BB-Prot virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM



     ------------------------
     Amiga Virus Encyclopedia
     BB-Prot Virus
     ------------------------


     Name         : BB-Prot

     Aliases      : T.ET.E

     Type/Size    : Boot/1024

     Clones       : No Clones

     Symptoms     : No Sypmtoms

     Discovered   : 3 December 1992

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2
                    1.3

     Damage       : Overwrites Bootblock.

     Manifestation: Tries to hide itself behind the X-Copy-Boot.

     Comments     : If  you  are  booting with a BB-Prot infected disk the
                    typical X-Copy message appeares:

                    "NO VIRUS ON BOOTBLOCK"

                    This Message should confuse the users.

                    But  after this message the virus copies itself to the
                    $7FA00 and the virus makes itself resdient by changing
                    the  CoolCapture-Vector.  To  infect  other  disks the
                    virus  patches  the  DoIO()-Vector.  In the end of the
                    boot block you can read:

                    BB-Prot by T E in 12.06.1995

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed

     Test made by : Safe Hex International


     Ascii of BB-Prot virus
     


     


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk