CLIST Virus (15-July-1991) Entry...............: CLIST Virus Alias(es)...........: --- Virus Strain........: LAMER EXTERMINATOR Strain Virus detected when.: January 1991 where.: Australia Classification......: System virus (bootblock), resident, encrypting Length of Virus.....: 1. Length on storage medium: 1024 byte 2. Length in RAM : 1024 byte --------------------- Preconditions ---------------------------------- Operating System(s).: AMIGA-DOS Version/Release.....: 1.2/33.180 Computer model(s)...: AMIGA 500, AMIGA 1000, AMIGA 2000A, AMIGA 2000B --------------------- Attributes ------------------------------------- Easy Identification.: Typical text: bootblock: --- in memory:'clist.library clist 33.80 (8 Oct 1986)' Self-identification.: Kicktag pointer points to virus data Type of infection...: System infection: RAM resident, reset resident, bootblock Infection Trigger...: reset (CONTROL+Left-AMIGA+Right-AMIGA), any disk access Storage media affected: floppy disks 3.5" and 5.25") Interrupts hooked...: --- Damage..............: Permanent damage: overwriting bootblock; simulation of standard bootblocks when examined with any tool; removes expansion RAM this reducing available memory; virus allocates 1024 bytes in memory and 1096 bytes overall. Transient damage: --- Damage Trigger......: Permanent damage: reset; any disk access Transient damage: -- Particularities....: uses StartIOVector; other resident programs using system resident list (KickTagPointer, KickMemPointer) are shutdown; virus encodes itself at every new infection (bytes 54-864). Similarities........: LAMER EXTERMINATOR virus strain --------------------- Agents ----------------------------------------- Countermeasures.....: Names of tested products of Category 1-6: Category 1: .2 Monitoring System Vectors: CHECKVECTORS 2.2 .3 Monitoring System Areas: CHECKVECTORS 2.2, GUARDIAN 1.2, VIRUSX 4.0 Category 2: Alteration Detection: --- Category 3: Eradication: CHECKVECTORS 2.2, VIRUSX 4.0 Category 4: Vaccine: --- Category 5: Hardware Methods: --- Category 6: Cryptographic Methods: --- Countermeasures successful: without restrictions: CHECKVECTORS 2.2, VIRUSX 4.0 with restrictions: GUARDIAN 1.2 Standard means......: CHECKVECTORS 2.2 --------------------- Acknowledgement -------------------------------- Location............: Virus Test Center, University Hamburg, Germany Classification by...: Wolfram Schmidt Documentation by....: Wolfram Schmidt Date................: 15-July-1991 Information Source..: --- .