%%File: VIRS0567.TXT %%Name/Aliases: Mutation Engine, Dark Avenger's Latest, Pogue, MtE, Sara, Sarah, Dedicated, Fear, Cryptlab, Groove, Questo, CoffeeShop, DAME (Dark Avenger Mutation Engine) %%Platform: PC/MS-DOS %%Type: Program., Virus Authoring Package, %%Disk Location: COM application. %%Features: Encrypted, Direct acting., Polymorphic %%Damage: Corrupts a program or overlay files. %%Size: could be any size, Polymorphic: each infection different %%See Also: %%Notes: The MtE is a mutatuon engine that makes an existing virus difficult to detect by changing a virus with each infection. The first is the demo virus in the package (a silly, non-resident, COM file infector, infects only the files in the current directory) and a virus, called Pogue, wihch has been available on some VX BBSes in the USA. See notes below about the mutating engine. 11/2/92 virus-l, v5-186: announcement of MtE test reports, can be found via anonymous ftp from ftp.informatik.uni-hamburg.de:pub/virus/texts/tests/mtetests.zip and cert.org:pub/virus-l/docs/mtetests.zip none yet, but anti-virus researchers have it and are working hard -2/14/92 v6-126: CoffeeShop has same author as Cruncher virus. v6-151: At least one anti-virus program can detect and remove Coffeeshop.1568.