--------------------------
Amiga Virus Encyclopedia
Laureline Female 1.0 Virus
--------------------------
Name : Laureline Female 1.0
Aliases : -
Clone : Laureline Male 1.0
Type : Bootblock
Size : 1024 bytes
Symptoms : No Symptoms
Discovered : 7 july 1994
Way to infect: Boot Infection
Rating : Dangerous
Kickstarts : 1.2
1.3
2.0
3.0
Damage : This bootblock virus is not resetproof and kills ColdCapture,
Coolcapture and the KickTagPointer. To spread itself it patches
the DoIO vector from Exec (quite strange way of patching).
The virus uses the memory from $6e800+1024 bytes to place its
code. The memory will be not allocated and so every program
can trash it and as a result your computer goes to India.
I have tested it with VW on an A500+ with 1MB Chip and I had
very often a complete systemcrash.
After 35 infections a little message will be displayed using
DisplayAlter from the intuition lib.:
'The Laureline Virus V1.0'
'Code by Cat Lord'
',Report: 30.05.93'
'Sex: Female'
'Number of copy: 0002'
'Laureline Male Found: 0000'
'Laureline Female Found: 0000'
'Girl Maked: 0000'
'Disk Found: 0002'
'Dos Boot Found: 0000'
'Other Virus Found: 0000'
'Amiga V1.2: 0000'
'Amiga V1.3: 0001'
'Amiga V2.0: 0000'
'Amiga V3.0: 0000'
The values for "Amiga V... 000x" will be changed by the virus
itself and it really contains the code to check for various
Kickstart versions. Other destruction routines are not placed
in the virus.
Removal : Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III v1.04ß or higher, and also Xvs.library v33.47 or higher
Visible text : The Laureline Virus V1.0
Code by Cat Lord
Report: 30.05.93
Sex: Female
Comments : Better play with your joystick! Some routines
are extremly strange...
Test made by : Markus Schmall & Jan Andersen, Virus Help Team
Screenshot of Laureline Female 1.0 Bootblock virus:
Ascii of Laureline Female 1.0 Bootblock virus (Decoded):