[comp.sys.amiga] WARNING WARNING WARNING!!! Warp may be contain a virus.

11tstark@GALLUX.GALLAUDET.EDU (Timothy Stark) (02/15/89)

Hello Users:

     I gave you that a warning about WARP command. I wrote my own
program called hunk. hunk allow to display hunk section information. 
I was surprised that missing 57000 K bytes in hunk. I noticed 1300 bytes
instead 57000 bytes and data instead code. I wonder who modify warp
command. I remember that I saw warp.arc contains 50,000 bytes. Thanks
for your warning. 

Enclose hunk file:

--------------------------------------------------------
Hunk: Header
	Hunk Table Size: 3
	First Hunk: 0
	Last Hunk: 2
	Hunk #0: 21188 bytes
	Hunk #1: 57320 bytes
	Hunk #2: 4 bytes
Hunk: Code
	Block: 21188 bytes
Hunk: Rel 32
	Hunk #1: 1 offests
Hunk: End
Hunk: Data
	Block: 1392 bytes
Hunk: Rel 32
	Hunk #1: 3 offests
	Hunk #0: 6 offests
Hunk: End
Hunk: BSS
	Block: 4 bytes
Hunk: End
------------------------------------------------------

-- Tim Stark


-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Timothy Stark          |   Internet: 11tstark@gallux.gallaudet.edu
Gallaudet University   |   Bitnet:   11tstark@gallua.bitnet
P.O. Box 1453          |   "Gallaudet University is the only university for
Washington, DC 20002   |    the deaf in the world."
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

noel@uokmax.UUCP (Bamf) (02/15/89)

In article <8902141947.AA00347@gallux.GALLAUDET.EDU> 11tstark@GALLUX.GALLAUDET.EDU (Timothy Stark) writes:
>
>Hello Users:
>
>     I gave you that a warning about WARP command. I wrote my own
>program called hunk. hunk allow to display hunk section information. 
>I was surprised that missing 57000 K bytes in hunk. I noticed 1300 bytes
>instead 57000 bytes and data instead code. I wonder who modify warp
>command. I remember that I saw warp.arc contains 50,000 bytes. Thanks
>for your warning. 
>

    Would somebody please explain this in normal english?  What 50k
bytes?  Warp is only 22k in the executable (the arc's are always
smaller)  Am I just missing something?  The original warp has no
virus (at least not one that was in the code, I can't specify if
YOUR copy of warp has been infected by a IRQ-clone virus)

Noel

-- 
 NEVER date a music major.  At least not one that's named her clarinet "Thor" 
----You want it should sing too?------|    noel@uokmax | ngorelic@uokmax
<Dis-Claimer, Dat-Claimer, to look at |        uokmax!tavern!anyone
 'em, you'd never know the diff...>   | "Beam me up scotty, we're outta beer"

techrat@jolnet.ORPK.IL.US (James S. Burwell) (02/17/89)

file, and found this (Amigados "type opt h" output):

1170: 4E5D4E75 53434121 53434121 00566972    N]NuSCA!SCA!.Vir
1180: 75732062 79204279 7465004C 5344214C    us by Byte.LSD!L
1190: 53442100 53434100 42797465 2042616E    SD!.SCA.Byte Ban
11A0: 64697400 4C534400 0A202020 20202020    dit.LSD..


Bits of the familiar (hopefully not THAT familiar!) virus strings.  Further
down in the file, however, you will find this:

1670: 0A004E6F 20776179 20425544 2E205468    ..No way BUD. Th
1680: 69732064 69736B20 68617320 74686520    is disk has the
1690: 25732056 69727573 210A0A00 424F5400    %s Virus!...BOT.
 |
 V
1860: 2C206865 61642025 640A0A00 54686973    , head %d...This
1870: 2066696C 6520636F 6E746169 6E732074     file contains t
1880: 68652025 73205669 72757321 202D2D20    he %s Virus! --
1890: 496E7374 616C6C20 6469736B 20626566    Install disk bef
18A0: 6F726520 7573696E 672E0A0A 0A005472    ore using.....Tr

Apparently, Warp checks for the presence of some viruses before it will
pack a disk.


techrat

techrat@jolnet.orpk.il.us
    or
{backbone}!killer!jolnet!techrat


 

noel@uokmax.UUCP (Bamf) (02/20/89)

}In article <8902141947.AA00347@gallux.GALLAUDET.EDU> 11tstark@GALLUX.GALLAUDET.EDU (Timothy Stark) writes:
}>
}>Hello Users:
}>
}>     I gave you that a warning about WARP command. I wrote my own
}>program called hunk. hunk allow to display hunk section information. 
}>I was surprised that missing 57000 K bytes in hunk. I noticed 1300 bytes
}>instead 57000 bytes and data instead code. I wonder who modify warp
}>command. I remember that I saw warp.arc contains 50,000 bytes. Thanks
}>for your warning. 
}>  <hunk deleted>
}
}    Would somebody please explain this in normal english?  What 50k
}bytes?  Warp is only 22k in the executable (the arc's are always
}smaller)  Am I just missing something?  The original warp has no
}virus (at least not one that was in the code, I can't specify if
}YOUR copy of warp has been infected by a IRQ-clone virus)
}

     <Open Mouth, insert foot, chew vigorously>

     By normal english, what I meant was in terms that us simpletons can 
understand.  (Hunk? data?)   I was in no way attempting to ridicule Mr. 
Starks english (Which, I have learned is a second language for him.  (and his 
english is far better than my communications skills in his native language.)  
Bravo, Mr. Stark.  My deepest apologies if I offended you, I was simply 
chastising my own ignorance of the innards of computers...)

Humbly,

Noel

-- 
 NEVER date a music major.  At least not one that's named her clarinet "Thor" 
----You want it should sing too?------|    noel@uokmax | ngorelic@uokmax
<Dis-Claimer, Dat-Claimer, to look at |        uokmax!tavern!anyone
 'em, you'd never know the diff...>   | "Beam me up scotty, we're outta beer"