------------------------
Amiga Virus Encyclopedia
Excreminator 1 Bomb
------------------------
==== Computer Virus Catalog 1.2: Excreminator_1 Bomb (31-July-1993) ====
Entry...............: Excreminator_1 Bomb
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: ---
where.: ---
Classification......: Bomb (=destructive program)
Length of Virus.....: Memory and media: 936 bytes
Media: 4 byte in "df0:Libs/Exec.library"
--------------------- Preconditions -----------------------------------
Operating System(s).: AMIGA-OS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes --------------------------------------
Easy Identification.: 1) Typical text found in code:
dc.b 'ALL DRIVES FUCKED UP! LAME SUCKER !!!',0,1
dc.w $AA
dc.b $23,'Use a better Viruskiller next time!',0,1
dc.w $AA
dc.b $2D,'e.g. Excreminator II HAHAHA',0,0
2) There is a "startup-sequence" entry called
"Excreminator", and there is always a file
"Libs/Exec.library" with 4 byte length in
root directory.
Type of infection...: ---
Infection Trigger...: ---
Storage media affected: Floppy disks only
Interrupts hooked...: ---
Damage..............: Permanent damage: overwriting all floppy disks
with meaningless data.
Damage Trigger......: Starting this program when the byte in
"Libs/Exec.library" is zero.
Particularities.....: Programming the drive hardware directly.
Similarities........: ---
--------------------- Agents -------------------------------------------
Countermeasures.....: VirusZ 3.06, VT 2.54, VirusChecker 6.28
Countermeasures successful: VirusZ 3.06, VT 2.54
Standard means......: Delete the following files: "Excreminator" and
"libs/Exec.library", as well as the
"startup-sequence" entry. Or use VT 2.54.
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Jens Vogler
Documentation by....: Jens Vogler
Date................: 31-July-1993
Information Source..: Reverse engineering of code
===================== End of Excreminator_1 Bomb =======================
Antivirus removal...: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III with Xvs.library installed
Screenshot of Excreminator 1 Virus:
