Psychogenius Virus


 Virus Name:  Psychogenius 
 Aliases:     Cover Girl, Psycho 
 V Status:    Viron 
 Discovery:   December, 1991 
 Symptoms:    program & data files corrupted; file date/time changes; 
              boot failure 
 Origin:      United States 
 Eff Length:  723 Bytes 
 Type Code:   ONAK - Overwriting Non-Resident Program & Data File Infector 
 Detection Method:  ViruScan, AVTK, Sweep, F-Prot, ChAV, 
                    NAV, IBMAV, NAVDX, VAlert, PCScan, 
                    NShld, Sweep/N, Innoc, NProt, AVTK/N, NAV/N, 
                    LProt, IBMAV/N 
 Removal Instructions:  Delete infected files 
 
 General Comments: 
       The Psychogenius, or Cover Girl, virus was received in December, 1991 
       from a United States source.  Psychogenius is a non-resident direct 
       action overwriting virus which infects any executable or non- 
       executable file.  It permanently corrupts any files it infects. 
 
       When a program infected with Psychogenius is executed, it will infect 
       all files which exist in the current directory.  It does not care if 
       the files are executable, or if they are data files of some sort. 
       Infected files will have had the first 723 bytes overwritten by the 
       viral code, and their date and time updated to the system date and 
       time when infection occurred.  There will be no change in file 
       length if the file's original length was 723 bytes or larger.  Files 
       which were originally smaller than 723 bytes will now be 723 bytes 
       in length. 
 
       The following text strings can be found in the viral code in all 
       infected files: 
 
               "Oh, oh, oh,   She's my cover girl, 
                Oh, oh, oh, 
                oh, oh, oh, 
                Cover Girl by The New Kids On The Block 
                Hangin' Tough (c) 1988 CBS Records" 
               "Written by" 
               "(Psychogenius)   12/28/91" 
               "NKOTB JORDON" 
 
       It is not possible to disinfect infected files as the first 723 
       bytes have been overwritten.  Files should be deleted and restored 
       from a clean backup copy. 
 
       Known variant(s) of Psychogenius are: 
       Psychogenius-B: Functionally equivalent to the original virus, 
              this variant has one byte which differs from the original. 
              Origin: Unknown  May, 1992. 

Show viruses from discovered during that infect .

Main Page