------------------------
Amiga Virus Encyclopedia
Perverse (BootX) Virus
------------------------
Name : Perverse (BootX)
Aliases : Perverse 1 & BootX
Type : Bootblock
Size : 1024 bytes
Clones : No Clones
Symptoms : No Symptoms
Discovered : 5 january 1992
Way to infect: Boot infection
Rating : Dangerous
Kickstarts : 1.2
1.3
2.0
Damage : Overwrites boot.
Manifestation: Pretends to be a BootX-Boot by P. Stuer
Comments : PUH! The BootX-Virus is a very complex one. I can`t
say much about it. The only thing I can say is that
the virus allocates 2048 byte CHIP-Memory and copies
itself into that area. To stay resident the virus
patches the KICK-Vectors. BUT now it comes, the virus
doesn`t use the DoIO()-Vector or the BeginIO()-Vector
to infect other disks. The fact is that I can`t tell
you exactly how the virus infect other disks. The
virus installs a new port and then opens the input-
device.
In the middle of the virus you can read:
"BootX-Viruskiller by P.Stuer"
This string is also the KickIdentifikation, this
should confuse the users. If you`re inserting a
write-protected disk a System-Request appeares
telling you that the disk has a READ/WRITE Error.
in the BootX-Virus there is a message in RAW-CODE:
"SOFTWARE_PIRATES RUINED MY EXCELLENT"
"PROFESSIONAL DTP_PROGRAM I REVENGE"
"MYSELF ON THESE IDIOTS BY PROGRAMMING
"VIRUSES THIS IS PERVERSE I BECAUSE I"
"LIKE ASSHOLE_FUCKING I PROGRAM VIRUSES "
"FOR MS_DOS TOO"
Antivirus : Kickstart 1.2 & 1.3..... : VT-Schutz
Kickstart 2.0 and higher : VirusZ III, with the new Xvs.library installed
Test made by : Safe Hex International
Animated picture of the Perverse (BootX) Virus:
Ascii of Perverse (BootX) virus:
Ascii of Perverse (BootX) virus:
