Home » Recent acquisitions » Acorn ADFS disks » adfs_ArchimedesWorld_199204.adf » April92 » !AWApr92/Goodies/VirusKill/Release
!AWApr92/Goodies/VirusKill/Release
This website contains an archive of files for the Acorn Electron, BBC Micro, Acorn Archimedes, Commodore 16 and Commodore 64 computers, which Dominic Ford has rescued from his private collection of floppy disks and cassettes.
Some of these files were originally commercial releases in the 1980s and 1990s, but they are now widely available online. I assume that copyright over them is no longer being asserted. If you own the copyright and would like files to be removed, please contact me.
| Tape/disk: | Home » Recent acquisitions » Acorn ADFS disks » adfs_ArchimedesWorld_199204.adf » April92 |
| Filename: | !AWApr92/Goodies/VirusKill/Release |
| Read OK: | ✔ |
| File size: | 19AC bytes |
| Load address: | 0000 |
| Exec address: | 0000 |
File contents
These versions of !Killer (1.26) and VProtect (1.10) know about ten
families of virus for the Acorn Archimedes range of computers (including the
A3000 and A5000).
These are :
* Extend
* Icon (also known as Filer), and known variants
* FF8 (also known as Archievirus)
* RISCOSext (also known as Thanatos)
* DataDQM (also known as Vigayvirus)
* CeBit
* MyMod (also known as Silicon Herpes)
* TrapHandler/NetManager
* Module (also known as ModVir)
* Image
The alternative names mentioned are those used by the authors of other virus
detection/removal software.
Should you discover a virus which is not understood by !Killer and VProtect
(or a new variant of one of those above) please contact the Customer
Services department at Acorn, including a clearly marked disc containing an
example of an infected file/application.
VProtect can prevent infected !Boot files from doing any damage. It achieves
this by parsing the !Boot file before it is executed. Should it find a line
which is known to be used by a virus, an error will be generated and the
!Boot file will not be executed. Similarly it can prevent the Module virus
from causing further infection.
VProtect is intended to be small and unobtrusive, lending itself to being
loaded on a system all the time.
!Killer is much more versatile, providing the following facilities:
* Detection and removal/disabling of any viruses already resident
* Self verification to avoid becoming a carrier for a virus
* Searching a file storage device for any infected files, with the ability
to remove them completely (including viruses which merge themselves with
files).
* Detection and removal of any viruses loaded whilst !Killer is loaded
Fuller documentation of !Killer is in the !Help file within !Killer's
directory.
The following sections give a brief summary of the ten known viruses. It
does not attempt to be a technical analysis or description, but simply gives
an overview of the nature of each virus, and it's possible effects.
Of necessity, our definition of the term virus takes a very broad view of
the genre. Anything designed to reproduce itself and/or cause unwanted
events is considered a virus.
The majority of the viruses documented below alter !Boot files to get
themselves loaded. This means that all you have to do to get a virus in
memory is to open a directory viewer on an infected application!
The Known Viruses
-----------------
1) Extend
This lives in applications, using one of eight possible names. It
modifies/creates a !Boot file to load itself. Apart from claiming more and
more memory (eventually causing the system to run out of memory) it is
harmless, but very contagious.
Quick Check : Press <F12> and type 'help extend' - a message of the form
'Module is...' indicates that it's loaded.
2) Icon (also known as Filer)
There are a number of variants of this around - six have been encountered
already. All use !Boot files to propagate. One variant does nothing apart
from spread itself. The others generate a nonsensical error message when
they is first loaded.
Quick Check : a file called Icon, Poison or NewVirus(!) inside an
application which is filetyped as a sprite, but is actually BASIC.
3) FF8 (also known as ArchieVirus)
This is by far the oldest virus, but various bugs in it's coding make the
chances of it successfully infecting other programs quite small.
Unlike most other viruses discussed here it works by merging itself with
files typed FF8 (Absolute).
On the 13th of the month any infected application will fail to run, giving
the message 'Archievirus strikes again'.
Quick Check : Load a file into !Edit, and look for '1210' at the end of the
file (though 'Hypo1210' indicates an innoculation instead).
4) RISCOSext (also known as Thanatos)
This is by far the worst of the viruses discussed here. It has various nasty
things on particular dates, with a random chance of something happening at
any time. Any outbreaks of this virus should be treated rapidly to avoid any
chance of data loss.
Quick Check : Look in the Task Manager display for 'Thanatos'.
5) DataDQM (also known as VigayVirus)
This one causes the screen to judder an increasing amount during each
Thursday.
Quick Check : An application called 'TaskManager' - not to be confused with
the real 'Task Manager' which will appear in the list of module tasks.
6) CeBit
Aside from infecting applications (via the !Boot file as usual) it will stop
proceedings on every 16th infection to display a message from 'Devil, The
Lord of Darkness'. This virus was discovered in Germany, and is not thought
to have spread to the UK yet.
Quick Check : press <F12>, then 'help tlodmod'. A message of the form
'Module is...' shows that it is loaded.
7) MyMod
This is a harmless virus, which will display a message on each Friday 13th.
It can exist in two forms, the first being the trojan used to initially
release it, and the second being the form in which it infects applications.
Quick Check : press <F12> then 'help mymod'. A message of the form 'Module
is...' shows that it is loaded.
8) NetManager/TrapHandler
This is a variation of the !Boot theme, with the whole virus being in the
!Boot file.
Quick Check : press <F12> then 'help netmanager' or 'help traphandler'. A
message of the form 'Module is...' shows that it is loaded.
9) Module
This is quite different, and works by appending it's code to any modules
loaded whilst an infected module is active. It then redirects some of the
module entry points to itself (and then on to the original entry points).
Quick Check: Any modules with changed timestamps, and have grown by almost
1K are potential suspects. Loading the module in to !Edit will reveal the
ASCII string 'Press any key to continue'.
** Important ** Version 1.17 of !Killer can corrupt modules when attempting
to remove this virus (caused by it expecting to find a different strain of
the virus). Corrupted modules may be repaired using this version of !Killer.
Drag an affected module to !Killer's icon with ALT held down to repair
it.
10) Image
This is basically a !Boot infector, but with a couple of variations. A !boot
file is created if one did not exist, otherwise it renames !run to !spr, and
saves a !run of it's own. It loads into OS workspace at 5500, so the chances
of it being overwritten and causing a crash are quite high.
Quick Check: A file called Image appearing in application - length 512
bytes, and no filetype.
