Rastenbork v1.2 Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM




     ------------------------
     Amiga Virus Encyclopedia
     Rastenbork v1.2 Virus
     ------------------------


     Name         : Rastenbork v1.2

     Aliases      : No Aliases

     Clone        : -

     Type         : Bootblock
     
     Size         : 1024 bytes

     Discovered   : 26 february 1995

     Way to infect: Boot infection

     Rating       : Dangerous 

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : a) Increases itself through the BB.
                    b) As soon as a counter register has  reached the
                    value $B a block gets filled with trash. There is
                    NO rescue for that block.  Try to rescue anything
                    with DiskSalv 2.  When the virus  has damaged the
                    block it  decodes a part of the BB with EOR.L D1,
                    
                    D0 and it writes with DisplayAlert:
                    Meet your new friend,The Rastenborg Virus v1.2 
                    Congratulations! Disk in drive is unprotected.
                    It probably has no more root block,but who cares.
                    ALL thanksgiving services please send to PePe/?"?
                                            Poland,Ketrzyn,1994.04.08

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher
     
     Visible text : Boot Virus Protector v5.4.Vectors wrong!.
                    Boot contains SCA (or similar) virus !
                    Cold.Cool.DoIO changed!.A NPS production. 

     Comments     : Changed vectors: Cool, DoIo
                    Reset resistant.
                    Does NOT need trackdisk.device.

     Test made by : Jan Andersen, Virus Help Team
    
 
     Ascii of Rastenbork v1.2 virus:
     
     
     


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk