Reverse analysis of virus code |
(c) 1996 Virus-Test-Center, University of Hamburg