------------------------
     Amiga Virus Encyclopedia
     Warhawk Virus
     ------------------------

     
     Name         : Warhawk

     Aliases      : No Aliases

     Clones       : Starlight II, Indiana Jones and many more...

     Type         : Bootblock
     
     Size         : 1024 bytes

     Symptoms     : No Symptoms

     Discovered   : 7 february 1992

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2
                    1.3
                    2.0

     Damage       : Overwrites boot

     Comments     : The  Warhawk-Virus copies itself to address $7E600. To
                    stay   resident   in  memory  the  virus  patches  the
                    CoolCapture-Vector.  After  the  next reset  the virus
                    additionally   patches  the  DoIO()-Vector  to  infect
                    other disks. 

                    After  the  4.th infection the virus gives out a (very
                    nice-looking) GFX-Message. In the middle of the screen
                    scrolls  the  following little  message and behind the
                    scroll there are some color-scrolls too:

                    "WARHAWK  SAYS:  KILLING YOUR DISKS WITH OUR VIRUS IS"
                    "A WONDERFUL THING! CONTACT: UCS, PLK 000257-A"
                    "3457 STADTOLDENDORF! HEY BAD! FUCK OFF"

     Removal      : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                    Kickstart all others: VirusZ III with Xvs.library installed

     Test made by : Safe Hex International                


     Animated picture of the Warhawk virus:
     


     Ascii of Warhawk virus: