旼컴컴컴컴컴컴컴컴컴컴컴컴컴컴� � VIRUS REPORT � � Taiwan Virus � 읕컴컴컴컴컴컴컴컴컴컴컴컴컴컴� Date of Origin: January, 1990. Place of Origin: Taiwan, R.O.C. Host Machine: PC compatibles. Host Files: Not memory resident. Infects COM files, including COMMAND.COM. Increase in Size of Infected Files: 708 or 743 bytes. Nature of Damage: corrupts COM files. Detected by: Scanv56+, F-Prot. Removed by: CleanUp, Scan/D, or delete infected files. Whenever this virus is activated, it attempts to infect up to three COM files. The search for uninfected COM files begins in the root directory of C:. Once an uninfected COM file is located, the virus infects the file by copying the viral code to the first 743 bytes of the file, relocating the original first 743 bytes of the file to the end of the COM file. If the COM file selected for infection is less than 743 bytes, the resulting infected COM file will always be 1,486 bytes in length. This "bug" results from a failure to check for the original file length. The virus is destructive. On the 8th day of any month, when an infected program is run, the virus will perform an absolute disk write for 160 sectors starting at logical sector 0 on the C: and D: drives, overwriting the FATs and root directories. �袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴� � This document was adapted from the book "Computer Viruses", � � which is copyright and distributed by the National Computer � � Security Association. It contains information compiled from � � many sources. To the best of our knowledge, all information � � presented here is accurate. � � � � Please send any updates or corrections to the NCSA, Suite 309, � � 4401-A Connecticut Ave NW, Washington, DC 20008. Or call our BBS � � and upload the information: (202) 364-1304. Or call us voice at � � (202) 364-8252. This version was produced May 22, 1990. � � � � The NCSA is a non-profit organization dedicated to improving � � computer security. Membership in the association is just $45 per � � year. Copies of the book "Computer Viruses", which provides � � detailed information on over 145 viruses, can be obtained from � � the NCSA. Member price: $44; non-member price: $55. � � � � The document is copyright (c) 1990 NCSA. � � � � This document may be distributed in any format, providing � � this message is not removed or altered. � 훤袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴袴暠  Downloaded From P-80 International Information Systems 304-744-2253