Eleni 3 (MessAngel) Installer - Amiga Virus Encyclopedia

VIRUS HELP TEAM




     -------------------------
     Amiga Virus Encyclopedia
     Eleni 3 MessAngel Installer
     -------------------------
    
    
     ELENI 3 Installer + ELENI! SysB file:
     

     ELENI 3 sysb file:
     -----------------
     This name is based on the location of this file: "sys:b"

     This file is 1504 bytes long and contains the bootblockvirus
     and a little DOS  startprogramm for it. Please read  in  the
     bootblockvirussection for more information about this virus.


     ELENI! Installer:
     -----------------
     Filelength: 1808 bytes (packed with TurboSqueezer 8.0)
                 7100 bytes unpacked

     This file pretends to be a viruskiller for the MessAngel
     virus. If you start the programm, the Startup-Sequence
     will be loaded and a new command will be placed in it.
     Due to extremly lame programming, there will be always
     saved 5000 bytes from the Startup-Sequence, even if it
     was only 1000 bytes long before. Then the file "sys:b"
     will be saved to disc and the following message will be
     shown on the screen:

            'MessAngel killer by Docker of Twist!'
            'Checking startup-sequence...'
            'VIRUS FOUND AND REMOVED!!!'
            'Right to disable from memory!'
            '----------------------------'

     This text is a pure fake. For more information about the
     ELENI! virus, please read the description in the bootblock-
     virussection !!!!

                                    Detection tested 30.09.1994.

    In the document there will be mentioned two telephonenumber,
    which you can call, if  you  have  problems  with  the  fake
    viruskiller. This  are , as far as I know, the numbers  from
    the swedish DATOR magazine. Another hint that this virus was
    created somewhere in Scandinavia....
    

    Comment 03.10.1994:
    -------------------
    It appeared a special MessKill Repair programm (v0.9), which
    installs a new LoadSeg patch. This patch will be removed by
    VirusWorkshop, too.

    Special thanks  to MFM/Skid Row for first warning concerning
    this virus !

    Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
             Kickstart all others: VirusZ III, and also Xvs.library must be installed
    
    
    Test by Markus Schmall


    Screenshot of Eleni 3 (MessAngel) Installer Virus:
    Screenshot of the MessAngel Installer
     
    


Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk