DumDum Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM
Amiga Antivirus Website
www.vht-dk.dk




     ------------------------
     Amiga Virus Encyclopedia
     Dumdum Virus
     ------------------------


     Name         : DumDum

     Aliases      : No Aliases

     Type         : Bootblock
     
     Size         : 2014 bytes

     Clones       : No Clones 

     Symptoms     : No Symptoms
     
     Discovered   : 18-04-92

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Overwrites boot + Root Block!

     Visible text : DUMDUMBYGOD
     
                    You are the owner of a DUMDUM virus please unprotect disk 
                    to kill!

     Information  : Uses blocks 0-5 and works with Kickstart 3.0 and 2.04. The
                    virusmaincode is located in block 2 and 3. The first  both
                    blocks  only  contain  a simple loaderroutine (trackdisk).

                    All data in the blocks 2-5  will  be  destoyed  (sorry  no
                    rescue possible). If a file was in this blocks, it  cannot
                    be used anymore.

                    If a counter reached $50, a destroyroutine will be started
                    and e.g. the rootblock will be changed.

                    In the 4.virusblock you can read 2 time "dos.library"  and
                    "DUMDUM".

                    The  virus   will  be  installed  $1800  bytes  under  the
                    maxlocmem area !
                    
     Antivirus    : Kickstart 1.2 & 1.3..... : VT-Schutz
                    Kickstart 2.0 and higher : VirusZ III, with the new Xvs.library installed
                    

     Test made by : Markus Schmall & Safe Hex International


     Screenshot of DumDum Virus:
     


     Ascii of DumDum virus:
     
     

     


Virus Help Team
Denmark & Canada
Copyright © All Rights Reserved