Name         : HODEN V33.17

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : Cohen 

     Symptoms     : A Sprite will be moved over the screen.

     Discovered   : 17-08-90

     Way to infect: Boot infection

     Rating       : Less Dangerous

     Kickstarts   : 1.2

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : If you are booting with a HODEN-Virus infected disk
                    the virus copies itself to address $7F000. Then the
                    virus jumpes into this address and initials this
                    Routines:

                     1) The virus changes the KICK-Vectors to stay
                        resident in memory.

                     2) The virus patches the DoIO()-Vector from the
                        exec.library for infection.

                    After 5 infections the virus executes a GFX-Routine
                    which moves a yellow Smiley-Head over the screen.
                    In the end of the bootblock you can read:

                     "HODEN V33.17"


    SHI - A.D 05-94

[Go back]