Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!erd From: erd@tut.cis.ohio-state.edu (Ethan R. Dicks) Newsgroups: comp.sys.amiga Subject: Re: Lamer Exterminator virus caught and being analyzed Message-ID: <41582@tut.cis.ohio-state.edu> Date: 4 Apr 89 14:45:05 GMT References: <41408@tut.cis.ohio-state.edu> <16647@cup.portal.com> Reply-To: Ethan R. Dicks Distribution: na Organization: Ohio State University Computer and Information Science Lines: 43 In article <16647@cup.portal.com> Doug_B_Erdely@cup.portal.com writes: >Hate to tell you this Ethan, but Steve Tibbet has already figured this virus >out. In fact, it is one of the many viruses that Virus X3.2 checks for and >does away with. > > - Doug - > > Doug_B_Erdely@Portal.Cup.Com OK... so where is VirusX 3.2? Since I do NOT like feeding the phone company (any of them) I do not dial up bulletin boards. I get my software via ftp, comp.amiga.binaries/sources, and from the prolific Mr. Fred Fish. If it has been sent to Bob Page, I will understand; he has his hands full right now, getting settled in. If it has not, why hasn't it? The reason I decided to dissect the virus is because I have seen writeups in lots of Amiga magazines regarding the SCA and Byte Bandit viruses, but almost nothing on any others. If anyone is tearing the others apart, they are not doing a good job of disseminating the information gained from the exercise. I am not suprised that VirusX 3.2 checks for the Lamer Exterminator. Steve does an excellent job keeping up with the latest crud. What I have not seen are explanations of the symptoms and the effects of *all* the viruses. I write articles for the local newsletter, informing the Central Ohio Amiga Users (through AmIcon) of the effects of viruses, so that they might identify them earlier, if infected. Only a handful of our group has access to comp.sys.amiga, and some of them only have read access (due to the policies of their employers) One of the things I put into my articles is a list of symptoms indicating infection by a particular virus. Another thing I put in the articles is the list of back-doors, such as the left mouse button for the SCA virus, or the keypress trick for the ByteBandit. Sorry to be long winded, but I felt the need to carve up this beastie because I did not have access to information on this particular virus. -ethan -- Ethan R. Dicks | ###### This signifies that the poster is a member in Software Results Corp| ## good sitting of Inertia House: Bodies at rest. 940 Freeway Drive N. | ## Columbus OH 43229 | ###### "You get it, you're closer."