Path: utzoo!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!wuarchive!uwm.edu!cs.utexas.edu!asuvax!mcdphx!estinc!fnf
From: fnf@estinc.UUCP (Fred Fish)
Newsgroups: comp.sys.amiga
Subject: Re: VIRUS DAMAGE, CONSEQUENCES (Hate Mail)
Message-ID: <256@estinc.UUCP>
Date: 9 Jan 90 01:27:03 GMT
References: <50524@bbn.COM>
Reply-To: fnf@estinc.UUCP (Fred Fish)
Organization: Enhanced Software Technologies, Tempe, AZ
Lines: 24

In article <50524@bbn.COM> ghewes@spca.bbn.com (Gerald Hewes) writes:
> This weekend I was bitten by a D***ed virus.  Its probably an old known
> one because I suspect I caught from a FISH disk from 200-250.  The virus
> is attached to the executables and adds exactly 1124 bytes to them.

Sounds like you were hit by the Xeno virus.  I believe that some of
the master disks at Amazing Computing somehow got infected with this
virus (disks about 240-249?), so some of their customers probably got
infected disks.  My masters are clean as far as I know, as are the
disks I've shipped out.

>I now have to roam through my disk, and manage to remember
>where I got each executable from, recompiling all my code,...
>Just reinstalling all the commercial software is already
>a slow process.

The XenoZap program on disk 300 reportedly disables the virus in
each executable, without actually removing it.  A future version
is expected to actually remove the virus code from the executable.

-Fred
-- 
# Fred Fish, 1835 E. Belmont Drive, Tempe, AZ 85284,  USA
# 1-602-491-0048           asuvax!{nud,mcdphx}!estinc!fnf