Name         : Blow Job

     Aliases      : Memory Allocator 3.01

     Type/Size    : Boot/1024

     Clone        : No Clones

     Symptoms     : No Symptoms

     Discovered   : 08-04-91

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : This  virus uses the kick-vectors to stay resident. At
                    the top of the virus you can read:

                    [0.5] [1] [1.8] Memory Allocator 3.01


                    The  DoIO()-Vector  will  be  patched  to infect other
                    disks.  Further  the  virus  installs  a  patch in the
                    vertical-blank-interrupt,  to  show after 10 Minutes a
                    (alert)message:

                    ONCE AGAIN SOMETHING WONDERFUL HAPPENED (HE HE HE)..
                    PLEASE POWER OFF - PLEASE POWER OFF - PLEASE POWER OFF

                    This  alert  text  is  coded and cannot be read in the
                    bootblock.

                    NOTE: The Blow Job virus is very similar to the SADDAM
                          HUSSEIN Bootblock virus (ca. 90%). Maybe the
                          same "programmer" ?!?



      SHI - A.D 02-94

[Go back]