Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!ames!lll-winken!uunet!mcvax!kth!draken!tut!kaarne.tut.fi!pl
From: pl@kaarne.tut.fi (Pertti Lehtinen)
Newsgroups: comp.sys.amiga
Subject: New virus (once more)?
Message-ID: <6570@etana.tut.fi>
Date: 26 Mar 89 22:04:15 GMT
Sender: News@tut.fi
Reply-To: pl@kaarne.tut.fi (Pertti Lehtinen)
Organization: Tampere University of Technology, Finland
Lines: 28


	 I found a new bootblock virus yesterday.
	It is as follows:

		- lives on bootblock
		- inflects all disks inserted
		- hides itself from virusx (presumably from others too)
			( monitors all bootblock accesses and returns dos
			  boot insted of itself)
			( naturally only when active )
		- every inkarnation looks different
			( virus is in encoded form in bootblock,
			  every time with different encoding)
			( only tiny part (decoder) in begin doesn't vary)
		- manifests itself as "LAMER exterminator"
			( when decoded and disassembled )
		- randomly corrupts disk-io causing random GURUS
		- doesn't work with LUCAS-board (namely with 68020.

	I haven't look any more specific details.
	I have this saved so if you need just ask.

					Pertti Lehtinen
					pl@tut.fi
pl@tut.fi				! -------------------------------- !
Pertti Lehtinen				!  Alone at the edge of the world  !
Tampere University of Technology	! -------------------------------- !
Software Systems Laboratory