Path: utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!cs.utexas.edu!uunet!murtoa.cs.mu.oz.au!munnari.oz.au!elecvax!spinifex!rodneyc
From: rodneyc@spinifex.eecs.unsw.oz (Rodney Campbell)
Newsgroups: comp.sys.amiga.tech
Subject: Re: Anyone know ANYTHING about the "Byte Warrior" Virus??
Summary: It usually causes a message such as df1: is bad
Message-ID: <403@spinifex.eecs.unsw.oz>
Date: 5 Jul 89 12:33:40 GMT
References: <16922@gryphon.COM>
Organization: EE & CS, Uni N.S.W., Sydney, Australia
Lines: 23


The Byte Warrior virus is another of the bootblock type viruses which writes
itself to the first 2 blocks of the disk if it can (unwriteprotected disk)
It can be seen using a disk editor and the string DASA appears in the
boot block. It doesn't do much initially but after a while it usually
ends up trashing your disk and you get a df1: bad error message.
	As for the virus that attaches itself to programs which get 
executed - that is the IRQ virus which usually looks at the first command
executed by your startup sequence and infects it if it can. A number
of good checkers are available to combat this. KV check a single file
for the IRQ virus and POPDIR has an IRQ checker to check all files in a
directory.

		Hope that helps, 

==============================================================================
      ___     Rodney Campbell :: University of New South Wales
     /    /
    /   /          / ACSnet,CSNET: rodneyc@spinifex.eecs.unsw.oz
   /__/   ___  ___/          UUCP: {uunet,mcvax}!spinifex.eecs.unsw.oz!rodneyc
  /   |  /  / /  /          Snail: 34 Harbourne Road, Kingsford, 2032.
 /    |_/__/_/__/		   N.S.W. Australia.   PH +61 02 663 3917
=============================================================================