VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
------------------------
Amiga Virus Encyclopedia
Megamaster (MGM89) Virus
------------------------
Name : Megamaster (MGM89)
Aliases : MGM 89
Clones : No Clones
Type : Bootblock
Size : 1024 bytes
Symptoms : No Symptoms
Discovered : 10 october 1990
Way to infect: Boot infection
Rating : Harmless
Kickstarts : 1.2
1.3
2.0
Damage : Overwrites boot.
Comments : The Megamaster-virus is a very simple and stupid
one. If you are booting with an infected disk the
virus only copies itself to address $7F300. After
copying the virus sets the coolcapture-vector to
the virusvalue to stay resdient in memory. In the
virusbootblock you can read: "MGM89" (see alias)
There are two crypted areas: a GFX-Message-Routine
and the infection routine. To infect other disks
the virus uses the DoIO()-Vector. Sometimes, during
a reset, the virus decryptes the GFX-Area and show
this message:
Surpise!!!
Your Amiga is controlled by
MEGAMASTER
Antivirus : Kickstart 1.2 & 1.3..... : VT-Schutz
Kickstart 2.0 and higher : VirusZ III, with the new Xvs.library installed
Test made by : Safe Hex International
Ascii of Megamaster (MGM89) virus (Decoded):