Path: utzoo!mnetor!uunet!lll-winken!lll-tis!ames!ucsd!sdcsvax!ucsdhub!hp-sdd!ncr-sd!crash!pnet01!haitex
From: haitex@pnet01.cts.com (Wade Bickel)
Newsgroups: comp.sys.amiga
Subject: Re: "NEW"  Amiga virus has arrived in Europe
Message-ID: <2674@crash.cts.com>
Date: 14 Mar 88 02:36:24 GMT
Sender: news@crash.cts.com
Organization: People-Net [pnet01], El Cajon CA
Lines: 46

pl@tut.fi (Pertti Lehtinen) writes:
>From article <907@rmi.UUCP>, by shimoda@rmi.UUCP (Markus Schmidt):
>> 
>> Just a little more info about the BiteBandit Virus.
>> Be careful, after a reasonable number of copies it
>> starts to kill some data on the inserted disks.
>
>	I also have a disk inflected by this one.
>	Interesting is that it inflects every writable disk
>	inserted in machine. I have some diffulties to destroy
>	it, because "install" doesn't for some reason wipe it.
>
>	Vcheck1.9 sees it as nonstandard boot sector and it
>	is very easy to spot, as text "Virus by bytebandit"

        THIS COULD BECOME VERY UGLY IF WE DON'T STOP THIS ONE NOW!

        At least if it works the way I suspect.

        The following test sequence will confirm or deny my suspiscions.

            1)  Install an infected disk,  and reboot.  Is it now reinfected?

            2)  Do the same, only cold start.  Still there?

            3)  Make a bootable test disk and make sure it is virus free.
                  Copy the boot track from the infected disk to it (I hope
                  you have a way to do this) and boot the disk.  Then retry
                  step 1.  Same results?

        If you can check this out I'd be interested in the results.  If my
      suspicions are correct I'll suggest a cure (you won't like it though),
        otherwise I'd rather not go into details.


                                                        Thanks,


                                                                  Wade.

        PS: The install in step 3 must be done on a clean system.  Make sure
                the system is still clean afterwards.


UUCP: {cbosgd, hplabs!hp-sdd, sdcsvax, nosc}!crash!pnet01!haitex
ARPA: crash!pnet01!haitex@nosc.mil
INET: haitex@pnet01.CTS.COM