home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Almathera Ten Pack 3: CDPD 3
/
Almathera Ten on Ten - Disc 3: CDPD3.iso
/
scope
/
151-175
/
scopedisk169
/
wvkill2
/
readme
< prev
next >
Wrap
Text File
|
1995-03-19
|
2KB
|
34 lines
-- WARNING -- WARNING -- WARNING -- WARNING -- WARNING -- WARNING --
--------------------------------------------------------------------
THE FILE UNWARP 1.40 CONTAINS A NEW VIRUS
----------- -----
THIS VIRUS IS MADE BY AN NEW ITALIEN GANG CALLED CENTURIONS
SO I CALLED THE VIRUS >> CENTURIONS VIRUS <<
HERE SOME INFORMATION ABOUT IT:
The Virus works over the StartUp-Sequence, copies the real one to
VirusUp-Sequence (I`m not sure) and generate a new one.
It`s always locatet at $7f000 and patchts a lot of vectors !!!
The Virus itsself is 3808 bytes long. UWarp 1.40 is packed with
IMPLODER and protected against unpacking, the Virus is linked after
UnWarp and packed itself too!
-- WARNING -- WARNING -- WARNING -- WARNING -- WARNING -- WARNING --
--------------------------------------------------------------------
This little program will check memory for the above mentioned virus.
It doesn't remove or deactivate the virus. I imagine that you would
delete the S:Startup-Sequence file and power off the machine. After
waiting about 20-30 seconds power on the machine booting from a know
good WorkBench disk - your write protected original disk possibly, then
examine the old infected disk for the supposed VirusUp-Sequence file.
You'll most likely have to recreate the Startup-Sequence file or copy it
from a known good disk.
It was written by Cataclysm of Subliminal V.2. I disassembled the program
and determined that it seems to do exactly what it claims to do.