Name         : AMIGA FANATIC

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : No Clones

     Symptoms     : No Symptoms

     Discovered   : 17-07-94

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3/2.0 | 3.0 = ???

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : If  you  are   booting  with  an  AMIGA-FANATIC  virus
                    infected  disk  the  virus copies itself to the $7F300
                    chip-mem address.


                    Then  the virus changes the CoolCapture-Vector to stay
                    resident. During the next reset it patches the DoIO()-
                    Vector  to  infect  (only!)  the  disk you are booting
                    with.  Depending  of infections the virus destorys the
                    rootblock of the DD-disk. 


                    If  you  have  such a destoryed disk try Disksalv 2 to
                    recover some files. (Good luck!)


                    If  you  are  booting  with  a SCA, DASA or ByteBandit
                    infected  disk the AMIGA-FANATIC virus will clear this
                    this bootblock.  In the end of the virus you can read:


                    "AMIGA  FANATIC  V1.1   20/05/88"


                    NO Textoutput !!

     BY THE WAY:    If  you pressing the Joystickbutton during a reset the
     ^^^^^^^^^^     AMIGA  FANATIC virus will deinstall itself by clearing
                    the CoolCapture-Vector and showing some colors.
   
  SHI - A.D 04-94

[Go back]