🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.comp.virus
Article #594

Re: PIECK.4444.A

#594
From: Henrique Santos Araujo
Date: Thu, 07 Jan 1999 00:00
33 lines
1819 bytes
I found some information.

Henrique

Erik wrote:
> 
> Hi all,
> 
> I got a 3.5" diskette with this virus on it: PIECK.4444.A
> My virusscanner neutralized it, but what kind of virus is this?
See below
> How old is it?
It's in the wild since 1995.
http://www.datafellows.fi/v-descs/pieck.htm
> What does it do?
Pieck.4444.A is a non-destructive memory resident, polymorphic, stealth,
Multi-partite virus. While in memory in hooks interrupts 13 and 21 and
infects the master boot record of the hard-drive. It infects .EXE files
by writing to their ends. When the MBR is infected and the virus becomes
memory-resident it disinfects the infected files on the hard disk when
they are accessed. Only the .EXE files that are accessed on the floppy
disk are then infected.

http://search.mcafee.com/vil/vp_0025.asp
> Where does it come from?
Poland.
> 
> Thanks in advance,
> 
> --
> See ya,
> 
> Erik     http://come.to/Scimitar
Technical Details
Message-ID: <36950D9F.AB91F414@my-dejanews.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <01be3a5b$da5cc3a0$196886c2@erikh>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 107e1f,f8d6fc317c8444a4
X-Google-Attributes: gid107e1f,public
X-Google-Thread: fcd68,f8d6fc317c8444a4
X-Google-Attributes: gidfcd68,public
From: Henrique Santos Araujo <hsaraujo@my-dejanews.com>
Subject: Re: PIECK.4444.A
Date: 1999/01/07
Message-ID: <36950D9F.AB91F414@my-dejanews.com>
X-Deja-AN: 429905195
Content-Transfer-Encoding: 7bit
References: <01be3a5b$da5cc3a0$196886c2@erikh>
To: Erik <e-auto@hotbot.com>
X-Accept-Language: en,pt-BR
Content-Type: text/plain; charset=us-ascii
X-Complaints-To: abuse@zaz.com.br
X-Trace: srv4-poa.nutecnet.com.br 915734202 9279 200.241.46.181 (7 Jan 1999 18:36:42 GMT)
Organization: MSMT - Liceu Salesiano São Gonçalo
Mime-Version: 1.0
NNTP-Posting-Date: 7 Jan 1999 18:36:42 GMT
Newsgroups: alt.comp.virus,fido.ger.virus