Software:Ambulance (computer virus)
| Aliases | RedX |
|---|---|
| Type | Virus |
| Isolation | June,1990 |
| Point of origin | Germany |
| Operating system(s) affected | DOS |
| Filesize | 796 bytes |
Ambulance or Ambulance Car is a computer virus that infected computers running a DOS operating system in June 1990. It was discovered in Germany .[1]
Description
Ambulance does not become memory resident. It infects only one .COM file in any given directory, but not the first one. Thus, there must be at least two .COM files in a directory for it to spread.
When an infected file is executed, an ASCII art ambulance can be seen moving across the screen, a siren starts to sound, and it displays an alert message such as: BOOM! It is not a deliberately destructive virus; it simply spreads itself around and shows off its payload once in a while.[2] In certain iterations of the virus, the ambulance will only appear once per boot-up.[3]
Variants
These are just some of many variants detected:
- Ambulance Car-B
- RedX-Any
- Ambulance.793
- Ambulance.793.A
- Ambulance.795
- Ambulance.796A[4]
See also
References
- ↑ "Ambulance Car Virus". 1996 Virus-Test-Center, University of Hamburg. http://agn-www.informatik.uni-hamburg.de/catalog/msdos/html/ambulanc.htm. Retrieved 17 February 2013.
- ↑ "AMBULANCE.796A - Threat Encyclopedia". https://www.trendmicro.com/vinfo/us/threat-encyclopedia/archive/malware/AMBULANCE.796A.
- ↑ "Ambulance Car Virus". http://agn-www.informatik.uni-hamburg.de/catalog/msdos/html/ambulanc.htm.
- ↑ "Virus.DOS.Ambulance.796.a". Virus List. Archived from the original on 10 June 2015. https://web.archive.org/web/20150610214830/http://www.viruslist.com/sp/viruses/encyclopedia?virusid=372. Retrieved 18 February 2013.
External links
- Ambulance by F-Secure.
- https://web.archive.org/web/20081007234124/http://www.codebreakers-journal.com/content/view/193/104/
- Ambulance Car Virus by Online VSUM.
- AMBULANCE CAR VIRUS by Probert Encyclopaedia.
- Ambulance virus removal - Antivirus by Turbo Cash.
- Virus.DOS.Ambulance.793.a by Secure List.
 |
