Divina Exterminator I - Amiga Virus Encyclopedia

VIRUS HELP TEAM




     ------------------------
     Amiga Virus Encyclopedia
     Divina Exterminator I
     ------------------------


     Name         : Divina Exterminator I

     Aliases      : No Aliases

     Clones       : No Clones

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : 21 may 1991

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.3 with Fastmem
                    2.0 GURU!

     Damage       : Overwrites Boot

     Visible text : VIRGO PRESENTS DIVINA EXTERMINATOR I. COPIES:    

     Comments     : The  Divina  Exterminator  virus  allocates 1024 bytes
                    fastmem, if no fastmem is available => GURU! The virus
                    changes the Cool-Vector to stay resident in memory.

                    To infect other disks the virus uses the DoIO()-Vector
                    from  the exec.library. Additionally the virus patches
                    the Vec5-Vector => $94(A6). This Patch sets always the
                    CoolCapture + DoIO to the virus value. 

                    The whole virus is crypted depending of $DFF006. After
                    3  infections  the  virus  installs a new patch in the
                    ZERO-PAGE ($68). This patch does the following:

                    1) Tests if you are pressing of a special key.

                    2) If  you  are pressing this special key 10 times the
                       virus causes a reset.

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
     
     Test made by : Safe Hex International
     

     Ascii of Divina virus (Decoded):
     

     


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk