|
|
| CaroName | GoldBug |
| Info | TEXT: "CHKLST????","107=0SLMTA" (This latter string is sent, in reversed order, to the modem so it answers incomming calls on the seventh ring.) MODIFIES CMOS: Overwrites CMOS when certain antivirus programs are run. <Dav> Prevents programs from running that end in "AN" to "AZ" (Including files like *SCAN, and *AV.) <Tin> Removes integrity files of CPAV and MSAV. NOTE: The virus can install itself in HMA memory. The virus overwrites the partition table in the MBR. The infected drive will be invisible to DOS if the system is booted from an uninfected floppy. Using fdisk /mbr will render the drive unbootable. |
| Siz | 1024 |
| Mbr | Yes |
| Hbr | No |
| Boo | Yes |
| Com | No |
| Exe | Yes |
| Sys | No |
| Cmp | Yes |
| Ole | No |
| Res | Yes |
| Mlt | Yes |
| Sem | No |
| Ful | Yes |
| Enc | Yes |
| Pol | Yes |
| Arm | No |
| Tun | Yes |
| Vfx | No |
| Sfx | No |
| Mus | No |
| Msg | No |
| Txt | Yes |
| Txc | No |
| War | No |
| Dam | No |
| Cmo | Yes |
| Xmb | Yes |
| Cmd | No |
| Xmd | No |
| Aav | No |
| Dav | Yes |
| Tav | No |
| Tin | Yes |
| Bug | No |
| Frequency | 3 |
| Aliases | |
|