Gremlin Virus - Amiga Virus Encyclopedia


Amiga Virus Encyclopedia

     Amiga Virus Encyclopedia
     Gremlin Virus

     Name         : Gremlin

     Aliases      : No alias

     Type         : Bootblock
     Size         : 1024 bytes

     Discovered   : 16 oktober 1990

     Way to infect: See below

     Rating       : Not very dangerous

     Kickstarts   : 1.2

     Damage       : Overwrites bootblock

     Manifestation: DisplayAlert

     Visible text : You can't read any texts in the bootblock      

     Comments     : If  you are booting with a GREMLIN-Virus infected disk
                    disk  the  virus  copies  itself  to $7F400. To infect
                    other  disks  the  virus  patches  the  DoIO()-Vector.
                    Additionally the virus changes the CoolCapture to stay
                    resdient  in  memory.  Finally  the  virus patches the
                    SumKickData-Vector from the exec.lib.

                    If a value reaches 20480 the virus executes an endless
                    routine  &  shows some colors.  After the reboot
                    the virus gives out a GFX-Message. (Red Screen + White
                    Letters)  and  you  will  get  the  following  graphic
                    message on your screen:  
                    GREMLIN (at a red background)

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed

     Test made by : Safe Hex International
     Screenshot of Gremlin Virus:
     Ascii of Gremlin virus:

Virum Help Team
Denmark & Canada
Copyright © All rights reserved