00000000 54 68 65 73 65 20 76 65 72 73 69 6f 6e 73 20 6f |These versions o| 00000010 66 20 21 4b 69 6c 6c 65 72 20 28 31 2e 32 36 29 |f !Killer (1.26)| 00000020 20 61 6e 64 20 56 50 72 6f 74 65 63 74 20 28 31 | and VProtect (1| 00000030 2e 31 30 29 20 6b 6e 6f 77 20 61 62 6f 75 74 20 |.10) know about | 00000040 74 65 6e 0a 66 61 6d 69 6c 69 65 73 20 6f 66 20 |ten.families of | 00000050 76 69 72 75 73 20 66 6f 72 20 74 68 65 20 41 63 |virus for the Ac| 00000060 6f 72 6e 20 41 72 63 68 69 6d 65 64 65 73 20 72 |orn Archimedes r| 00000070 61 6e 67 65 20 6f 66 20 63 6f 6d 70 75 74 65 72 |ange of computer| 00000080 73 20 28 69 6e 63 6c 75 64 69 6e 67 20 74 68 65 |s (including the| 00000090 0a 41 33 30 30 30 20 61 6e 64 20 41 35 30 30 30 |.A3000 and A5000| 000000a0 29 2e 20 20 20 20 20 0a 0a 54 68 65 73 65 20 61 |). ..These a| 000000b0 72 65 20 3a 0a 0a 2a 20 45 78 74 65 6e 64 0a 2a |re :..* Extend.*| 000000c0 20 49 63 6f 6e 20 28 61 6c 73 6f 20 6b 6e 6f 77 | Icon (also know| 000000d0 6e 20 61 73 20 46 69 6c 65 72 29 2c 20 61 6e 64 |n as Filer), and| 000000e0 20 6b 6e 6f 77 6e 20 76 61 72 69 61 6e 74 73 0a | known variants.| 000000f0 2a 20 46 46 38 20 28 61 6c 73 6f 20 6b 6e 6f 77 |* FF8 (also know| 00000100 6e 20 61 73 20 41 72 63 68 69 65 76 69 72 75 73 |n as Archievirus| 00000110 29 0a 2a 20 52 49 53 43 4f 53 65 78 74 20 28 61 |).* RISCOSext (a| 00000120 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 54 68 61 |lso known as Tha| 00000130 6e 61 74 6f 73 29 0a 2a 20 44 61 74 61 44 51 4d |natos).* DataDQM| 00000140 20 28 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 | (also known as | 00000150 56 69 67 61 79 76 69 72 75 73 29 0a 2a 20 43 65 |Vigayvirus).* Ce| 00000160 42 69 74 0a 2a 20 4d 79 4d 6f 64 20 28 61 6c 73 |Bit.* MyMod (als| 00000170 6f 20 6b 6e 6f 77 6e 20 61 73 20 53 69 6c 69 63 |o known as Silic| 00000180 6f 6e 20 48 65 72 70 65 73 29 0a 2a 20 54 72 61 |on Herpes).* Tra| 00000190 70 48 61 6e 64 6c 65 72 2f 4e 65 74 4d 61 6e 61 |pHandler/NetMana| 000001a0 67 65 72 20 0a 2a 20 4d 6f 64 75 6c 65 20 28 61 |ger .* Module (a| 000001b0 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 4d 6f 64 |lso known as Mod| 000001c0 56 69 72 29 20 20 20 20 20 20 20 20 20 20 20 20 |Vir) | 000001d0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | | 000001e0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 2a | .*| 000001f0 20 49 6d 61 67 65 0a 0a 54 68 65 20 61 6c 74 65 | Image..The alte| 00000200 72 6e 61 74 69 76 65 20 6e 61 6d 65 73 20 6d 65 |rnative names me| 00000210 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 68 6f 73 |ntioned are thos| 00000220 65 20 75 73 65 64 20 62 79 20 74 68 65 20 61 75 |e used by the au| 00000230 74 68 6f 72 73 20 6f 66 20 6f 74 68 65 72 20 76 |thors of other v| 00000240 69 72 75 73 0a 64 65 74 65 63 74 69 6f 6e 2f 72 |irus.detection/r| 00000250 65 6d 6f 76 61 6c 20 73 6f 66 74 77 61 72 65 2e |emoval software.| 00000260 20 0a 0a 53 68 6f 75 6c 64 20 79 6f 75 20 64 69 | ..Should you di| 00000270 73 63 6f 76 65 72 20 61 20 76 69 72 75 73 20 77 |scover a virus w| 00000280 68 69 63 68 20 69 73 20 6e 6f 74 20 75 6e 64 65 |hich is not unde| 00000290 72 73 74 6f 6f 64 20 62 79 20 21 4b 69 6c 6c 65 |rstood by !Kille| 000002a0 72 20 61 6e 64 20 56 50 72 6f 74 65 63 74 0a 28 |r and VProtect.(| 000002b0 6f 72 20 61 20 6e 65 77 20 76 61 72 69 61 6e 74 |or a new variant| 000002c0 20 6f 66 20 6f 6e 65 20 6f 66 20 74 68 6f 73 65 | of one of those| 000002d0 20 61 62 6f 76 65 29 20 70 6c 65 61 73 65 20 63 | above) please c| 000002e0 6f 6e 74 61 63 74 20 74 68 65 20 43 75 73 74 6f |ontact the Custo| 000002f0 6d 65 72 0a 53 65 72 76 69 63 65 73 20 64 65 70 |mer.Services dep| 00000300 61 72 74 6d 65 6e 74 20 61 74 20 41 63 6f 72 6e |artment at Acorn| 00000310 2c 20 69 6e 63 6c 75 64 69 6e 67 20 61 20 63 6c |, including a cl| 00000320 65 61 72 6c 79 20 6d 61 72 6b 65 64 20 64 69 73 |early marked dis| 00000330 63 20 63 6f 6e 74 61 69 6e 69 6e 67 20 61 6e 0a |c containing an.