nVIR

nVIR
nVIR virus family
Common name nVIR
Technical name Mac OS/nVIR virus
Aliases AIDS, Fuck, Hpat, Jude, nVIR, MEV#, MODM, nCAM, nFLU, kOOL, SHIT, prod
Family nVIR, three predominant strains: nVIR-A, nVIR-B, nVIR-C
Classification Virus
Type Macintosh
Subtype Application infector. Nuisance; system hanger.
Isolation 1987 (nVIR-A and nVIR-B), 1991 (nVIR-C)
Point of isolation Unknown
Point of Origin Unknown
Author(s) Unknown

nVIR is an obsolete computer virus which can replicate on Macintosh computers running any System version from 4.1 to OS 8. The source code to the original nVIR has been made widely available, and so numerous variants have arisen. Each variant causes somewhat different symptoms, such as: application crashes, printing errors on laser printers, slow system response time, or unpredictable system crashes. nVIR spreads through any nVIR-infected program, but due to the long period of time nVIR lies basically dormant in a host system, nVIR generally finds its way into system backups and is not detected until the first overt symptoms appear. For example, if a disk used in an infected Macintosh is removed and inserted in a second Macintosh, the other machine will become infected if any application on that disk is executed in the second machine. Further, any method used to transfer programs between Macintoshes will spread nVIR, including file transfer over a network. However, nVIR cannot spread via a print network's hardware.

nVIR carries an additional code resource, CODE 256 (though some variants carry CODE 255), and patches the jump table to point to it. The original application's entry point is saved in the nVIR 2 resource. nVIR introduces to the System file the INIT 32 resource which is executed at startup, at which time nVIR patches the TEInit trap. Any application subsequently calling this trap will be infected. The nVIR 3 (or nVIR 5) resource is a copy of INIT 32. An nVIR 10 resource in the System file will prevent nVIR infection. If an application calls OpenResFile prior to TEInit, that application will be damaged.

nVIR 0 resource holds a counter that is set to 1000 on the first infection of the system. Each reboot decrements the counter by 1. Each application launch decrements it by 2. When the counter reaches 0, nVIR will beep 1 out of 8 reboots and 1 of 4 infected application launches. If MacinTalk is installed in the machine's System folder, the machine may occasionally say "Don't Panic". Otherwise, it may beep unexpectedly.

nVIR has been known to 'hybridize' with different variants of nVIR on the same machine.

External links


Wikimedia Foundation. 2010.

Игры ⚽ Поможем написать курсовую

Look at other dictionaries:

  • NVIR (computer virus) — Computer virus Fullname = nVIR virus family Common name = nVIR Technical name = Mac OS/nVIR virus Family = nVIR, three predominant strains: nVIR A, nVIR B, nVIR C Aliases = AIDS, Fuck, Hpat, Jude, nVIR, MEV#, MODM, nCAM, nFLU, kOOL, SHIT, prod… …   Wikipedia

  • müstənvir — ə. nur saçan, işıqlandıran; nurlu, işıqlı …   Klassik Azərbaycan ədəbiyyatında islənən ərəb və fars sözləri lüğəti

  • müstənvirən — ə. nur saçaraq, işıqlandıraraq …   Klassik Azərbaycan ədəbiyyatında islənən ərəb və fars sözləri lüğəti

  • tənvir — ə. nurlandırma, işıqlandırma; işıq yandırma …   Klassik Azərbaycan ədəbiyyatında islənən ərəb və fars sözləri lüğəti

  • AIDS (computer virus) — Computer virus Fullname = AIDS Common name = AIDS Technical name = AIDS Family = N/A Aliases = AIDSB, AIDS II, AIDS II, AIDS92, Hahaha, Taunt Classification = Virus Type = DOS Subtype = COM to EXE infector. Corrupter. IsolationDate = circa 1990… …   Wikipedia

  • FullWrite Professional — Though it was released a year later than promised and had a number of problems, it developed a faithful following and some amount of commercial success. It was particularly well liked for its excellent outliner, and its ability to create and… …   Wikipedia

  • AIDS II (computer virus) — Computer virus Fullname = AIDS II Common name = AIDS 2 Technical name = AIDS II.8064 Family = AIDS II Aliases = AIDS II, Aids.8064, AIDS 8064, AIDS II.8064 Classification = Virus Type = DOS Subtype = EXE to COM companion. General nuisance.… …   Wikipedia

  • Miniature UAV — An EMT Aladin of the German Army A miniature UAV or Small UAV (SUAV),[1] is an unmanned aerial vehicle small enough to be man portable. Miniature UAVs range from micro air vehicles (MAVs) that can be carried by an infantryman, to man portable… …   Wikipedia

  • List of computer viruses (L–R) — This list is incomplete; you can help by expanding it. Name Alias(es) Type Subtype Isolation Date Isolation Origin Author Notes L1 …   Wikipedia

  • Environtologie — En|vi|ron|to|lo|gie 〈[ vi ] f. 19; unz.〉 Umweltforschung [<frz. environner „umgeben“ + grch. logos „Wort, Lehre“] * * * Environtologie   [zu französisch environ »um. .. herum«] die, , Teilgebiet der Zukunftsforschung, das sich speziell mit den …   Universal-Lexikon

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”