VIRUS HELP TEAM


     ------------------------
     Amiga Virus Encyclopedia
     BootX Virus 
     ------------------------


     Name         : BootX

     Aliases      : Perverse 1

     Type/Size    : Boot/1024

     Clones       : No Clones 

     Symptoms     : No Symptoms

     Discovered   : 05-01-92

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Overwrites boot.

     Manifestation: Pretends to be a BootX-Boot by P. Stuer.

     Removal      : Install boot.

     Comments     : PUH! The  BootX-Virus is a  very complex one. I can`t
                    say much  about it. The only  thing I can say is that
                    the virus  allocates 2048 byte CHIP-Memory and copies
                    itself  into that area. To  stay  resident  the virus
                    patches the KICK-Vectors. BUT now it comes, the virus
                    doesn`t use the DoIO()-Vector or the BeginIO()-Vector
                    to infect other  disks. The fact is that I can`t tell
                    you exactly how  the virus  infect  other  disks. The
                    virus installs  a new  port and then opens the input-
                    device.

                    In the middle of the virus you can read:

                    "BootX-Viruskiller by P.Stuer"

                    This  string  is  also  the  KickIdentifikation, this
                    should  confuse  the  users. If  you`re  inserting  a 
                    write-protected   disk   a   System-Request  appeares
                    telling you  that  the  disk  has a READ/WRITE Error.
                    in  the  BootX-Virus there is a  message in RAW-CODE:

                    "SOFTWARE_PIRATES RUINED MY EXCELLENT"
                    "PROFESSIONAL DTP_PROGRAM I REVENGE"
                    "MYSELF ON THESE IDIOTS BY PROGRAMMING 
                    "VIRUSES THIS IS PERVERSE I  BECAUSE I"
                    "LIKE ASSHOLE_FUCKING I PROGRAM VIRUSES "
                    "FOR MS_DOS TOO"


     ===========================  End of BootX (Perverse I) Virus =================================


     Animated picture of the BootX (Perverse I) Virus:
     
     GIF converted from video from AmigaVirus on Youtube 


     Ascii of BootX (Perverse I) virus:
     
     
     

Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk