Name         : Waft

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : No Clones 

     Symptoms     : No Symptoms

     Discovered   : 22-12-91

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : The Waft-Virus allocates Chip-Memory and copies itself
                    into that area.  Furthermore the CoolCapture Vektor is
                    used to stay resdient in memory. 

                    To  infect  other  disks  the virus patches the DoIO()
                    Vector.  But  NO danger for HD Users: The virus checks
                    for  the  trackdisk.device.  If the virus is active in
                    memory  it  always  shows you an original clean DOS1.3
                    bootblock. 


                    ATTENTION:  'THAT'  means  if  you  want  to  see your
                    bootblock  with  a  bootblock utility, you will always
                    see a normal standard one. 

                    This  unik  stealth-method was first used by the Lamer
                    Exterminator  viruses.  Depending  of  infections  the
                    virus gives out the following alert:


                    "  = = = = oderint dum metuant = = = =

                                ! ! WAFT  ! !

                           Quality made in West-Germany"


                    Click on this gadget to see a @{" Demo " SYSTEM V-IFF:Waft} of the Waft virus
                    alert. Push left mouse button to return.



     Name         : Wahnfried

     Aliases      : No Aliases

     Type/Size    : Boot virus/ 1024 bytes

     Discovered   : 27-11-92

     Way to infect: See below

     Rating       : Not very dangerous

     Kickstarts   : 1.2/1.3 and 2.04 too!

     Damage       : Overwrites bootblock

     Manifestation: DisplayAlert

     Removal      : Install the virus bootblock

     Comments     : The  name  Wahnfried is to read in the bootblock. This
                    virus  can  infect  at  Kickstart 1.2, 1.3,  and later
                    versions.  ATTENTION..be careful this virus can infect
                    your harddisk too!


                    All  written  Wahnfried  infected bootblock don't work
                    because  a  checksum error.  A counter will start, and
                    when  this  counter  reach  0 a DisplayAlert will come
                    at your monitor with the following text:


                    Hardware Failure Press left mouse button to
                    continue  Guru Meditation #00000015.00C03L12
                    Hooligen-Bits randalieren im Datenbus!
                                                      Gruß Erich!


                    Click  on this gadget to see a @{" Demo " SYSTEM V-IFF:Wahnfried} of the Wahnfried
                    virus. Push left mouse button to return.





     Name         : Warhawk

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : Starlight II, Indiana Jones and many more...

     Symptoms     : No Symptoms

     Discovered   : 07-02-92

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2/1.3/2.0

     Damage       : Overwrites boot.

     Removal      : Install boot.

     Comments     : The  Warhawk-Virus copies itself to address $7E600. To
                    stay   resident   in  memory  the  virus  patches  the
                    CoolCapture-Vector.  After  the  next reset  the virus
                    additionally   patches  the  DoIO()-Vector  to  infect
                    other disks. 


                    After  the  4.th infection the virus gives out a (very
                    nice-looking) GFX-Message. In the middle of the screen
                    scrolls  the  following little  message and behind the
                    scroll there are some color-scrolls too:


                    "WARHAWK  SAYS:  KILLING YOUR DISKS WITH OUR VIRUS IS"
                    "A WONDERFUL THING! CONTACT: UCS, PLK 000257-A"
                    "3457 STADTOLDENDORF! HEY BAD! FUCK OFF"




     Name         : Warsaw

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Original     : Lamer Extermiantor 1

     Symptoms     : No Symptoms

     Discovered   : 17-07-91

     Way to infect: Boot infection

     Rating       : Dangerous

     Kickstarts   : 1.2/1.3

     Damage       : Overwrites boot + Destroys Blocks.

     Removal      : Install boot.

     Comments     : The  Warsaw-Virus  is a Lamer Exterminator-Clone. Dif-
                    ferences:

                  - The Bootblock-crypt-routine was removed:

                  -> See Lamer Exterminator for more information