------------------------    
     Amiga Virus Encyclopedia    
     Sonja Virus
     ------------------------


     Name         : Sonja

     Aliases      : -

     Clone        : -

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : Formats disk

     Discovered   : ?

     Way to infect: Boot infection 

     Rating       : Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites boot and formats disk

     Manifestation: -

     Visible text : It`s Sonja VIRUS!!! (c) by MC    

     Comments     : The is resident by using the KICK-Vectors. It uses the
                    BeginIo()-Vector  from the  trackdisk.device to infect
                    other  disks. When  the  virus is  active  it shows an
                    original 1.3 Boot.  The virus  formats  your disk. The
                    KICK-Identifiaction-String is: "It`s Sonja VIRUS!!!".
                    The virus codes itself on every infection by using the
                    $DFF007 register. Very similar to the LAMER-Viruses

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III, and also Xvs.library must be installed
                    
     Test made by : Safe Hex International                


     Ascii of Sonja Bootblock virus (Decoded):