VIPHS

Introduction

VIPHS is a computer bootvirus written for the Commodore Amiga. It is a clone of the Byte Bandit virus.

Summary

• Overwrites the original bootblock of any unprotected disk inserted in the floppy drive of an Amiga computer
• Uses BeginIO() of the trackdisk.device for infection
• Stays resident in memory by using KickTag
• Hooks ExecVec5 interrupt
• Is not encrypted

Details

Compared to its template Byte Bandit the code of the virus has been shifted some bytes so it won't be recognized by virus killers as Byte Bandit anymore. This has been achieved in shortening the typical Byte Bandit-text in the bootblock. This text has been altered to:

0010h: 41 4E 54 49 56 49 52 55 53 20 31 39 38 39 20 62 ; ANTIVIRUS 1989 b
0020h: 79 20 56 49 50 48 53 00 00 00 04 92 48 E7 7F 7F ; y VIPHS....’Hç

Clones and variants

None