------------------------
     Amiga Virus Encyclopedia
     Rastenbork v2.0 Virus
     ------------------------


     Name         : Rastenbork v2.0

     Aliases      : No Aliases

     Clone        : -

     Type         : Bootblock
     
     Size         : 1024 bytes

     Discovered   : 26 february 1995

     Way to infect: Boot infection

     Rating       : Dangerous 

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : a) Increases through BB.
                    b) As soon as a counter register has reached the value $B
                    it tries to change an area starting with $6E000 and with
                    a length of $6400 with "add.b #7". $6E000 is only a root
                    cylinder on a DD disk.
                    So it is possible to "back code" this area.
                    After this a BB part is decoded with EOR.L D1,D0 and shown
                    
                    with DisplayAlert:
                    rAStENboRk cAShEr vIRUs v2.0
                    ...another Christmas`94 present!
                    Your disk isn't damaged,but it has just been coded.
                    Try to find coding routine.
                    If got any problems,contact Santa Claus
                    or just PePe/tRSi
                    Bonus disks are welcome!

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher
     
     Visible text : Panzer total anti virus system.Virus destroyed!.

     Comments     : Changed vectors: Cool, DoIo
                    Reset resistant.
                    Does NOT need trackdisk.device.

     Test made by : Jan Andersen, Virus Help Team
    

     Ascii of Rastenbork v2.0 virus: