andreas@relay.EU.net (Andreas Brandl) (09/29/89)
Hello out there,
a few days ago I read a article about the DATACRIME-
virus and how I can find it with search-strings. Yesterday I read in
an info-paper from a very, very, very big corporation about them.
This paper tells about three versions of DATACRIME.
The first two versions only infect COM-files. Their functions are
identical, only their increase-sizes are different. One increases the file
size by 1168 bytes, and the other by 1280 bytes. DATACRIME II virus is the
third version and infects COM and EXE files. In this version COM files
grow by 1514 bytes and EXE by a similar, but variable, size.
I possibly know the search-string for the third version. But I can give no
warranty, that my info is absolut right. The search-string is like the
following:
5E81EE030183FE00742A2E8A9403018DBC2901.
I hope this is a little help to locate and destroy this virus.
Bye bye, Andreas
- --
------------------------------------------------------------------
EDV Ges.m.b.H Vienna Andreas Brandl
Hofmuehlgasse 3 - 5 USENET: andreas@edvvie.at
A-1060 Vienna, Austria/Europe Tel: (0043) (222) 59907 (8-16 CET)