| Alias: | |
| Strain: | |
| detected when: | |
| where: | |
| Classification: | Program (COM&EXE) Virus (appending), resident |
| Length: | On media: 887 Bytes. |
Preconditions | |
| Operating System(s): | MS-DOS |
| Version/Release: | 2.00 and above |
| Computer model(s): | |
| Caroname: | Peach |
Attributes | |
| Easy identification: | The following text can be found in infected files: "Roy XuatroNo 2 Peach GardenMeyer Rd. Spore 1543" |
Type of Infection: | Virus infects COM and EXE files. It identifies EXE files by looking for "Z" at position 1. Virus goes memory-resident. |
| Infection Technique: | |
| Infection Trigger: | Load and Execute (Int 21h function 4B00) |
| Storage Media affected: | Anything that can be addressed using DOS calls (floppy diskettes, hard disks) |
| Interrupts hooked: | Int 21h, Int 23h and Int 24h (Control-C and Critical Error Handler) during infection. |
| Stealth: | |
| Tunneling/Selfprot: | |
| Oligo/Polymorphism: | |
| Encoding Method: | |
| Damage: | Transient Damage: --- Permanent Damage: if file "chklist.cps" (crea- ted by Central Point AntiVirus) is found, this file is deleted. |
| Damage Trigger: | If file "chklist.cps" is found. |
| Particularities: | --- |
| Similarities: | --- |
Agents | |
| Countermeasures: | Skulason F-PROT 2.02, Solomon FindViru 3.5 |
| Standard means: | --- |
Acknowledgements | |
| Location: | Virus Test Center, University Hamburg, Germany S&S Internati |
| Classification by: | Morton Swimmer |
| Documentation by: | Morton Swimmer |
| Date: | 7-July-1992 |
| Information Source: | Original virus |
(c) 1996 Virus-Test-Center, University of Hamburg