- Rastenbork-Virus  BB

         Type A:          (Rastenborg)
         Version: 1.2
         Changed vectors: Cool, DoIo
         Reset resistant.
         Does NOT need trackdisk.device.
         The BB says (to fool you):
             69627261 72790042 6f6f7420 56697275 ibrary.Boot Viru
             73205072 6f746563 746f7220 76352e34 s Protector v5.4
             00566563 746f7273 2077726f 6e672100 .Vectors wrong!.
             426f6f74 20636f6e 7461696e 73205343 Boot contains SC
             4120286f 72207369 6d696c61 72292076 A (or similar) v
             69727573 20210043 6f6c6400 436f6f6c irus !.Cold.Cool
             00446f49 4f206368 616e6765 64210041 .DoIO changed!.A
             204e5053 2070726f 64756374 696f6e2e  NPS production.
         Damages:
         a) Increases itself through the BB.
         b) As soon as a counter register has reached the value $B
            a block gets filled with trash. There is NO rescue for
            that block. Try to rescue anything with DiskSalv2.
            When the virus has damaged the block it decodes a part
            of the BB with EOR.L D1,D0 and it writes with
            DisplayAlert:
           Meet your new friend,The Rastenborg Virus v1.2 
             Congratulations! Disk in drive is unprotected.
          It probably has no more root block,but who cares...
        ALL thanksgiving services please send to PePe/?"???????
                                           Poland,Ketrzyn,1994.04.08
                                                   .
         Note: The programmer wrote Rastenbork, with "g".



  -------------------------------------------------------------
   Translated to English by Thomas Steffens  2001 VHT-Denmark
   Org. Test by Heiner Schneegold.
  -------------------------------------------------------------

[Go back]