Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!samsung!munnari.oz.au!uhccux!uhunix1.uhcc.Hawaii.Edu From: olson@uhunix1.uhcc.Hawaii.Edu (Todd Olson) Newsgroups: comp.sys.amiga Subject: New Virus Message-ID: <9585@uhccux.uhcc.Hawaii.Edu> Date: 28 Sep 90 10:06:14 GMT Sender: news@uhccux.uhcc.Hawaii.Edu Organization: University of Hawaii Lines: 45 It must be my lucky year! I found a new virus (again). This one manifests itself in a so called "new" version of unwarp, version 1.4. The virus is integrated into the unwarp file. The virus is written by the Centurions. It changes the KickTagPtr, and it contains some text that I scanned from memory. The text is as follows: __________BEGIN INCLUDED TEXT__________ >>>>>>> HI THERE A NEW AGE IN VIRUS MAKING HAS BEGUN THANX TO US>>> THANX TO: === CENTURIONS === AND WEVE THE PLEASURE TO INFORM YOU THAT SOME OF YOUR DISKS ARE INFECTED BY OUR FIRST MASTERPIECE CALLED: < THE SMILY CANCER < HAVE FUN LOOKING FOR IT>>> AND STAY TUNED FOR OUR NEXT PRODUCTIONS> CENTURIONS: THE FUTURE IS NEAR; HELLO HACKERS OUT THERE!! A NEW FORCE HAS BORN IN ITALY: --- CENTURIONS ---. OUR TEAM IS COMPOSED OF 2 GUYZ: ME & HIM.(AHAHHA!) THE AIM OF -- CENTURIONS -- IS JUST VIRUS MAKING.. WE HAVE LOTTA FUN DOING THIS AND WE ALSO HOPE TO GIVE FUN TO THE KILLERS MAKERS (HI STEVE TIBBETT!) HAW! HAW! HAW! SIGNED: ME & HIM / CENTURIONS. _________________END OF TEXT ___________ It also looks as if it infects only floppies, and it affects the startup-sequence, I say this because I found the following near the above text and the KickTagPtr. trackdisk.device startup-sequence virusup-sequence A copy will again be going to SteveX. Todd -- olson@uhunix.uhcc.hawaii.edu | "When I was fourteen, my father was so ignorant olson@uhccux.uhcc.hawaii.edu | I could hardly stand to be around him. When I CS student, Adventurer | was twenty-one, I was amazed at how much the Paraphrased from House II | old man had learned in seven years." - M. Twain