Path: utzoo!mnetor!uunet!mcvax!inria!rouaix
From: rouaix@inria.UUCP (Francois Rouaix)
Newsgroups: comp.sys.amiga
Subject: ByteBandits again
Message-ID: <682@inria.UUCP>
Date: 19 Apr 88 10:27:27 GMT
Organization: Co.
Lines: 22
Keywords: VirusX DANGER!


Yet another bad news about ByteBandits Virus !

Starting from a safe machine, running VirusX.
Insert a ByteBandits-infected disk (boot-block presents the infamous message,
and usual symptoms when booting from this disk)
Nothing happens ! (I thought VirusX would show up the 'usual' requester)

BTW, VCheck1.9 detects a non-standard boot-code.


I just wrote a small utility that converts a 1024 bytes file (supposed
to be the image of block 0 and 1) into an AmigaDos executable-file.
(technical details: two hunks : 1 for code and 1 for data -- the first
three longwords on block 0).
This allows you to use Dis or Wack or ... to study any boot-code.

If you're interested, let me know and I will post/mail the sources.
-- 
*- Francois Rouaix                 //       When the going gets tough,       *
*- rouaix@inria.inria.fr         \X/           the guru goes meditating...   *
*- SYSOP of Sgt. Flam's Lonely Amigas Club. (33) (1) 39-55-84-59 (Videotext) *