VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
------------------------
Amiga Virus Encyclopedia
Dumdum Virus
------------------------
Name : DumDum
Aliases : No Aliases
Type : Bootblock
Size : 2014 bytes
Clones : No Clones
Symptoms : No Symptoms
Discovered : 18-04-92
Way to infect: Boot infection
Rating : Dangerous
Kickstarts : 1.2/1.3/2.0
Damage : Overwrites boot + Root Block!
Visible text : DUMDUMBYGOD
You are the owner of a DUMDUM virus please unprotect disk
to kill!
Information : Uses blocks 0-5 and works with Kickstart 3.0 and 2.04. The
virusmaincode is located in block 2 and 3. The first both
blocks only contain a simple loaderroutine (trackdisk).
All data in the blocks 2-5 will be destoyed (sorry no
rescue possible). If a file was in this blocks, it cannot
be used anymore.
If a counter reached $50, a destroyroutine will be started
and e.g. the rootblock will be changed.
In the 4.virusblock you can read 2 time "dos.library" and
"DUMDUM".
The virus will be installed $1800 bytes under the
maxlocmem area !
Antivirus : Kickstart 1.2 & 1.3..... : VT-Schutz
Kickstart 2.0 and higher : VirusZ III, with the new Xvs.library installed
Test made by : Markus Schmall & Safe Hex International
Screenshot of DumDum Virus:
Ascii of DumDum virus: