SHI

Introduction

SHI is a computer virus written for the Commodore Amiga. It is a clone of The Australian Parasite bootvirus.
For further details please go to The Australian Parasite

Summary

  • Overwriting the original bootblock of an unprotected disk inserted in the floppydrive
  • It is not crypted
  • Hooks DoIO()-vector from the exec.library
  • Uses BeginIO()-vector from the gtrackdisk.device for infection
  • Makes itself reset resident by using the CoolCapture
  • Does not overwrite bootblocks which do not contain the string "dos.library"

Details

Compared to its original only the uncrypted text in the bootblock has been changed to:

0000h: 20 57 65 20 6c 69 6b 65 20 56 69 72 69 2e 20 43 ;  We like Viri. C
0010h: 61 6c 6c 20 56 58 51 2d 42 42 53 20 28 34 31 36 ; all VXQ-BBS (416
0020h: 29 20 33 32 34 20 39 34 33 39 20 2e 53 65 6e 64 ; ) 324 9439 .Send
0030h: 20 6e 65 77 20 76 69 72 69 20 2c 20 77 65 6c 63 ; new viri , welc
0040h: 6f 6d 65 20 74 6f 20 42 42 53 20 20 3a 00 00 18 ; ome to BBS  :...
0050h: 00 00 20 53 48 49 21 53 48 49 21 53 48 49 21 53 ; .. SHI!SHI!SHI!S

For further details please go to The Australian Parasite

Clones and variants

None

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License