************************************************ THE CryPtLAB Virus: CRYPT.COM ************************************************ Cryptlab is a fast-acting, direct action, file-infecting virus which utilizes time/date stamp retention and the Dark Avenger's Mutation Engine for stealthiness. Upon call, Cryptlab will infect multiple files before exiting. Everytime Cryptlab is excuted it will re-encrypt itself with a new key using the Mutation Engine device. Popular anti-viral scanners like Norton Antivirus and Central Point Antivirus cannot detect Cryptlab; however, Virex IS effective. In addition to corrupting files, Cryptlab can overxor a random sector of the disk every time it infects. Experienced virus programmers will notice that Cryptlab is a simple-minded modification of the Sara Gordon virus. This is indeed so. However, while Sara Gordon virus would only infect .COM files, Cryptlab will contaminate almost everything. The rationale behind this is that the Sara virus as simple, one directory .COM infector would run out files to infect rather quickly. This mitigates its nuisance potential. Since Crypt will append itself to many types of files, the subroutine which writes trash randomly to sectors on the infected disk will get significantly more opportunity to work. Contaminated files will execute properly (in the case of .COM's), but most others will probably behave strangely or crash themselves or their parent. Unencrypted copies of Cryptlab will have the following text embedded in them: CRYPTLAB: THE SELECT CHOICE FOR YOUR VIRUS & TROJAN RESEARCH NEEDS! -ERNST KOUCH. You are welcome to modify or use the Cryptlab virus for any experimental need you see fit. ************************************************************ CryPtLAB!