LAMER EXTERMINATOR 1.0 Virus

Alias:---
Strain:LAMER EXTERMINATOR Strain
detected when:October 1989
where:Elmshorn, Germany
Classification:Encrypting System virus (bootblock), resident
Length:1. Length on storage medium: 1024 byte 2. Length in RAM : 1024 byte

Preconditions

Operating System(s):AMIGA-DOS
Version/Release:1.2/33.180
Computer model(s):AMIGA 500, AMIGA 1000, AMIGA 2000A, AMIGA 2000B
Caroname:Lamer.1_0

Attributes

Easy identification:typical text: bootblock: --- in memory: 'The LAMER Exterminator !!!'

Type of Infection:

System infection: RAM resident, reset resident, bootblock

Infection Technique:
Infection Trigger:reset ( CONTROL + Left-AMIGA + Right-AMIGA ); any disk access
Storage Media affected:floppy disks (3.5" and 5.25")
Interrupts hooked:---
Stealth:
Tunneling/Selfprot:
Oligo/Polymorphism:
Encoding Method:
Damage:Permanent damage: overwriting bootblock; simulation of standard bootblocks when examined with any tool; destroys blocks by overwriting them 84-times with the string 'LAMER!': this will cause a read/write error on affected storage media. Transient damage: allocates 1024 bytes in RAM
Damage Trigger:Permanent damage: reset; any disk access; virus action after 3 resets and 1 infection. Transient damage: ---
Particularities:Uses StartIOVector; other resident programs using system resident list (KickTagPointer, KickMemPointer) are shut down; virus encodes itself at every new infection (Bytes 78-917).
Similarities:LAMER EXTERMINATOR virus strain

Agents

Countermeasures:without restrictions: CHECKVECTORS 2.2, VIRUSX 4.0, with restrictions: GUARDIAN 1.2
Standard means:CHECKVECTORS 2.2

Acknowledgements

Location:Virus Test Center, University Hamburg, Germany
Classification by:Wolfram Schmidt
Documentation by:Wolfram Schmidt
Date:15-July-1991
Information Source:---

(c) 1996 Virus-Test-Center, University of Hamburg