Antivirus
Network Security
Help
links
Visitor Focus
You are here:HomeAntivirusVirus Type→FORPIB Virus
FORPIB Virus   
Written by yangying   
February 21, 2008 13:37

Alias:---
Strain:BYTE BANDIT Virus Strain
detected when:JANUARY 1990
where:Elmshorn, Germany
Classification:System virus (bootblock), resident
Length:1. Length on storage medium: 1,024 byte 2. Length in RAM : 1,024 byte

Preconditions

Operating System(s):AMIGA-DOS
Version/Release:1.2/33.166, 1.2/33.180 and 1.3/34.20
Computer model(s):AMIGA 500, AMIGA 1000, AMIGA 2000A, AMIGA 2000B (and only wi
Caroname:ByteBandit.Forpib.Original

Attributes

Easy identification:Typical text: " - FORPIB - 09.88 - No 197102 - "

Type of Infection:

Self-identification method: --- System infection: RAM resident, reset resident, bootblock

Infection Technique: 
Infection Trigger:reset (=CONTROL+Left-AMIGA+Right-AMIGA) operation: any disk access
Storage Media affected:only floppy disk (3.5" and 5.25")
Interrupts hooked:vertical blank interupt
Stealth: 
Tunneling/Selfprot: 
Oligo/Polymorphism: 
Encoding Method: 
Damage:Permanent damage: overwriting bootblock, maybe destroying opened files when screen and key- board are shut off and the user has to restart system using CONTROL+LEFT-AMIGA+RIGHT-AMIGA Transient damage: screen buffer manipulation: screen becomes dark, keyboard seems to mal- function; transient damage may be interrupted by pressing special key combination: LEFT-ALT+LEFT-AMIGA (on newer AMIGAS the COMMODORE key)+SPACE+RIGHT-AMIGA+RIGHT ALT (but the virus will still be active)
Damage Trigger:Permanent damage: reset; any disk access Transient damage: only under following condition: 2 resets AND 6 infections AND execution of BYTE BANDIT's own interrupt routine 5208 times (approx. 7 minutes)
Particularities:uses StartIOVector; other resident programs using the system resident list (KickTagPointer, KickMemPointer) are shutdown Copy counter: 19th word
Similarities:BYTEBANDIT virus strain

Agents

Countermeasures:CHECKVECTORS 2.2,GUARDIAN 1.2,VIRUSX 4.0
Standard means:CHECKVECTORS 2.2

Acknowledgements

Location:Virus Test Center, University Hamburg, Germany
Classification by:Wolfram Schmidt
Documentation by:Wolfram Schmidt
Date:1-NOVEMBER-1991
Information Source:---
 

A New Generation of Threat Protection

 

Premium Protection fromKaspersky Lab
"At Kaspersky Lab, we protect over 250 million systems worldwide. In 2007 we saw more malicious threats than in the previous 15 years combined. Kaspersky Internet Security 2009 represents a breakthrough in the way we protect our customers with the strongest, most efficient anti-malware technology in the world. And we back this with the finest support team in the business. Trust Kaspersky Lab."

- Eugene Kaspersky 

 

A New Generation of Threat Protection
Kaspersky's Internet Security lab has seen an unprecedented growth in cybercrime attacks. In 2007 alone we responded to more than 2 million new malicious threat samples - more than the prior 15 years combined. These attacks have become remarkably sophisticated, with cybercrimals finding new inventive ways to steal private information, personal identities and financial data.

A Smarter Approach to Security
Kaspersky Lab has raised the bar once again. Kaspersky® Internet Security 2009 offers a thoroughly new approach to keeping you safe. Along with new enhancements to our top-rated detection technology, we've added important new layers of security designed to provide the greatest possible protection. And we did it while making version 2009 up to 7 times faster. It's all about premium protection that lets you make the most of your computer's power.

Tags: Kaspersky Internet Security 2009, Free Kaspersky Internet Security 2009 Download, internet security, antivirus software, antispyware software, personal firewall, antispam

German : FORPIB Virus
Spanish : FORPIB Virus
French : Virus FORPIB
Japanese : FORPIBウイルス
Russian : FORPIB Касперского