| Alias: | --- | | Strain: | --- | | detected when: | --- | | where: | --- | | Classification: | Link virus (directory type), resident | | Length: | 1. Length on storage medium: 2608 byte 2. Length in RAM: 12608 byte |
Preconditions | | Operating System(s): | AMIGA-DOS | | Version/Release: | 1.2/all, 1.2/all, 2.01/all | | Computer model(s): | all models | | Caroname: | Bret_Hawnes.Original |
Attributes | | Easy identification: | Identification by the following entry (hex) in "startup-sequence" as first entry: $C0,$A0,$E0,$A0,$C0 (invisible in most ASCII editors) | Type of Infection: | Self-identification method: virus is searching for its internal name (5 bytes) as first entry in "startup-sequence" System infection: RAM resident, reset resident | | Infection Technique: | | | Infection Trigger: | first use of OpenWindow after reset | | Storage Media affected: | all DOS-devices | | Interrupts hooked: | hardware-interrupt 3 | | Stealth: | | | Tunneling/Selfprot: | | | Oligo/Polymorphism: | | | Encoding Method: | | | Damage: | Permanent damage: writes it's code to disk and it himself into "startup-sequence" Transient damage: system shutdown after displaying "guess who`s back yep, bret hawnes blops your screen", "i`ve taken controll over your amiga !!!!", "there`s only one cure: power off, reboot !!!" | | Damage Trigger: | Permanent damage: first OpenWindow after reset Transient damage: 10th infection or 60,000th occurence of interrupt 3 after reset (on PAL-AMIGAS approx. after 20 Minutes) | | Particularities: | Changes OpenLib, OpenWindow und CoolCapture vector and uses KickTagPtr; has a format routine (drive 0, tracks 35 to 45) called every 10th infection that doesn`t seem to work | | Similarities: | Colors Virus Carrier; same infection as Lamer file viruses. |
Agents | | Countermeasures: | Virus Checker 6.19, VirusZ 3.00 | | Standard means: | VirusZ 3.00 | A Smarter Approach to Security
Kaspersky Lab has raised the bar once again. Kaspersky® Internet Security 2009 offers a thoroughly new approach to keeping you safe. Along with new enhancements to our top-rated detection technology, we've added important new layers of security designed to provide the greatest possible protection. And we did it while making version 2009 up to 7 times faster. It's all about premium protection that lets you make the most of your computer's power.
Acknowledgements | | Location: | Virus Test Center, University Hamburg, Germany | | Classification by: | Karim Senoucci | | Documentation by: | Karim Senoucci | | Date: | 15-December-1992 | | Information Source: | Virus analysis |
A New Generation of Threat Protection Premium Protection fromKaspersky Lab
"At Kaspersky Lab, we protect over 250 million systems worldwide. In 2007 we saw more malicious threats than in the previous 15 years combined. Kaspersky Internet Security 2009 represents a breakthrough in the way we protect our customers with the strongest, most efficient anti-malware technology in the world. And we back this with the finest support team in the business. Trust Kaspersky Lab."
- Eugene Kaspersky A New Generation of Threat Protection
Kaspersky's Internet Security lab has seen an unprecedented growth in cybercrime attacks. In 2007 alone we responded to more than 2 million new malicious threat samples - more than the prior 15 years combined. These attacks have become remarkably sophisticated, with cybercrimals finding new inventive ways to steal private information, personal identities and financial data. Tags: Kaspersky Internet Security 2009, Free Kaspersky Internet Security 2009 Download, internet security, antivirus software, antispyware software, personal firewall, antispam
|