Threat Description

MacGyver

Details

Aliases: MacGyver, Shoo, Mad Satan, Satan, Mcgy
Category: Malware
Type: Virus
Platform: W32

Summary


MacGyver is a family of resident viruses with the following properties:

  • MacGyver.2803 : Infects EXE files
  • MacGyver.2824 : Infects EXE files
  • MacGyver.3160 : Infects COM and EXE files
  • MacGyver.4112 : Infects COM and EXE files and boot sectors
  • MacGyver.4480 : Infects COM and EXE files, stealth
  • MacGyver.4643 : Infects COM and EXE files
  • MacGyver.4645 : Infects COM and EXE files, stealth


Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.



Technical Details


These variants will not infect the following files:

  • MacGyver.2803 : SCAN ZTEST EXEGOD
  • MacGyver.2824 : SCAN ZTEST EXEGOD
  • Macgyver.3160 : SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCK
  • Macgyver.4112 : SCAN CLEAN PCCILLIN ZTEST ZLOCK VI COMMAND ZLOCKE ZLOCK
  • Macgyver.4480 : COMMAND IBMBIO IBMDOS
  • Macgyver.4645 : COMMAND

Variants contain the following texts:

MacGyver.2803   : MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN MacGyver.2824.A : MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN Macgyver.2824.B : * Satan  Virus * MAD !! Another  Masterpiece of Sax  (c) Copyright 1993 Written by Mad Satan... Ver 2.02 MACGYVER V1.0 Written by JOEY in Keelung. TAIWAN MacGyver v4.0 written by Dark Slayer in Keelung, Taiwan.  93/09/09 Macgyver.4480   : MacGyver v4.0 written by Dark Slayer  Taiwan. 93/09/09  

2803, 2824 and 4480 byte variants activate by playing a song. 3160 byte variant displays this message:

* MacGyver  V2.2 * Hi!  I am MacGyver Written by [Y.J.D] in Keelung. TAIWAN Don't Worry,I just a Virus. Ha..Ha...  

and 4645 byte variant displays this message:

* MacGyver  V3.0 * Hi!  I am MacGyver   Written by      Dark Slayer in Keelung. TAIWAN Don't Worry,I just a Virus. Ha..Ha...  





SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More