Max Suicide Machine Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM




     -------------------------
     Amiga Virus Encyclopedia
     Max Suicide Machine Virus
     -------------------------

             
     Name         : Max Suicide Machine

     Aliases      : Suicide Machine

     Clone        : -

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : -

     Discovered   : ?

     Way to infect: Boot infection 

     Rating       : Less Dangerous

     Kickstarts   : 1.2
                    1.3
                    2.0 (Cachet = GURU)

     Damage       : Overwrites boot

     Manifestation: -

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher
     
     Visible text : Suicide Machine by MAX in 24.12.1992     

     Comments     : The virus uses the KICK-Vectors to stay resident.
                    It copies  itself  always to the same mem-adress:
                    $7E100.  The Kick-Identification-String is always
                    ">>> Suicide Machine by MAX ... etc"
                    It uses  the DoIO()-Vector  from  the EXEC-Lib to
                    infect other  disks.  Additionaly  it patches the
                    Supervisor()-Vector to: 

                    a) Set the DoIO() always to the virus value

                    b) Clear the Cool & Cold Capture

                    c) Make sure  to stay resident  while it sets the
                       KICK-Vectors to the virus value
                    
                    The virus  codes itself  by every  infection with
                    the VHPOSR-Register ($DFF006).

     Test made by : Safe Hex International
     
     
     Ascii of Suicide Machine Bootblock virus (Decoded):
     

    


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk