Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!wuarchive!uunet!munnari.oz.au!uluru7!rjlov From: rjlov@ecr.mu.oz.au (Richard James LOVEJOY) Newsgroups: comp.sys.amiga.misc Subject: Re: A virus that popped up on my 3000's hard drive Message-ID: <7474@munnari.oz.au> Date: 30 Apr 91 04:08:19 GMT References: <1991Apr24.024037.25613@netcom.COM> Sender: news@cs.mu.oz.au Lines: 2 This virus could be the ttv1 link virus. It searches the file s/startup-sequence, and puts the first file named therein as a blank line in either the main or devs directories. It then replaces the first file with itself. If it is this virus, the first command in your startup-sequence will be 2608 bytes in length, and this is the actual virus. The blank line is simply an innocent program renamed.