Name         : DAT' 89

     Aliases      : No Aliases

     Type/Size    : Boot/1024

     Clones       : No Clones 

     Symptoms     : No Symptoms

     Discovered   : -

     Way to infect: Boot infection

     Rating       : Very Dangerous

     Kickstarts   : only 1.2

     Damage       : Overwrites boot + Root Block !!!

     Manifestation: Pretend to be a Anti-Virus boot.

     Removal      : Install boot.

     Comments     : If  you are starting a DAT'89 infected disk the virus
                    changes  the KICK-Vectors to stay resident in memory.
                    The  virus  copies  itself always to the same memory-
                    address ($7F800).


                    It  uses  the  DoIO()-Vector from the exec.library to
                    infect other disks. Depending of infections the virus
                    gives out the following alert:

                    "DAT'89 !!!"

                    In the bootblock you can read:


                    "THIS  BOOT  RESETS ALL VECTORS SO THAT NO VIRUS CAN"
                    "TAKE  CONTROL  OVER  THE  COMPUTER!  SIGNED: DAT'89"


     DANGER       : On  every  infection  the  virus  overwrites the root
                    block  of  all  disks. Use Disksalv 2 to salvage lost
                    files.
 
A.D 05-94