------------------------
     Amiga Virus Encyclopedia
     BootX Virus 
     ------------------------


     Name         : BootX

     Aliases      : Perverse 1

     Type         : Bootblock
     
     Size         : 1024 bytes

     Clones       : No Clones 

     Symptoms     : No Symptoms

     Discovered   : 5 january 1992

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites boot.

     Manifestation: Pretends to be a BootX-Boot by P. Stuer

     Comments     : PUH! The  BootX-Virus is a  very complex one. I can`t
                    say much  about it. The only  thing I can say is that
                    the virus  allocates 2048 byte CHIP-Memory and copies
                    itself  into that area. To  stay  resident  the virus
                    patches the KICK-Vectors. BUT now it comes, the virus
                    doesn`t use the DoIO()-Vector or the BeginIO()-Vector
                    to infect other  disks. The fact is that I can`t tell
                    you exactly how  the virus  infect  other  disks. The
                    virus installs  a new  port and then opens the input-
                    device.

                    In the middle of the virus you can read:

                    "BootX-Viruskiller by P.Stuer"

                    This  string  is  also  the  KickIdentifikation, this
                    should  confuse  the  users. If  you`re  inserting  a 
                    write-protected   disk   a   System-Request  appeares
                    telling you  that  the  disk  has a READ/WRITE Error.
                    in  the  BootX-Virus there is a  message in RAW-CODE:

                    "SOFTWARE_PIRATES RUINED MY EXCELLENT"
                    "PROFESSIONAL DTP_PROGRAM I REVENGE"
                    "MYSELF ON THESE IDIOTS BY PROGRAMMING 
                    "VIRUSES THIS IS PERVERSE I  BECAUSE I"
                    "LIKE ASSHOLE_FUCKING I PROGRAM VIRUSES "
                    "FOR MS_DOS TOO"

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed
                    
     Test made by : Safe Hex International                


     Animated picture of the BootX (Perverse I) Virus:
     


     Ascii of BootX (Perverse I) virus: