-------------------------
Amiga Virus Encyclopedia
Byte Voyager I Virus
-------------------------
Name : Byte Voyager I
Aliases : No Aliases
Type : Bootblock
Size : 1024 bytes
Clones : No Clones
Symptoms : No Symptoms
Discovered : 8 april 1991
Way to infect: Boot infection
Rating : Less Dangerous.
Kickstarts : 1.2
1.3
2.0 (Just DD-Disks)
Damage : Overwrites boot
Comments : If you are booting with a ByteVoyager-Infected disk
the virus copies itself to address $7F000 and changes
the KICK-Vectors to stay resident in memory. For
infection the virus uses the DoIO()-Vector ehich will
be patched after the next reset.
The ByteVoyagerVirus test for block 880 (Root of DD
Disks) so it`s very unlikely that the virus infects
a HD-Disk (BUT NOT UNTHINKABLE). The disk which will
be infected get an new name:
"Infected by BYTE VOYAGER !!!!!!"
After the 1st infection the virus installs a new
patch in the ZERO-PAGE ($6C.w). This patch checks for
an special value in memory. If this value reaches
45000 your AMIGA will break down.
The whole virusbootblock is crypted by using the
$dff006 register so you can`t read anything in the BB
Removal : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III with Xvs.library installed
Test made by : Safe Hex International
Ascii of Byte Voyager 1 virus (Decoded):