ADO! Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM



   ------------------------
   Amiga Virus Encyclopedia
   ADO! Virus
   ------------------------
   
   
   - ADO!-1-assign   Destruction
         Length: 3320 Bytes  (same as original)
         KS1.3 yes
         68040 yes
         No bowed vector
         This file will be product by HF-AB3D-Trojan.
         But I can't reproduce this at different systems.
         In case of any  function on one other system, i've cut this file.
         In this case the file destruct really!!
         File contents:
            0000aff5 20790000 01dc20fc 41444f21 .... y.... .ADO!
            51cffff8 4e756772 61706869 63732e6c Q...Nugraphics.l
            69627261 72790000 00000000 00000000 ibrary..........
            73637369 2e646576 69636500 00000000 scsi.device.....
         Destructionresult:
            lZyl 0 Bl 0
            00: 41444f21 41444f21 41444f21 41444f21 ADO!ADO!ADO!ADO!
            10: 41444f21 41444f21 41444f21 41444f21 ADO!ADO!ADO!ADO!
            20: 41444f21 41444f21 41444f21 41444f21 ADO!ADO!ADO!ADO!
                ......
         Every block of scsi.device, include RDB-Area, will be filled with ADO!
         No damaged occurs on other devices like omni-scsi.device.
         VT present a file delete function.Write the original assign back to c:.


   - ADO!-1-Trojan    Destruction
         Filename: HF-AB3D_Patch
         After File-ID :  Monitor Patch For Alien Breed 3D II
         Filename: EVIL-COMMENT
         After File-ID : EVIL COMMENT FOR DAYDREAM - PURE E CODE!
                        AN EVIL STATUS DOOR BY MATHEWS
         Length crunched:   30560 Bytes
         Length decrunched: 44096 Bytes
         KS1.3 yes
         68040 yes
         No bowed vector
         This file contents a lot of none executable trash.
         Another Part write a file to c:assign.
         But this was wrote on every testet system incorrect.
         The assign file became every time the lengt of free diskspace
         (every kind of drive: Disk or Syquest)
         With SID2 i could read a filelength 0 our others dependent from
         KS and/or CPU. This file could deleted every time. On syquest
         no other damage occurs during writing.
         VT present delete file.

     Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
              Kickstart all others: VirusZ III with Xvs.library installed

   --------------------------------------------------------------
    Translated to English by Alexander Jensen © 2001 VHT-Denmark
    Org. Test by Heiner Schneegold.
   --------------------------------------------------------------


   
   

Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk