Black Knight virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM



     ------------------------
     Amiga Virus Encyclopedia
     Black Knight Virus
     ------------------------

     
     Name         : Black Knight

     Aliases      : No Aliases

     Type         : Bootblock
     
     Size         : 1024 bytes

     Clones       : No Clones

     Symptoms     : No Sypmtoms.

     Discovered   : -

     Way to infect: Boot infection

     Rating       : Harmeless

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites Boot

     Comments     : The  BLACK  KNIGHT  virus is a very simple boot-virus.
                    When  you  are starting it, it copies itself always to
                    the  same memory address ($7F300). 

                    After copying the virus changes the CoolCapture-Vector
                    to stay resident in memory. Then the virus patches the
                    DoIO()-Vector to infect other disks.

                    There is a crypted message in the bootblock which says
                    decrypted:

                    BLACK KNIGHT (12/11/91)

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
                    
     Test made by : Safe Hex International

     Thanks to    : Ivan Sergeevich, for sending this virus to Virus Help Team
     

     Ascii of Black Knight virus:
     

     


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk