Aids file virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM



     ------------------------
     Amiga Virus Encyclopedia
     Aids file virus
     ------------------------
    
     
     Name         : AIDS

     Aliases      : No Aliases

     Original     : See Jeff v4.55 read test of this virus

     Type         : File Virus
     
     Size         : 3408 bytes

     Symptoms     : Shows an alert

     Discovered   : ?

     Way to infect: File infection

     Rating       : Less Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0 BUT: only DD-Disks !!!

     Damage       : No Damage

     Manifestation: -

     Removal      : Delete file

     Comments     : If you are starting the AIDS virus it
                    first decodes itself with a eor-loop. After
                    that it tries to allocate 3500 bytes memory,
                    makes itself resident by changing the kick-vectors
                    installs a patch in $6c.s (Zero-Page!) and
                    finally patches the DoIO()-Vector from EXEC.LIB.
                    The DoIO()-Vector is used to infect other disks.
                    If you are inserting an unprotected disk, the
                    virus scans the root-block of it. But the virus just
                    scans for block 880 that means that it`s very unlikely
                    that the virus infects HD Disks. (-> IMPOSSIBLE !!)
                    No DOS-functions are used while the infection.
                    The virus creates the virusfile with different names 
                    like:

                        "D.Hasselhoff"
                        "Jesus"  
                        "Archippus"
                        "Philemon" 
                        "-->PAX<--"
                        "---->"
                        "NKOTB"
                        "Ephesus"
                        "Guardians"

                    Sometimes the widow-title changes and following
                    messages will appear:

                    Tina zeig mir deine Votz
                    Hey du Depp am Computer ! was is ?
                    Hilfe die NFL-Kappen Kommen !
                    Redskins - Fickt euch alle !!!
                    Evil C !
                    Der Vorkotzer er will nicht kotzen !! Rechtfertige er sich
                    Easy and fast-- Schnebber-Pax !!
                    Burger du Drecksack !!
                    Popper überfährt man mit einem Chopper !!
                    Rod Grod Med Flod !!
                    Fuck for oil And for NLF-Deppen !!
                    Ihr Assigen NFL-Ficker ihr seid alle schwul und dumm !!

                    Depending of $DFF006 , the virus gives out an alert:

                            Es tut mir leid es ihnen zu sagen !
                          *Ihr computer hat AiDS ein neuer Virus*
                                Gemacht von Donald & Micky.
                           dHV IM Jahre 1992 - Generation Nr.05426
                     gehen an : Metalwarrior - Mozart - Tiger 1 - Poge
                    Außerdem noch an : Meinen Virus-Freund David Hasselhoff !

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed

     Test made by : Safe Hex International                  


     
     

Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk