Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


GhostBalls


Aliases:


GhostBalls

Malware
Virus
W32

Summary

This virus was written in Iceland and first discovered there in October 1989. It contains the following text strings:

     GhostBalls, Product of Iceland
       Copyright (c) 1989, 4418 and 5F19



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

Basically it is just the Vienna virus - the variant in the book by Ralf Burger to be specific, with an extra twist. When an infected program is run, the virus will search for other programs to infect, but also try to place a modified copy of the Ping-Pong virus on the diskette in drive A, provided it is a 360K diskette. This Ping-Pong variant has been changed, so that it is not infectious, but it will also work on a '286 machine.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.