

========================================================================
= ALL YOU REALLY, REALLY WANTED TO KNOW ABOUT LINKVIRUSES, AND LESS!!! =
========================================================================

Hi Mark + Everybody!
	Yes it`s me again, and I`m just writing this basically because of
what Mike said in the extra ACC7 disk about that linkvirus. Well I don`t
know if you know, but somehow or other, I found that very same virus on
that disk! And for everybody who want`s to see what the text Mike was
talking about, I`ve included a memory dump of it with this file, courtsey
of AMon. Note: This is NOT THE VIRUS, just the small section of text
included within. OK? I just said that in case somebody panics and thinks if
they load it that it will infect them. Anyway, as Mike said, it`s about 10%
English and 90% German. Just for the purposes of investigation, I rooted
out a German dictionary to see what it said, (I may live in Germany, but I
can hardly speak any of it!). 

    Basically the last part which says something like 
"JEFF=ungefahrlich+schutzt vor Viren" which caught my attention,
purely because he uses the word "Viren" which, as you may know, is German
for Virus! (I think!) The other two words mean something like `Not
dangerous/Harmless+something like protection or defence, (these German
dictionarys can get very complex you know!) pretty strange, huh? The rest
of it is the usual greetings stuff and the slagging off of PC`s ST`s and
C64`s (something about their owners needing pampers?) it also says that 
`C` is for `Losers` (Lamers?) and contains some drivel about his Agnus
being so `fat`! (Typical hacker talk, eh!) 

    The reason Mike Cross probably couldn`t find it, was because the virus
uses the little trick of naming itself with some strange blank characters,
possibly spaces or weird escape codes so that if you type `dir` it won`t
show up, although when I tried to list it, nothing appeared either for some
reason. Another thing is when I tried to load the directory from SID, after
reading it, my machine just hung up, which it also sometimes did when I
tried reading the file with the AZ text editor.

    For those in the know about viruses, etc, it also modifies the
KickTagPtr, and the CoolCapture vectors, although any virus maker worth 
it`s salt will spot this and rectify it. 

As far as I can tell, if you find this virus (you got ACC7 Extras?) then
you should load something like diskmaster V3, which can find it and says
it`s called `AAA` or something like that, and is just over 2K long. You
should then delete this ba***rd (as Mike would say), and check if it has
spread, (I`m not sure if it can as I haven`t really checked.)

    Looking at the text again, I think it`s called something like
"BUTONIC HV 3.00", made way back in February `89. I`d advise people just to
check their disks, and as another thing, you CAN get Viruskillers for
linkviruses, unfortunately they need to be upgraded for each new virus,
unlike bootblock viruses where you can spot an iffy bootblock with virusX.

    Hope this little file has made entertaing reading!?!? and I`ll be back
with some more *great* code and stuff soon, 

    Well it`s 10:35pm on Thursday, 7th February, 1991, and it`s going to be
my birthday in a mere 1 hour, 25 minutes, and I`ll be sixteen, and old
enough to get married, etc! Unfortunately I`ve had a higher level Maths
mock exam, a higher level Physics mock exam, and two German Exams today
(and I still can`t speak much German!) So it`s been a knackering day and
I`m off to bed, ready for my German oral tomorrow. Oh what a wonderful
existence I lead.......

			Bye bye now,

				Neil.

P.S. I liked all those BBS quotes on the last ACC disk, and I also liked 
WIG`s little demo (yes, the one he was very proud of!), simple, but
effective.

    
