----------------------------
Amiga Virus Encyclopedia
Look! BBS (AmiExpress) Virus
----------------------------
Look! BBS (AmiExpress) Virus:
Other names: Look BBS
Filelength: 1392 (packed with Turbosqueezer 6.1 spreaded)
1456 unpacked
This is an ordinary AmiExpress mailbox virus, which tries to
manipulate the user.data from the system.
It will be tried to open NIL: and AUX: and a little window.
If all this was ok, a short text will be shown on the window:
"Please wait ! Loading Data "
After his it will be tried to open/load the user.data. If it
was ok, the following text will be shown:
'SORRY MISSING DATA FILE 2 ! PLEASE REBOOT !!! '
After this a simulated GURU will be shown and a new resetroutine
which is not exitable, will be installed in the coolcapture.
Text from the simulated GURU:
' FATAL HARDWARE ERROR'
' Error Nr. 81000 0000A Task Nr. 00000740'
The resetroutine is an endless loop, which changes , if you
press the left mousebutton, the background color via direct
hardware access.
This virus appeared first in Berlin/West Germany and some
say that it`s made by the hacker Conman...The packer used
for this trojan was used several time by this hacker and
some parts of the code look like its handwriting...
Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III with Xvs.library installed
Test by Markus Schmall Detection tested 14.08.1994