Excreminator_1 Bomb (31-July-1993)
Entry...............: Excreminator_1 Bomb
Alias(es)...........: ---
Virus Strain........: ---
Virus detected when.: ---
              where.: ---
Classification......: Bomb (=destructive program)
Length of Virus.....: Memory and media: 936 bytes 
                      Media: 4 byte in "df0:Libs/Exec.library"
--------------------- Preconditions -----------------------------------
Operating System(s).: AMIGA-OS
Version/Release.....: 1.2/all, 1.3/all, 2.0/all, 3.0/all
Computer model(s)...: All AMIGA models
--------------------- Attributes --------------------------------------
Easy Identification.: 1) Typical text found in code:
                     dc.b 'ALL DRIVES FUCKED UP! LAME SUCKER !!!',0,1
                     dc.w $AA
                     dc.b $23,'Use a better Viruskiller next time!',0,1
                     dc.w $AA
                     dc.b $2D,'e.g. Excreminator II HAHAHA',0,0
                      2) There is a "startup-sequence" entry called
                         "Excreminator", and there is always a file
                         "Libs/Exec.library" with 4 byte length in
                         root directory.
Type of infection...: ---
Infection Trigger...: ---
Storage media affected: Floppy disks only
Interrupts hooked...: ---
Damage..............: Permanent damage: overwriting all floppy disks 
                         with meaningless data.
Damage Trigger......: Starting this program when the byte in
                         "Libs/Exec.library" is zero.
Particularities.....: Programming the drive hardware directly.
Similarities........: ---
--------------------- Agents -------------------------------------------
Countermeasures.....: VirusZ 3.06, VT 2.54, VirusChecker 6.28
Countermeasures successful: VirusZ 3.06, VT 2.54
Standard means......: Delete the following files: "Excreminator" and
                         "libs/Exec.library", as well as the 
                         "startup-sequence" entry. Or use VT 2.54.
--------------------- Acknowledgement ----------------------------------
Location............: Virus Test Center, University Hamburg, Germany
Classification by...: Jens Vogler
Documentation by....: Jens Vogler
Date................: 31-July-1993
Information Source..: Reverse engineering of code

.