------------------------------    
     Amiga Virus Encyclopedia    
     Bad Bytes Inc. 4 (Coder Clone) 
     ------------------------------
 

     Name         : Bad Bytes 4

     Aliases      : Coders Nightmare

     Original     : Coder - Read test of the original virus

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : -

     Way to infect: Boot infection

     Rating       : Less Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : The  new  installed  patch  in $68 (Zero-Page!) always
                    registrates  if you are pressing a key or mousebutton.
                    If the registrator-value reaches 2560 you get a RESET.

                    The CODER-virus is a very simple one. To stay resident
                    in  memory  the  virus  uses  the  KICK  vectors.  For
                    Infection  the  virus  uses the DoIO() vector from the
                    exec.library.   Additionally  it patches the Zero-Page
                    ($68).  This  interrupt  will be used if you press any
                    key (or button).
                    
     Manifestation: Pretends to be a viruskiller-boot

     Visible text : Your computer is stoned! Legalize Mariuhana!  Parasite
                    of BBI!
     
     Comments     : The  virus  copies  itself  always  to the same memory
                    address ($7F600).  There is a crypted text in the boot
                    block,  which the virus decrypts to $7FA00.
                    
     Info         : Again. Only the text has been changed.                

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed

     Test made by : Jan Andersen, Virus Help Team        


     Ascii of Bad Bytes 4 virus