| 00000340 65 78 61 6d 70 6c 65 20 6f 66 20 61 6e 20 69 6e |example of an in| 00000350 66 65 63 74 65 64 20 66 69 6c 65 2f 61 70 70 6c |fected file/appl| 00000360 69 63 61 74 69 6f 6e 2e 0a 0a 56 50 72 6f 74 65 |ication...VProte| 00000370 63 74 20 63 61 6e 20 70 72 65 76 65 6e 74 20 69 |ct can prevent i| 00000380 6e 66 65 63 74 65 64 20 21 42 6f 6f 74 20 66 69 |nfected !Boot fi| 00000390 6c 65 73 20 66 72 6f 6d 20 64 6f 69 6e 67 20 61 |les from doing a| 000003a0 6e 79 20 64 61 6d 61 67 65 2e 20 49 74 20 61 63 |ny damage. It ac| 000003b0 68 69 65 76 65 73 0a 74 68 69 73 20 62 79 20 70 |hieves.this by p| 000003c0 61 72 73 69 6e 67 20 74 68 65 20 21 42 6f 6f 74 |arsing the !Boot| 000003d0 20 66 69 6c 65 20 62 65 66 6f 72 65 20 69 74 20 | file before it | 000003e0 69 73 20 65 78 65 63 75 74 65 64 2e 20 53 68 6f |is executed. Sho| 000003f0 75 6c 64 20 69 74 20 66 69 6e 64 20 61 20 6c 69 |uld it find a li| 00000400 6e 65 0a 77 68 69 63 68 20 69 73 20 6b 6e 6f 77 |ne.which is know| 00000410 6e 20 74 6f 20 62 65 20 75 73 65 64 20 62 79 20 |n to be used by | 00000420 61 20 76 69 72 75 73 2c 20 61 6e 20 65 72 72 6f |a virus, an erro| 00000430 72 20 77 69 6c 6c 20 62 65 20 67 65 6e 65 72 61 |r will be genera| 00000440 74 65 64 20 61 6e 64 20 74 68 65 0a 21 42 6f 6f |ted and the.!Boo| 00000450 74 20 66 69 6c 65 20 77 69 6c 6c 20 6e 6f 74 20 |t file will not | 00000460 62 65 20 65 78 65 63 75 74 65 64 2e 20 53 69 6d |be executed. Sim| 00000470 69 6c 61 72 6c 79 20 69 74 20 63 61 6e 20 70 72 |ilarly it can pr| 00000480 65 76 65 6e 74 20 74 68 65 20 4d 6f 64 75 6c 65 |event the Module| 00000490 20 76 69 72 75 73 0a 66 72 6f 6d 20 63 61 75 73 | virus.from caus| 000004a0 69 6e 67 20 66 75 72 74 68 65 72 20 69 6e 66 65 |ing further infe| 000004b0 63 74 69 6f 6e 2e 0a 0a 56 50 72 6f 74 65 63 74 |ction...VProtect| 000004c0 20 69 73 20 69 6e 74 65 6e 64 65 64 20 74 6f 20 | is intended to | 000004d0 62 65 20 73 6d 61 6c 6c 20 61 6e 64 20 75 6e 6f |be small and uno| 000004e0 62 74 72 75 73 69 76 65 2c 20 6c 65 6e 64 69 6e |btrusive, lendin| 000004f0 67 20 69 74 73 65 6c 66 20 74 6f 20 62 65 69 6e |g itself to bein| 00000500 67 0a 6c 6f 61 64 65 64 20 6f 6e 20 61 20 73 79 |g.loaded on a sy| 00000510 73 74 65 6d 20 61 6c 6c 20 74 68 65 20 74 69 6d |stem all the tim| 00000520 65 2e 0a 0a 21 4b 69 6c 6c 65 72 20 69 73 20 6d |e...!Killer is m| 00000530 75 63 68 20 6d 6f 72 65 20 76 65 72 73 61 74 69 |uch more versati| 00000540 6c 65 2c 20 70 72 6f 76 69 64 69 6e 67 20 74 68 |le, providing th| 00000550 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 66 61 63 69 |e following faci| 00000560 6c 69 74 69 65 73 3a 0a 0a 2a 20 44 65 74 65 63 |lities:..* Detec| 00000570 74 69 6f 6e 20 61 6e 64 20 72 65 6d 6f 76 61 6c |tion and removal| 00000580 2f 64 69 73 61 62 6c 69 6e 67 20 6f 66 20 61 6e |/disabling of an| 00000590 79 20 76 69 72 75 73 65 73 20 61 6c 72 65 61 64 |y viruses alread| 000005a0 79 20 72 65 73 69 64 65 6e 74 0a 0a 2a 20 53 65 |y resident..* Se| 000005b0 6c 66 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 |lf verification | 000005c0 74 6f 20 61 76 6f 69 64 20 62 65 63 6f 6d 69 6e |to avoid becomin| 000005d0 67 20 61 20 63 61 72 72 69 65 72 20 66 6f 72 20 |g a carrier for | 000005e0 61 20 76 69 72 75 73 0a 0a 2a 20 53 65 61 72 63 |a virus..* Searc| 000005f0 68 69 6e 67 20 61 20 66 69 6c 65 20 73 74 6f 72 |hing a file stor| 00000600 61 67 65 20 64 65 76 69 63 65 20 66 6f 72 20 61 |age device for a| 00000610 6e 79 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 |ny infected file| 00000620 73 2c 20 77 69 74 68 20 74 68 65 20 61 62 69 6c |s, with the abil| 00000630 69 74 79 0a 74 6f 20 72 65 6d 6f 76 65 20 74 68 |ity.to remove th| 00000640 65 6d 20 63 6f 6d 70 6c 65 74 65 6c 79 20 28 69 |em completely (i| 00000650 6e 63 6c 75 64 69 6e 67 20 76 69 72 75 73 65 73 |ncluding viruses| 00000660 20 77 68 69 63 68 20 6d 65 72 67 65 20 74 68 65 | which merge the| 00000670 6d 73 65 6c 76 65 73 20 77 69 74 68 0a 66 69 6c |mselves with.fil| 00000680 65 73 29 2e 0a 0a 2a 20 44 65 74 65 63 74 69 6f |es)...* Detectio| 00000690 6e 20 61 6e 64 20 72 65 6d 6f 76 61 6c 20 6f 66 |n and removal of| 000006a0 20 61 6e 79 20 76 69 72 75 73 65 73 20 6c 6f 61 | any viruses loa| 000006b0 64 65 64 20 77 68 69 6c 73 74 20 21 4b 69 6c 6c |ded whilst !Kill| 000006c0 65 72 20 69 73 20 6c 6f 61 64 65 64 0a 0a 46 75 |er is loaded..Fu| 000006d0 6c 6c 65 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 |ller documentati| 000006e0 6f 6e 20 6f 66 20 21 4b 69 6c 6c 65 72 20 69 73 |on of !Killer is| 000006f0 20 69 6e 20 74 68 65 20 21 48 65 6c 70 20 66 69 | in the !Help fi| 00000700 6c 65 20 77 69 74 68 69 6e 20 21 4b 69 6c 6c 65 |le within !Kille| 00000710 72 27 73 0a 64 69 72 65 63 74 6f 72 79 2e 0a 0a |r's.directory...