------------------------
     Amiga Virus Encyclopedia
     Paradox 2 Virus
     ------------------------


     Name         : Paradox 2

     Aliases      : -

     Clones       : -

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : 8 april 1991
     
     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites boot

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher
     
     Visible text : In the bootblock (decrypted) you can read:
                    This is the second VIRUS by PARADOX
                    For swapping call: 42-455416
                    ask for Henrik Hansen

     Comments     : The Paradox 2  virus i s a very  harmless  one. If you
                    are booting  with an  infected disk  the virus  copies
                    itself to  address $7F000 and changes the KICK-Vectors
                    to stay resident  in memory. After the next  reset the
                    virus patches the DoIO()-Vector  to infect other disks
                    After the 1st infection the virus additionally patches
                    the ZERO-Page ($6C). This patch increases a value by 2
                    If this  value  reaches  120000  the virus executes an
                    endless-routine by  showing a  white screen. The whole
                    bootlock is crypted with the $DFF006-Register.

     Test made by : Safe Hex International
     
     
     Ascii of Paradox 2 virus (Decoded):