Threat Description

MacGyver

Details

Aliases: MacGyver, Shoo, Mad Satan, Satan, Mcgy
Category: Malware
Type: Virus
Platform: W32

Summary



MacGyver is a family of resident viruses with the following properties:

  • MacGyver.2803 : Infects EXE files
  • MacGyver.2824 : Infects EXE files
  • MacGyver.3160 : Infects COM and EXE files
  • MacGyver.4112 : Infects COM and EXE files and boot sectors
  • MacGyver.4480 : Infects COM and EXE files, stealth
  • MacGyver.4643 : Infects COM and EXE files
  • MacGyver.4645 : Infects COM and EXE files, stealth


Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



These variants will not infect the following files:

  • MacGyver.2803 : SCAN ZTEST EXEGOD
  • MacGyver.2824 : SCAN ZTEST EXEGOD
  • Macgyver.3160 : SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCK
  • Macgyver.4112 : SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCK
  • Macgyver.4480 : COMMAND IBMBIO IBMDOS
  • Macgyver.4645 : COMMAND

Variants contain the following texts:

MacGyver.2803   : MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
MacGyver.2824.A : MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
Macgyver.2824.B : * Satan  Virus * MAD !! Another  Masterpiece of Sax

(c) Copyright 1993 Written by Mad Satan... Ver 2.02
MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN
MacGyver v4.0 written by Dark Slayer in Keelung,
Taiwan.  93/09/09
Macgyver.4480   : MacGyver v4.0 written by Dark Slayer  Taiwan. 93/09/09

2803, 2824 and 4480 byte variants activate by playing a song. 3160 byte variant displays this message:

* MacGyver  V2.2 *
Hi!  I am MacGyver
Written by <Y.J.D>
in Keelung. TAIWAN
Don't Worry,I just
a Virus. Ha..Ha...

and 4645 byte variant displays this message:

* MacGyver  V3.0 *
Hi!  I am MacGyver
  Written by
     Dark Slayer
in Keelung. TAIWAN
Don't Worry,I just
a Virus. Ha..Ha...






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More