frisk@rhi.hi.is (Fridrik Skulason) (09/20/90)
As has previously been reported, the 'Frodo' (alias 4096, 4K, IDF) virus will activate on September 22nd. The virus will then overwrite the boot sector code with a short program, whose function is to display the text 'FRODO LIVES' in large letters in the middle of the screen. It will then place a moving border around the text and disable the keyboard - making Ctrl-Alt-Del ineffective. However - all the copies I have seen of this virus are defective - it seems that the virus may even (by mistake) have garbled itself. The reason for this is not known, however. The code which was garbled is the boot-writing part mentioned above. Programs infected with the virus will therefore probably not work as intended, but may instead hang the machine if they are run on Sept 22. There is no great cause for alarm - the virus is fairly harmless, at least compared to some of the real 'nasties' - but it has spread rapidly recently.... If anyone discovers an uncorrupted copy of the virus, which activates as described above, I would appreciate a report. - -frisk - -- Fridrik Skulason University of Iceland | Technical Editor of the Virus Bulletin (UK) | Reserved for future expansion E-Mail: frisk@rhi.hi.is Fax: 354-1-28801 |