| 00000720 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 73 65 |The following se| 00000730 63 74 69 6f 6e 73 20 67 69 76 65 20 61 20 62 72 |ctions give a br| 00000740 69 65 66 20 73 75 6d 6d 61 72 79 20 6f 66 20 74 |ief summary of t| 00000750 68 65 20 74 65 6e 20 6b 6e 6f 77 6e 20 76 69 72 |he ten known vir| 00000760 75 73 65 73 2e 20 49 74 0a 64 6f 65 73 20 6e 6f |uses. It.does no| 00000770 74 20 61 74 74 65 6d 70 74 20 74 6f 20 62 65 20 |t attempt to be | 00000780 61 20 74 65 63 68 6e 69 63 61 6c 20 61 6e 61 6c |a technical anal| 00000790 79 73 69 73 20 6f 72 20 64 65 73 63 72 69 70 74 |ysis or descript| 000007a0 69 6f 6e 2c 20 62 75 74 20 73 69 6d 70 6c 79 20 |ion, but simply | 000007b0 67 69 76 65 73 0a 61 6e 20 6f 76 65 72 76 69 65 |gives.an overvie| 000007c0 77 20 6f 66 20 74 68 65 20 6e 61 74 75 72 65 20 |w of the nature | 000007d0 6f 66 20 65 61 63 68 20 76 69 72 75 73 2c 20 61 |of each virus, a| 000007e0 6e 64 20 69 74 27 73 20 70 6f 73 73 69 62 6c 65 |nd it's possible| 000007f0 20 65 66 66 65 63 74 73 2e 0a 0a 4f 66 20 6e 65 | effects...Of ne| 00000800 63 65 73 73 69 74 79 2c 20 6f 75 72 20 64 65 66 |cessity, our def| 00000810 69 6e 69 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 |inition of the t| 00000820 65 72 6d 20 76 69 72 75 73 20 74 61 6b 65 73 20 |erm virus takes | 00000830 61 20 76 65 72 79 20 62 72 6f 61 64 20 76 69 65 |a very broad vie| 00000840 77 20 6f 66 0a 74 68 65 20 67 65 6e 72 65 2e 20 |w of.the genre. | 00000850 41 6e 79 74 68 69 6e 67 20 64 65 73 69 67 6e 65 |Anything designe| 00000860 64 20 74 6f 20 72 65 70 72 6f 64 75 63 65 20 69 |d to reproduce i| 00000870 74 73 65 6c 66 20 61 6e 64 2f 6f 72 20 63 61 75 |tself and/or cau| 00000880 73 65 20 75 6e 77 61 6e 74 65 64 0a 65 76 65 6e |se unwanted.even| 00000890 74 73 20 69 73 20 63 6f 6e 73 69 64 65 72 65 64 |ts is considered| 000008a0 20 61 20 76 69 72 75 73 2e 0a 20 20 20 20 20 20 | a virus.. | 000008b0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | | * 000008d0 20 20 20 20 20 20 0a 54 68 65 20 6d 61 6a 6f 72 | .The major| 000008e0 69 74 79 20 6f 66 20 74 68 65 20 76 69 72 75 73 |ity of the virus| 000008f0 65 73 20 64 6f 63 75 6d 65 6e 74 65 64 20 62 65 |es documented be| 00000900 6c 6f 77 20 61 6c 74 65 72 20 21 42 6f 6f 74 20 |low alter !Boot | 00000910 66 69 6c 65 73 20 74 6f 20 67 65 74 0a 74 68 65 |files to get.the| 00000920 6d 73 65 6c 76 65 73 20 6c 6f 61 64 65 64 2e 20 |mselves loaded. | 00000930 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 |This means that | 00000940 61 6c 6c 20 79 6f 75 20 68 61 76 65 20 74 6f 20 |all you have to | 00000950 64 6f 20 74 6f 20 67 65 74 20 61 20 76 69 72 75 |do to get a viru| 00000960 73 20 69 6e 0a 6d 65 6d 6f 72 79 20 69 73 20 74 |s in.memory is t| 00000970 6f 20 6f 70 65 6e 20 61 20 64 69 72 65 63 74 6f |o open a directo| 00000980 72 79 20 76 69 65 77 65 72 20 6f 6e 20 61 6e 20 |ry viewer on an | 00000990 69 6e 66 65 63 74 65 64 20 61 70 70 6c 69 63 61 |infected applica| 000009a0 74 69 6f 6e 21 0a 0a 0a 54 68 65 20 4b 6e 6f 77 |tion!...The Know| 000009b0 6e 20 56 69 72 75 73 65 73 0a 2d 2d 2d 2d 2d 2d |n Viruses.------| 000009c0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 31 29 20 |-----------..1) | 000009d0 45 78 74 65 6e 64 0a 0a 54 68 69 73 20 6c 69 76 |Extend..This liv| 000009e0 65 73 20 69 6e 20 61 70 70 6c 69 63 61 74 69 6f |es in applicatio| 000009f0 6e 73 2c 20 75 73 69 6e 67 20 6f 6e 65 20 6f 66 |ns, using one of| 00000a00 20 65 69 67 68 74 20 70 6f 73 73 69 62 6c 65 20 | eight possible | 00000a10 6e 61 6d 65 73 2e 20 49 74 0a 6d 6f 64 69 66 69 |names. It.modifi| 00000a20 65 73 2f 63 72 65 61 74 65 73 20 61 20 21 42 6f |es/creates a !Bo| 00000a30 6f 74 20 66 69 6c 65 20 74 6f 20 6c 6f 61 64 20 |ot file to load | 00000a40 69 74 73 65 6c 66 2e 20 41 70 61 72 74 20 66 72 |itself. Apart fr| 00000a50 6f 6d 20 63 6c 61 69 6d 69 6e 67 20 6d 6f 72 65 |om claiming more| 00000a60 20 61 6e 64 0a 6d 6f 72 65 20 6d 65 6d 6f 72 79 | and.more memory| 00000a70 20 28 65 76 65 6e 74 75 61 6c 6c 79 20 63 61 75 | (eventually cau| 00000a80 73 69 6e 67 20 74 68 65 20 73 79 73 74 65 6d 20 |sing the system | 00000a90 74 6f 20 72 75 6e 20 6f 75 74 20 6f 66 20 6d 65 |to run out of me| 00000aa0 6d 6f 72 79 29 20 69 74 20 69 73 0a 68 61 72 6d |mory) it is.harm| 00000ab0 6c 65 73 73 2c 20 62 75 74 20 76 65 72 79 20 63 |less, but very c| 00000ac0 6f 6e 74 61 67 69 6f 75 73 2e 0a 0a 51 75 69 63 |ontagious...Quic| 00000ad0 6b 20 43 68 65 63 6b 20 3a 20 50 72 65 73 73 20 |k Check : Press | 00000ae0 3c 46 31 32 3e 20 61 6e 64 20 74 79 70 65 20 27 |<F12> and type '| 00000af0 68 65 6c 70 20 65 78 74 65 6e 64 27 20 2d 20 61 |help extend' - a| 00000b00 20 6d 65 73 73 61 67 65 20 6f 66 20 74 68 65 20 | message of the | 00000b10 66 6f 72 6d 0a 27 4d 6f 64 75 6c 65 20 69 73 2e |form.'Module is.| 00000b20 2e 2e 27 20 69 6e 64 69 63 61 74 65 73 20 74 68 |..' indicates th| 00000b30 61 74 20 69 74 27 73 20 6c 6f 61 64 65 64 2e 0a |at it's loaded..| 00000b40 0a 32 29 20 49 63 6f 6e 20 28 61 6c 73 6f 20 6b |.2) Icon (also k| 00000b50 6e 6f 77 6e 20 61 73 20 46 69 6c 65 72 29 0a 0a |nown as Filer)..| 00000b60 54 68 65 72 65 20 61 72 65 20 61 20 6e 75 6d 62 |There are a numb| 00000b70 65 72 20 6f 66 20 76 61 72 69 61 6e 74 73 20 6f |er of variants o| 00000b80 66 20 74 68 69 73 20 61 72 6f 75 6e 64 20 2d 20 |f this around - | 00000b90 73 69 78 20 68 61 76 65 20 62 65 65 6e 20 65 6e |six have been en| 00000ba0 63 6f 75 6e 74 65 72 65 64 0a 61 6c 72 65 61 64 |countered.alread| 00000bb0 79 2e 20 41 6c 6c 20 75 73 65 20 21 42 6f 6f 74 |y. All use !Boot| 00000bc0 20 66 69 6c 65 73 20 74 6f 20 70 72 6f 70 61 67 | files to propag| 00000bd0 61 74 65 2e 20 4f 6e 65 20 76 61 72 69 61 6e 74 |ate. One variant| 00000be0 20 64 6f 65 73 20 6e 6f 74 68 69 6e 67 20 61 70 | does nothing ap| 00000bf0 61 72 74 0a 66 72 6f 6d 20 73 70 72 65 61 64 20 |art.from spread | 00000c00 69 74 73 65 6c 66 2e 20 54 68 65 20 6f 74 68 65 |itself. The othe| 00000c10 72 73 20 67 65 6e 65 72 61 74 65 20 61 20 6e 6f |rs generate a no| 00000c20 6e 73 65 6e 73 69 63 61 6c 20 65 72 72 6f 72 20 |nsensical error | 00000c30 6d 65 73 73 61 67 65 20 77 68 65 6e 0a 74 68 65 |message when.the| 00000c40 79 20 69 73 20 66 69 72 73 74 20 6c 6f 61 64 65 |y is first loade| 00000c50 64 2e 0a 0a 51 75 69 63 6b 20 43 68 65 63 6b 20 |d...Quick Check | 00000c60 3a 20 61 20 66 69 6c 65 20 63 61 6c 6c 65 64 20 |: a file called | 00000c70 49 63 6f 6e 2c 20 50 6f 69 73 6f 6e 20 6f 72 20 |Icon, Poison or | 00000c80 4e 65 77 56 69 72 75 73 28 21 29 20 69 6e 73 69 |NewVirus(!) insi| 00000c90 64 65 20 61 6e 0a 61 70 70 6c 69 63 61 74 69 6f |de an.applicatio| 00000ca0 6e 20 77 68 69 63 68 20 69 73 20 66 69 6c 65 74 |n which is filet| 00000cb0 79 70 65 64 20 61 73 20 61 20 73 70 72 69 74 65 |yped as a sprite| 00000cc0 2c 20 62 75 74 20 69 73 20 61 63 74 75 61 6c 6c |, but is actuall| 00000cd0 79 20 42 41 53 49 43 2e 0a 0a 33 29 20 46 46 38 |y BASIC...3) FF8| 00000ce0 20 28 61 6c 73 6f 20 6b 6e 6f 77 6e 20 61 73 20 | (also known as | 00000cf0 41 72 63 68 69 65 56 69 72 75 73 29 0a 0a 54 68 |ArchieVirus)..Th| 00000d00 69 73 20 69 73 20 62 79 20 66 61 72 20 74 68 65 |is is by far the| 00000d10 20 6f 6c 64 65 73 74 20 76 69 72 75 73 2c 20 62 | oldest virus, b| 00000d20 75 74 20 76 61 72 69 6f 75 73 20 62 75 67 73 20 |ut various bugs | 00000d30 69 6e 20 69 74 27 73 20 63 6f 64 69 6e 67 20 6d |in it's coding m| 00000d40 61 6b 65 20 74 68 65 0a 63 68 61 6e 63 65 73 20 |ake the.chances | 00000d50 6f 66 20 69 74 20 73 75 63 63 65 73 73 66 75 6c |of it successful| 00000d60 6c 79 20 69 6e 66 65 63 74 69 6e 67 20 6f 74 68 |ly infecting oth| 00000d70 65 72 20 70 72 6f 67 72 61 6d 73 20 71 75 69 74 |er programs quit| 00000d80 65 20 73 6d 61 6c 6c 2e 0a 0a 55 6e 6c 69 6b 65 |e small...Unlike| 00000d90 20 6d 6f 73 74 20 6f 74 68 65 72 20 76 69 72 75 | most other viru| 00000da0 73 65 73 20 64 69 73 63 75 73 73 65 64 20 68 65 |ses discussed he| 00000db0 72 65 20 69 74 20 77 6f 72 6b 73 20 62 79 20 6d |re it works by m| 00000dc0 65 72 67 69 6e 67 20 69 74 73 65 6c 66 20 77 69 |erging itself wi| 00000dd0 74 68 0a 66 69 6c 65 73 20 74 79 70 65 64 20 46 |th.files typed F| 00000de0 46 38 20 28 41 62 73 6f 6c 75 74 65 29 2e 0a 0a |F8 (Absolute)...| 00000df0 4f 6e 20 74 68 65 20 31 33 74 68 20 6f 66 20 74 |On the 13th of t| 00000e00 68 65 20 6d 6f 6e 74 68 20 61 6e 79 20 69 6e 66 |he month any inf| 00000e10 65 63 74 65 64 20 61 70 70 6c 69 63 61 74 69 6f |ected applicatio| 00000e20 6e 20 77 69 6c 6c 20 66 61 69 6c 20 74 6f 20 72 |n will fail to r| 00000e30 75 6e 2c 20 67 69 76 69 6e 67 0a 74 68 65 20 6d |un, giving.the m| 00000e40 65 73 73 61 67 65 20 27 41 72 63 68 69 65 76 69 |essage 'Archievi| 00000e50 72 75 73 20 73 74 72 69 6b 65 73 20 61 67 61 69 |rus strikes agai| 00000e60 6e 27 2e 0a 0a 51 75 69 63 6b 20 43 68 65 63 6b |n'...Quick Check| 00000e70 20 3a 20 4c 6f 61 64 20 61 20 66 69 6c 65 20 69 | : Load a file i| 00000e80 6e 74 6f 20 21 45 64 69 74 2c 20 61 6e 64 20 6c |nto !Edit, and l| 00000e90 6f 6f 6b 20 66 6f 72 20 27 31 32 31 30 27 20 61 |ook for '1210' a| 00000ea0 74 20 74 68 65 20 65 6e 64 20 6f 66 20 74 68 65 |t the end of the| 00000eb0 0a 66 69 6c 65 20 28 74 68 6f 75 67 68 20 27 48 |.file (though 'H| 00000ec0 79 70 6f 31 32 31 30 27 20 69 6e 64 69 63 61 74 |ypo1210' indicat| 00000ed0 65 73 20 61 6e 20 69 6e 6e 6f 63 75 6c 61 74 69 |es an innoculati| 00000ee0 6f 6e 20 69 6e 73 74 65 61 64 29 2e 0a 0a 34 29 |on instead)...4)| 00000ef0 20 52 49 53 43 4f 53 65 78 74 20 28 61 6c 73 6f | RISCOSext (also| 00000f00 20 6b 6e 6f 77 6e 20 61 73 20 54 68 61 6e 61 74 | known as Thanat| 00000f10 6f 73 29 0a 0a 54 68 69 73 20 69 73 20 62 79 20 |os)..This is by | 00000f20 66 61 72 20 74 68 65 20 77 6f 72 73 74 20 6f 66 |far the worst of| 00000f30 20 74 68 65 20 76 69 72 75 73 65 73 20 64 69 73 | the viruses dis| 00000f40 63 75 73 73 65 64 20 68 65 72 65 2e 20 49 74 20 |cussed here. It | 00000f50 68 61 73 20 76 61 72 69 6f 75 73 20 6e 61 73 74 |has various nast| 00000f60 79 0a 74 68 69 6e 67 73 20 6f 6e 20 70 61 72 74 |y.things on part| 00000f70 69 63 75 6c 61 72 20 64 61 74 65 73 2c 20 77 69 |icular dates, wi| 00000f80 74 68 20 61 20 72 61 6e 64 6f 6d 20 63 68 61 6e |th a random chan| 00000f90 63 65 20 6f 66 20 73 6f 6d 65 74 68 69 6e 67 20 |ce of something | 00000fa0 68 61 70 70 65 6e 69 6e 67 20 61 74 0a 61 6e 79 |happening at.any| 00000fb0 20 74 69 6d 65 2e 20 41 6e 79 20 6f 75 74 62 72 | time. Any outbr| 00000fc0 65 61 6b 73 20 6f 66 20 74 68 69 73 20 76 69 72 |eaks of this vir| 00000fd0 75 73 20 73 68 6f 75 6c 64 20 62 65 20 74 72 65 |us should be tre| 00000fe0 61 74 65 64 20 72 61 70 69 64 6c 79 20 74 6f 20 |ated rapidly to | 00000ff0 61 76 6f 69 64 20 61 6e 79 0a 63 68 61 6e 63 65 |avoid any.chance| 00001000 20 6f 66 20 64 61 74 61 20 6c 6f 73 73 2e 0a 0a | of data loss...| 00001010 51 75 69 63 6b 20 43 68 65 63 6b 20 3a 20 4c 6f |Quick Check : Lo| 00001020 6f 6b 20 69 6e 20 74 68 65 20 54 61 73 6b 20 4d |ok in the Task M| 00001030 61 6e 61 67 65 72 20 64 69 73 70 6c 61 79 20 66 |anager display f| 00001040 6f 72 20 27 54 68 61 6e 61 74 6f 73 27 2e 0a 0a |or 'Thanatos'...| 00001050 35 29 20 44 61 74 61 44 51 4d 20 28 61 6c 73 6f |5) DataDQM (also| 00001060 20 6b 6e 6f 77 6e 20 61 73 20 56 69 67 61 79 56 | known as VigayV| 00001070 69 72 75 73 29 0a 0a 54 68 69 73 20 6f 6e 65 20 |irus)..This one | 00001080 63 61 75 73 65 73 20 74 68 65 20 73 63 72 65 65 |causes the scree| 00001090 6e 20 74 6f 20 6a 75 64 64 65 72 20 61 6e 20 69 |n to judder an i| 000010a0 6e 63 72 65 61 73 69 6e 67 20 61 6d 6f 75 6e 74 |ncreasing amount| 000010b0 20 64 75 72 69 6e 67 20 65 61 63 68 0a 54 68 75 | during each.Thu| 000010c0 72 73 64 61 79 2e 20 0a 0a 51 75 69 63 6b 20 43 |rsday. ..Quick C| 000010d0 68 65 63 6b 20 3a 20 41 6e 20 61 70 70 6c 69 63 |heck : An applic| 000010e0 61 74 69 6f 6e 20 63 61 6c 6c 65 64 20 27 54 61 |ation called 'Ta| 000010f0 73 6b 4d 61 6e 61 67 65 72 27 20 2d 20 6e 6f 74 |skManager' - not| 00001100 20 74 6f 20 62 65 20 63 6f 6e 66 75 73 65 64 20 | to be confused | 00001110 77 69 74 68 0a 74 68 65 20 72 65 61 6c 20 27 54 |with.the real 'T| 00001120 61 73 6b 20 4d 61 6e 61 67 65 72 27 20 77 68 69 |ask Manager' whi| 00001130 63 68 20 77 69 6c 6c 20 61 70 70 65 61 72 20 69 |ch will appear i| 00001140 6e 20 74 68 65 20 6c 69 73 74 20 6f 66 20 6d 6f |n the list of mo| 00001150 64 75 6c 65 20 74 61 73 6b 73 2e 0a 0a 36 29 20 |dule tasks...6) | 00001160 43 65 42 69 74 0a 0a 41 73 69 64 65 20 66 72 6f |CeBit..Aside fro| 00001170 6d 20 69 6e 66 65 63 74 69 6e 67 20 61 70 70 6c |m infecting appl| 00001180 69 63 61 74 69 6f 6e 73 20 28 76 69 61 20 74 68 |ications (via th| 00001190 65 20 21 42 6f 6f 74 20 66 69 6c 65 20 61 73 20 |e !Boot file as | 000011a0 75 73 75 61 6c 29 20 69 74 20 77 69 6c 6c 20 73 |usual) it will s| 000011b0 74 6f 70 0a 70 72 6f 63 65 65 64 69 6e 67 73 20 |top.proceedings | 000011c0 6f 6e 20 65 76 65 72 79 20 31 36 74 68 20 69 6e |on every 16th in| 000011d0 66 65 63 74 69 6f 6e 20 74 6f 20 64 69 73 70 6c |fection to displ| 000011e0 61 79 20 61 20 6d 65 73 73 61 67 65 20 66 72 6f |ay a message fro| 000011f0 6d 20 27 44 65 76 69 6c 2c 20 54 68 65 0a 4c 6f |m 'Devil, The.Lo| 00001200 72 64 20 6f 66 20 44 61 72 6b 6e 65 73 73 27 2e |rd of Darkness'.