Disk-Herpes Bootblock Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM




     ---------------------------
     Amiga Virus Encyclopedia    
     Disk-Herpes Bootblock Virus
     ---------------------------

  
     Name         : Disk-Herpes

     Aliases      : Phantastograph & Phantasmumble

     Clones       : Creepimg Eel & Executors

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms.

     Discovered   : 21 february 1990

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites Boot and Sometimes RootBlock

     Visible text :   --- Hello Computerfreak ---
                    You've got now your first VIRUS
                    *** D i s k - H e r p e s ***
                      Many Disks are infected !!
                    Written by >tshteopghraanptha<
                        22.07.1987 in Berlin    

     Comments     : If  you  are  starting a DISK-HERPES infected disk the
                    virus  copies itself always to the same memory address
                    => $7EC00. 

                    To  infect  other  disks the virus patches the DoIO()-
                    Vector  from  the exec.library. Additionally the virus
                    changes the CoolCapture Vector to stay resident in the
                    memory.

                    After  14  infections  the  virus shows a GFX-message:
                      --- Hello Computerfreak ---
                    You've got now your first VIRUS
                    *** D i s k - H e r p e s ***
                      Many Disks are infected !!
                    Written by >tshteopghraanptha<
                        22.07.1987 in Berlin                    
                     (Background = German Flag)

                    Depending  of  a  special  value the virus damages the
                    Root Block of the disk.

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
     
     Test made by : Safe Hex International 


     Screenshot of Disk-Herpes Virus:
     


     Ascii of Disk-Herpes virus:
     

     


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk