ARMAGEDON THE GREEK VIRUS

 

             *********************************************

             ***   Reports collected and collated by   ***

             ***            PC-Virus Index             ***

             ***      with full acknowledgements       ***

             ***            to the authors             ***

             *********************************************

   ARMAGEDON THE GREEK VIRUS

   =========================

   Extracts from Virus-L

   Date:    Mon, 04 Jun 90 23:20:23 +0300

   From:  Yuval Tal, Rehovot, Israel

   I've just received a copy of a virus called "Armageddon the GREEK".

   Have anyone ever seen this virus? SCAN 62 did not identify this

   virus so I consider this as a new virus.  I've checked it a bit and

   from what I found out, at a certain time, the virus sends a special

   command to your ports which a Hayes compatible modem can

   understand!

   ========= more ===========

   Date:    Thu, 14 Jun 90 02:08:06 +0700

   From:  Hmm70@GRATHUN1.BITNET

   Subject: armageddon the GREEK virus (PC)

*****************************************************************************

*                                                                           *

*           Vaccine for the >> Armagedon the GREEK <<  virus                *

*                                                                           *

*               (c) copyright 1990       George Spiliotis                   *

*               English documentation by Lefteris Kalamaras                 *

*****************************************************************************

  This is a public domain program. It is in NO way allowed for anyone

  to sell this program or its documentation for profit.  (Usual public

  domain rules apply)

  DISCLAIMER

  The author of this program is in NO way liable for any damage caused

  by this program, its use or its modifications.  (Usual disclaimer

  rules apply)

                       "Armageddon the GREEK" scan

   I received a copy of a program recently, which contained a virus

   SCAN V62 could NOT identify!  After having worked on its code for

   some time, I discovered the following:

   1) The virus becomes resident in memory

   2) It infects .COM files ONLY

   3) It sends the message "Armageddon the GREEK" to the 4 com ports

   from time to time

   It is possible that this virus is a modified existing one in which

   the author, by changing the message to "Armageddon the GREEK",

   managed to get SCAN V62 inoperative.

   This program is a vaccine for "Armageddon the GREEK". It can also

   scan and clean modified versions of this virus if the only thing

   changed is the message.

   You can stop the vaccine from cleaning the infected files from the

   virus by specifying "/n" in the command line.

   VALIDATE gave the following results:

          File Name:  scanarma.exe

               Size:  7,584

               Date:  6-1-1990

          File Authentication:

               Check Method 1 - C9FC

               Check Method 2 - 192C

   Examples:

   (SCANARMA c:      (checks drive c:)

   (SCANARMA a:\temp (checks drive a: dir temp) (SCANARMA /n b:

   (checks b: but does NOT clean the infected files) ( Good Luck!

    For more information, you can contact the author of the vaccine,

    George Spiliotis at the address below, or call LinK BBS in Athens,

    where you will find the latest version of the vaccine, or send a

    message to LEKA@GRATHUN1 to contact Lefteris Kalamaras.

    George Spiliotis

    26-28 Digeni st. Voula

    Athens, 16673 GREECE

    or

    Lefteris Kalamaras

    43 Serifou st. K.Patissia

    Athens 11254 Greece

    BBS phone : 30-1-867-4834

    voice #   : 30-1-864-5363

    BitNet    : LEKA@GRATHUN1 or ELKALAMARAS@VASSAR

  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

  ++++++++++++++++++++++++++ end of reports ++++++++++++++++++++++++

  ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++