| 00001210 20 54 68 69 73 20 76 69 72 75 73 20 77 61 73 20 | This virus was | 00001220 64 69 73 63 6f 76 65 72 65 64 20 69 6e 20 47 65 |discovered in Ge| 00001230 72 6d 61 6e 79 2c 20 61 6e 64 20 69 73 20 6e 6f |rmany, and is no| 00001240 74 20 74 68 6f 75 67 68 74 0a 74 6f 20 68 61 76 |t thought.to hav| 00001250 65 20 73 70 72 65 61 64 20 74 6f 20 74 68 65 20 |e spread to the | 00001260 55 4b 20 79 65 74 2e 0a 0a 51 75 69 63 6b 20 43 |UK yet...Quick C| 00001270 68 65 63 6b 20 3a 20 70 72 65 73 73 20 3c 46 31 |heck : press <F1| 00001280 32 3e 2c 20 74 68 65 6e 20 27 68 65 6c 70 20 74 |2>, then 'help t| 00001290 6c 6f 64 6d 6f 64 27 2e 20 41 20 6d 65 73 73 61 |lodmod'. A messa| 000012a0 67 65 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 27 |ge of the form.'| 000012b0 4d 6f 64 75 6c 65 20 69 73 2e 2e 2e 27 20 73 68 |Module is...' sh| 000012c0 6f 77 73 20 74 68 61 74 20 69 74 20 69 73 20 6c |ows that it is l| 000012d0 6f 61 64 65 64 2e 0a 0a 37 29 20 4d 79 4d 6f 64 |oaded...7) MyMod| 000012e0 0a 0a 54 68 69 73 20 69 73 20 61 20 68 61 72 6d |..This is a harm| 000012f0 6c 65 73 73 20 76 69 72 75 73 2c 20 77 68 69 63 |less virus, whic| 00001300 68 20 77 69 6c 6c 20 64 69 73 70 6c 61 79 20 61 |h will display a| 00001310 20 6d 65 73 73 61 67 65 20 6f 6e 20 65 61 63 68 | message on each| 00001320 20 46 72 69 64 61 79 20 31 33 74 68 2e 0a 49 74 | Friday 13th..It| 00001330 20 63 61 6e 20 65 78 69 73 74 20 69 6e 20 74 77 | can exist in tw| 00001340 6f 20 66 6f 72 6d 73 2c 20 74 68 65 20 66 69 72 |o forms, the fir| 00001350 73 74 20 62 65 69 6e 67 20 74 68 65 20 74 72 6f |st being the tro| 00001360 6a 61 6e 20 75 73 65 64 20 74 6f 20 69 6e 69 74 |jan used to init| 00001370 69 61 6c 6c 79 0a 72 65 6c 65 61 73 65 20 69 74 |ially.release it| 00001380 2c 20 61 6e 64 20 74 68 65 20 73 65 63 6f 6e 64 |, and the second| 00001390 20 62 65 69 6e 67 20 74 68 65 20 66 6f 72 6d 20 | being the form | 000013a0 69 6e 20 77 68 69 63 68 20 69 74 20 69 6e 66 65 |in which it infe| 000013b0 63 74 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 |cts applications| 000013c0 2e 0a 0a 51 75 69 63 6b 20 43 68 65 63 6b 20 3a |...Quick Check :| 000013d0 20 70 72 65 73 73 20 3c 46 31 32 3e 20 74 68 65 | press <F12> the| 000013e0 6e 20 27 68 65 6c 70 20 6d 79 6d 6f 64 27 2e 20 |n 'help mymod'. | 000013f0 41 20 6d 65 73 73 61 67 65 20 6f 66 20 74 68 65 |A message of the| 00001400 20 66 6f 72 6d 20 27 4d 6f 64 75 6c 65 0a 69 73 | form 'Module.is| 00001410 2e 2e 2e 27 20 73 68 6f 77 73 20 74 68 61 74 20 |...' shows that | 00001420 69 74 20 69 73 20 6c 6f 61 64 65 64 2e 0a 0a 38 |it is loaded...8| 00001430 29 20 4e 65 74 4d 61 6e 61 67 65 72 2f 54 72 61 |) NetManager/Tra| 00001440 70 48 61 6e 64 6c 65 72 0a 0a 54 68 69 73 20 69 |pHandler..This i| 00001450 73 20 61 20 76 61 72 69 61 74 69 6f 6e 20 6f 66 |s a variation of| 00001460 20 74 68 65 20 21 42 6f 6f 74 20 74 68 65 6d 65 | the !Boot theme| 00001470 2c 20 77 69 74 68 20 74 68 65 20 77 68 6f 6c 65 |, with the whole| 00001480 20 76 69 72 75 73 20 62 65 69 6e 67 20 69 6e 20 | virus being in | 00001490 74 68 65 0a 21 42 6f 6f 74 20 66 69 6c 65 2e 20 |the.!Boot file. | 000014a0 0a 0a 51 75 69 63 6b 20 43 68 65 63 6b 20 3a 20 |..Quick Check : | 000014b0 70 72 65 73 73 20 3c 46 31 32 3e 20 74 68 65 6e |press <F12> then| 000014c0 20 27 68 65 6c 70 20 6e 65 74 6d 61 6e 61 67 65 | 'help netmanage| 000014d0 72 27 20 6f 72 20 27 68 65 6c 70 20 74 72 61 70 |r' or 'help trap| 000014e0 68 61 6e 64 6c 65 72 27 2e 20 41 0a 6d 65 73 73 |handler'. A.mess| 000014f0 61 67 65 20 6f 66 20 74 68 65 20 66 6f 72 6d 20 |age of the form | 00001500 27 4d 6f 64 75 6c 65 20 69 73 2e 2e 2e 27 20 73 |'Module is...' s| 00001510 68 6f 77 73 20 74 68 61 74 20 69 74 20 69 73 20 |hows that it is | 00001520 6c 6f 61 64 65 64 2e 0a 0a 39 29 20 4d 6f 64 75 |loaded...9) Modu| 00001530 6c 65 0a 0a 54 68 69 73 20 69 73 20 71 75 69 74 |le..This is quit| 00001540 65 20 64 69 66 66 65 72 65 6e 74 2c 20 61 6e 64 |e different, and| 00001550 20 77 6f 72 6b 73 20 62 79 20 61 70 70 65 6e 64 | works by append| 00001560 69 6e 67 20 69 74 27 73 20 63 6f 64 65 20 74 6f |ing it's code to| 00001570 20 61 6e 79 20 6d 6f 64 75 6c 65 73 0a 6c 6f 61 | any modules.loa| 00001580 64 65 64 20 77 68 69 6c 73 74 20 61 6e 20 69 6e |ded whilst an in| 00001590 66 65 63 74 65 64 20 6d 6f 64 75 6c 65 20 69 73 |fected module is| 000015a0 20 61 63 74 69 76 65 2e 20 49 74 20 74 68 65 6e | active. It then| 000015b0 20 72 65 64 69 72 65 63 74 73 20 73 6f 6d 65 20 | redirects some | 000015c0 6f 66 20 74 68 65 0a 6d 6f 64 75 6c 65 20 65 6e |of the.module en| 000015d0 74 72 79 20 70 6f 69 6e 74 73 20 74 6f 20 69 74 |try points to it| 000015e0 73 65 6c 66 20 28 61 6e 64 20 74 68 65 6e 20 6f |self (and then o| 000015f0 6e 20 74 6f 20 74 68 65 20 6f 72 69 67 69 6e 61 |n to the origina| 00001600 6c 20 65 6e 74 72 79 20 70 6f 69 6e 74 73 29 2e |l entry points).