Name         : Divina Exterminator I

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : No Clones

     Symptoms     : No Symptoms.

     Discovered   : 21-05-91

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : Only 1.3 with Fastmem, (2.0 GURU!)

     Damage       : Overwrites Boot.

     Removal      : Install Boot.

     Comments     : The  Divina  Exterminator  virus  allocates 1024 bytes
                    fastmem, if no fastmem is available => GURU! The virus
                    changes the Cool-Vector to stay resident in memory.

                    To infect other disks the virus uses the DoIO()-Vector
                    from  the exec.library. Additionally the virus patches
                    the Vec5-Vector => $94(A6). This Patch sets always the
                    CoolCapture + DoIO to the virus value. 


                    The whole virus is crypted depending of $DFF006. After
                    3  infections  the  virus  installs a new patch in the
                    ZERO-PAGE ($68). This patch does the following:

                    1) Tests if you are pressing of a special key.

                    2) If  you  are pressing this special key 10 times the
                       virus causes a reset.



                    In the decrypted virus you can read:

                    "VIRGO PRESENTS DIVINA EXTERMINATOR I. COPIES:"



      SHI - A.D 05-94

[Go back]