Name         : NANO

     Aliases      : No Aliases

     Type/Size    : File/1484

     Clones       : LUPO 

     Symptoms     : No Symptoms

     Discovered   : ?

     Way to infect: File infection

     Rating       : Harmless

     Kickstarts   : 1.2/1.3/2.0

     Damage       : -

     Manifestation: -

     Removal      : Delete the virusfile in the root-dir.

     Comments     : The NANO-Virus copies itself at the address $7C000
                    and changes the coolcapture-vector to stay resident
                    memory. If you don`t have any memory in that area
                    ($7C000) the virus won`t install itself in memory.
                    To infect other disks the virus uses the OldOpenlib
                    vector from the exec.library. Furthermore the 
                    KickChkSum()-Vector will bepatched. This patch sets
                    the Coolcapture and the OldOpenLib()-Vector to the
                    virusvalue.
                    If a programm uses now the OldOpenLib-Vector the 
                    virus creates the virusfile with a invisible name
                    your root-dir (Name: $A0A0A0A0). The Startup-Sequence
                    will be modified by this name, so that the virus
                    is always executed while booting.
                    After 5 Resets the virus shows you the german
                    flag on the screen (BLACK, RED, GOLD!). After 
                    pressing the left mouse-button -> RESET.

                    After 5 Infections the virus gives out an alert:


                                     "... another masterpiece by NANO !!!"


        "GREETINGS TO:"
        "Byte Bandit, Byte Warrior, DEF JAM, DiskDoktors"
        "FANTASY, Foundation For The Extermination Of Lamers,"
        "I.R.Q. Team, Obelisk Softworks Crew, S.C.A., UNIT A..."

                    This text ISN`T crypted... you can read it in the
                    virusfile !!!

A.D 08-94