Big Ben Virus - Amiga Virus Encyclopedia


    Amiga Virus Encyclopedia
    Big Ben Virus

    Big Ben Virus:
    The virus was sent me as Big Ben virus, I cannot follow the name of
    this virus, it appears only a clocktime sometimes on the screen.

    Kickstart 2.x and higher is required to run this virus.

    Patched vectors: Exec() CoolDoIO, Exec() Findname, Exec() Replymsg,
                     Exec() Waitport, Exec() DoIO

    The virus tries to read the time from a hardware chip, which is not
    located at this adress on newer machines. The virus allocates it`s
    memory correct and tests, if the catched DoIO call comes from the
    "trackdisk.device" or not. So only diskdrives will be infected and
    NOT harddrives.

    The way of patching the vectors is new on AMIGA. The way of patching
    will be used on Intel Windows machines in conjunction with background
    programms (Thanks Ingo for this hint). This routine is buggy, but

                           Detection and memory repair tested 01.12.1994.

    Test by Markus Schmall

    Screenshot of Big Ben virus:


Virum Help Team
Denmark & Canada
Copyright © All rights reserved