Name         : Disk-Validator Rootformator

     Aliases      : No Aliases

     Type/Size    : Disk-Validator/1848

     Clones       : No Clones

     Symptoms     : No Symptoms

     Discovered   : 17-04-94

     Way to infect: No infection

     Rating       : Very Dangerous

     Kickstarts   : 1.2/1.3

     Damage       : Formats DD-Disk Rootblock.

     Removal      : Delete Disk-Validator.

     Comments     : This virus is a very strange one. I always got a
                    GURU as I started it. The only thing this virus
                    does is:

                       1) to allocate $1600 bytes of CHIP-Mem.
                       2) then it loads the Rootblock + $1400 bytes
                          in this allocated adress.
                       3) after that it checks for a value in the
                          loaded rootblock.
                       4) If this operation was true the virus
                          FORMATS the Rootblock+$1400 bytes.
                          (Then you get a reset!)
                       5) If this operation wasn`t true -> END.

                    There is no text in the virus, so named the virus
                    DISK-VALIDATOR ROOTFORMATOR, because of the above
                    mentioned reasons.

                    


     SHI - A.D 04-94

[Go back]