1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Labs
  2. Threats
  3. Virus and threat descriptions
  4. Blue_Nine

Blue_Nine

NAME:Blue_Nine
TYPE:Resident COM-files Stealth
SIZE:925

Summary

This is a fast infector, which infects COM files when they are executed or accessed. Blue_Nine is a stealth virus, making the size of the infected files seem to be the original. Blue_Nine has lots of antiheuristics features, but it also contains several bugs.

There are several variants of Blue_Nine. The original variant (Blue_Nine.925.A) contains this text: 

        Blue Nine Virus by Conzouler 1994

VARIANT:Blue_Nine.925.C

This variant contains this text: 

        It's only a lil lightfearing creature

This variant does nothing but spreads.

[Analysis: Peter Szor, F-Secure, 1996]