--------------------------
     Amiga Virus Encyclopedia
     Hoden v33.17 Virus
     --------------------------
  
         
     Name         : Hoden v33.17

     Aliases      : No Aliases

     Clones       : Cohen 

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : A Sprite will be moved over the screen.

     Discovered   : 17 august 1990

     Way to infect: Boot infection

     Rating       : Less Dangerous

     Kickstarts   : 1.2

     Damage       : Overwrites boot

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher

     Comments     : If you are booting with a HODEN-Virus infected disk
                    the virus copies itself to address $7F000. Then the
                    virus jumpes into this address and initials this
                    Routines:

                     1) The virus changes the KICK-Vectors to stay
                        resident in memory.

                     2) The virus patches the DoIO()-Vector from the
                        exec.library for infection.

                    After 5 infections the virus executes a GFX-Routine
                    which moves a yellow Smiley-Head over the screen.
                    In the end of the bootblock you can read:
                    "HODEN V33.17"

     Test made by : Safe Hex International
     
     
     Animated picture of the Hoden Virus:
     

     
     Ascii of Hoden virus: