Sepultura v2.26 Virus - Amiga Virus Encyclopedia

VIRUS HELP TEAM




    ------------------------    
    Amiga Virus Encyclopedia    
    Sepultura v2.26 Virus
    ------------------------

         
    Sepultura 2.26 Virus:

    Works with MC68040 (without caches) and Kickstart 3.0

    It patches:
               DosLoadseg()
               DosRename()
               DosDelete()
               DosLock()
               DosOpen()

    No resetvectors will be changed !

    The virus writes a not visible file to drive df0. It makes  the
    Startup-Sequence 5 bytes longer and inserts its own filename at
    the top of the Startup-Sequence.

    At the bottom you can read (after decoding it):

    'Wer schaut mich an in dieser Eil sind '
    'wir etwa nötig geil? Bitte, bitte laß mich'
    'da, sonst sag ichs meinem Großpapa.'
    ' (w) Sepultura (V2.26)'

    The adress $7fff0.l will be accessed without  allocating it  !
    The virus will be crypted with a value out of $dff006 (VBI).

    Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
             Kickstart all others: VirusZ III, and also Xvs.library must be installed


    Test by Markus Schmall          Detection tested on 17.11.1993.
                                      Ramkill tested on 17.11.1993.


    


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk