VIRUS HELP TEAM
Denmark & Canada


Index - News - Download - Warnings - Link - Virus Help - About VHT - Encyclopedia - Miscellaneous - Contact



    ------------------------    
    Amiga Virus Encyclopedia    
    Smily Cancer II Virus
    ------------------------


    - The Smily Cancer II   Filevirus  length: 4676  2x coded
          after 1x decoding with       eori.b #$90,d1
                                       subi.b #$22,d1
          at file-end:
                CENTURIONS STRIKES BACK: THE SMILY CANCER II
          when starting the program the loadWB command is simulated and
          the virus copies itself to memory. Spreading is done like
          Smily 1,  that is: No spreading as Smily II! See Smily I
          Note 03.09.92: VT now removes several SmileyLinks in one
          operation. If not, please get in touch.
          Note 16.04.93: a smily clone is found.
          Length: extends a file with 3916 bytes
          Almost all  infected files are not executable.  This
          leads me to think that the addbuffers command was manipulated by
          hand.
          VT  shortens  the  files  to  their original length, and then the
          startup-sequence can be executed again.
          Difference  from  the original:  the jump-command to the decoding
          routine is changed.
          How to cope: see above.
          Note  12.06.93:   More  and  more  often  there  comes  defective
          Smiley-files.   VT  should recognize a defect hunk-structure when
          trying  to repair, and then offer to delete.  Please don't forget
          to test the s-seq and - if needed - re-copy the original file.



    Translated text from VT-Knows by Heiner Schneegold
    Translated by Torben Danoe


    

Virus Help Team
Denmark & Canada
Copyright © 1994-2020