| 00001610 0a 0a 51 75 69 63 6b 20 43 68 65 63 6b 3a 20 41 |..Quick Check: A| 00001620 6e 79 20 6d 6f 64 75 6c 65 73 20 77 69 74 68 20 |ny modules with | 00001630 63 68 61 6e 67 65 64 20 74 69 6d 65 73 74 61 6d |changed timestam| 00001640 70 73 2c 20 61 6e 64 20 68 61 76 65 20 67 72 6f |ps, and have gro| 00001650 77 6e 20 62 79 20 61 6c 6d 6f 73 74 0a 31 4b 20 |wn by almost.1K | 00001660 61 72 65 20 70 6f 74 65 6e 74 69 61 6c 20 73 75 |are potential su| 00001670 73 70 65 63 74 73 2e 20 4c 6f 61 64 69 6e 67 20 |spects. Loading | 00001680 74 68 65 20 6d 6f 64 75 6c 65 20 69 6e 20 74 6f |the module in to| 00001690 20 21 45 64 69 74 20 77 69 6c 6c 20 72 65 76 65 | !Edit will reve| 000016a0 61 6c 20 74 68 65 0a 41 53 43 49 49 20 73 74 72 |al the.ASCII str| 000016b0 69 6e 67 20 27 50 72 65 73 73 20 61 6e 79 20 6b |ing 'Press any k| 000016c0 65 79 20 74 6f 20 63 6f 6e 74 69 6e 75 65 27 2e |ey to continue'.| 000016d0 0a 0a 2a 2a 20 49 6d 70 6f 72 74 61 6e 74 20 2a |..** Important *| 000016e0 2a 20 56 65 72 73 69 6f 6e 20 31 2e 31 37 20 6f |* Version 1.17 o| 000016f0 66 20 21 4b 69 6c 6c 65 72 20 63 61 6e 20 63 6f |f !Killer can co| 00001700 72 72 75 70 74 20 6d 6f 64 75 6c 65 73 20 77 68 |rrupt modules wh| 00001710 65 6e 20 61 74 74 65 6d 70 74 69 6e 67 0a 74 6f |en attempting.to| 00001720 20 72 65 6d 6f 76 65 20 74 68 69 73 20 76 69 72 | remove this vir| 00001730 75 73 20 28 63 61 75 73 65 64 20 62 79 20 69 74 |us (caused by it| 00001740 20 65 78 70 65 63 74 69 6e 67 20 74 6f 20 66 69 | expecting to fi| 00001750 6e 64 20 61 20 64 69 66 66 65 72 65 6e 74 20 73 |nd a different s| 00001760 74 72 61 69 6e 20 6f 66 0a 74 68 65 20 76 69 72 |train of.the vir| 00001770 75 73 29 2e 20 43 6f 72 72 75 70 74 65 64 20 6d |us). Corrupted m| 00001780 6f 64 75 6c 65 73 20 6d 61 79 20 62 65 20 72 65 |odules may be re| 00001790 70 61 69 72 65 64 20 75 73 69 6e 67 20 74 68 69 |paired using thi| 000017a0 73 20 76 65 72 73 69 6f 6e 20 6f 66 20 21 4b 69 |s version of !Ki| 000017b0 6c 6c 65 72 2e 0a 44 72 61 67 20 61 6e 20 61 66 |ller..Drag an af| 000017c0 66 65 63 74 65 64 20 6d 6f 64 75 6c 65 20 74 6f |fected module to| 000017d0 20 21 4b 69 6c 6c 65 72 27 73 20 69 63 6f 6e 20 | !Killer's icon | 000017e0 77 69 74 68 20 41 4c 54 20 68 65 6c 64 20 64 6f |with ALT held do| 000017f0 77 6e 20 74 6f 20 72 65 70 61 69 72 0a 69 74 2e |wn to repair.it.| 00001800 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 |. | 00001810 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 31 30 | .10| 00001820 29 20 49 6d 61 67 65 0a 0a 54 68 69 73 20 69 73 |) Image..This is| 00001830 20 62 61 73 69 63 61 6c 6c 79 20 61 20 21 42 6f | basically a !Bo| 00001840 6f 74 20 69 6e 66 65 63 74 6f 72 2c 20 62 75 74 |ot infector, but| 00001850 20 77 69 74 68 20 61 20 63 6f 75 70 6c 65 20 6f | with a couple o| 00001860 66 20 76 61 72 69 61 74 69 6f 6e 73 2e 20 41 20 |f variations. A | 00001870 21 62 6f 6f 74 0a 66 69 6c 65 20 69 73 20 63 72 |!boot.file is cr| 00001880 65 61 74 65 64 20 69 66 20 6f 6e 65 20 64 69 64 |eated if one did| 00001890 20 6e 6f 74 20 65 78 69 73 74 2c 20 6f 74 68 65 | not exist, othe| 000018a0 72 77 69 73 65 20 69 74 20 72 65 6e 61 6d 65 73 |rwise it renames| 000018b0 20 21 72 75 6e 20 74 6f 20 21 73 70 72 2c 20 61 | !run to !spr, a| 000018c0 6e 64 0a 73 61 76 65 73 20 61 20 21 72 75 6e 20 |nd.saves a !run | 000018d0 6f 66 20 69 74 27 73 20 6f 77 6e 2e 20 49 74 20 |of it's own. It | 000018e0 6c 6f 61 64 73 20 69 6e 74 6f 20 4f 53 20 77 6f |loads into OS wo| 000018f0 72 6b 73 70 61 63 65 20 61 74 20 35 35 30 30 2c |rkspace at 5500,| 00001900 20 73 6f 20 74 68 65 20 63 68 61 6e 63 65 73 0a | so the chances.| 00001910 6f 66 20 69 74 20 62 65 69 6e 67 20 6f 76 65 72 |of it being over| 00001920 77 72 69 74 74 65 6e 20 61 6e 64 20 63 61 75 73 |written and caus| 00001930 69 6e 67 20 61 20 63 72 61 73 68 20 61 72 65 20 |ing a crash are | 00001940 71 75 69 74 65 20 68 69 67 68 2e 0a 0a 51 75 69 |quite high...Qui| 00001950 63 6b 20 43 68 65 63 6b 3a 20 41 20 66 69 6c 65 |ck Check: A file| 00001960 20 63 61 6c 6c 65 64 20 49 6d 61 67 65 20 61 70 | called Image ap| 00001970 70 65 61 72 69 6e 67 20 69 6e 20 61 70 70 6c 69 |pearing in appli| 00001980 63 61 74 69 6f 6e 20 2d 20 6c 65 6e 67 74 68 20 |cation - length | 00001990 35 31 32 0a 62 79 74 65 73 2c 20 61 6e 64 20 6e |512.bytes, and n| 000019a0 6f 20 66 69 6c 65 74 79 70 65 2e 0a |o filetype..| 000019ac
.