
                                     QUITWXYC
                     (C) Copyright 1995 Guillermo M. Malln F.

                              Guillermo M. Malln F.
                            Universidad Iberoamericana
                Universidad Nacional Autnoma de Mxico (DGSCA UNAM)

Every day there are more computer viruses causing problems to users in all
countries. Mxico is not an exception and the UNAM (National University of
Mxico) organized a research group to help reduce the problem. This program
is a result of that research.

WXYC virus is becoming relatively common in Mxico. The problem with it is
that the ordinary antiviral programs, like F-PROT and McAfee's, can't remove
it, otherwise, it is a simple virus.

In diskettes, it puts the original boot sector at the end of the root directory,
and in hard disks, instead of infecting the Master Boot Record, it attacks the
boot sector of the first partition, usually DOS, and puts the original contents
in sector three, head zero, track zero. In large hard disks this area is used
to store a BIOS extension to handle more than 1024 cylinders, causing
irreversible damage.

This program removes the WXYC virus from hard disks and diskettes.

INSTRUCTIONS:

        a) make a backup of the files in the disk to be cleaned
        b) boot from a clean diskette
        c) type: QUITWXYC  [a: | b: | c:]

Don't forget to clean your backup disks! (The virus will be in the boot
record, but does not afect program files)

If there is any problem, the program will tell you which one.

YOU USE THIS PROGRAM AT YOUR OWN RISK, THE AUTHOR WILL NOT ACCEPT ANY
RESPONSIBILITY IN ANY DAMAGE THAT ITS USAGE MAY CAUSE.

This program can be distributed freely by nonprofit organizations. Companies
and Government agencies must ask for a written authorization to distribute it
in any form. This program can be distributed in CD-ROMs containing collections
of programs.

Anyone can use it as long as no profit is made from its usage.

March 1995

Guillermo M. Malln F.
mallen@servidor.unam.mx

Phone +525 683-9376
FAX   +525 683-9263
