%%File: VIRS0400.TXT
%%Name/Aliases: GhostBalls, Ghost Boot, Ghost COM, Vienna, DOS-62
%%Platform: PC/MS-DOS
%%Type: Program., 
%%Disk Location: COM application.
%%Features: Direct acting.
%%Damage: Corrupts boot sector, Interferes with a running application., 
Corrupts a program or overlay files.
%%Size: 2351
%%See Also: 
%%Notes: Variant of Vienna that puts a patched copy of the Ping Pong 
virus in the boot of drive A. 
It may infect floppy and hard disk boot sectors, sources differ on this.
It contains the following text strings:                           
                                                                         
                   GhostBalls, Product of Iceland                        
                   Copyright (c) 1989, 4418 and 5F19    Bouncing ball on 
screen.   COM files: "seconds" field of the timestamp changed to 62, as 
in the original Vienna virus. Infected files end in a block of 512 zero 
bytes. The string  "GhostBalls, Product of Iceland" in the virus.