--------------------------------------------------------------------- VIRUSSCANLIST : LIST OF DANGEROUS ARCHIVES,FAKES, & BBS INFILTRATORS! --------------------------------------------------------------------- Version: 1.17 - Date: 14-01-95 - Time: 15:47 *** Copyrights *** No copyrights, but it's not allowed to change any part of this text without the permission of the author. Spread the word and the file! If you've got any contributions or additions to this list, then let me know by sending a netmail message or new 'WARNINGS' concerning new "Dangerous" archive names (Please write down all you know about the archive and the virus -> Length (packed/unpacked), name, where did you find it,etc.). If you know lengths missing in this list (Shown as '?'), then please let me know too. A nice info format to use would be: - Archive name - length of archive (Packed & Unpacked) - Date of archive - file or program name, - Kind of Virus (BB, File, Link, Trojan, Fake version, etc.) - Date of file/Program - Where did you find it (Country, BBS, Network, etc.) - Type of file it fakes : (Example: Loadwb, Fastcall Hacker) E-Mail addresses: Internet/Usenet jhl@grafix.xs4all.nl (Preferred) Nla 14:101/200.20 Amy 39:153/201.20 Fido 2:286/407.20 Ldy 69:100/102.20 Anime 73:700/100.20 Penthe 17:100/100.20 *** Disclaimer *** Delete files / archives / etc. at your own risk! This list should be 100% save, but nerdz could easily change names in the filelist. See 'Updates' for netz or BBS's who will have a 100% save version! *** Function *** To keep Sysops & ALL Amiga users up-to-date with info about archives / programs / etc. containing viruses/trojans.etc, fake versions of software and dangerous BBS-Program infiltrators. *** What to do When.. *** When you find any of the archive names on a BBS or a name that looks like it (It could be the same archive, coz archive names change very often!), contact the sysop and tell him to examine the archive and / or TRASH the File! When you find any archive or program in your own library, get rid of it immediately (DON'T SPREAD IT!). *** Checking *** If you've already checked your stuff with an earlier version of this file, it's not necessary to check the whole list anymore. Look at 'History' if there's any modification to the old filenames. This only works out for the second last version. *** Updates *** File Updates will be uploaded to Aminet : /Util/virus Mail Updates will be mailed to the following netz: - Internet/Usenet -> comp.sys.amiga.misc - Amynet -> Virus_Amy File Updates will be uploaded to the following BBS's: - Hardware BBS Sysop : Ron Klinkien Node 1 : + 31 01840 - 17373 28k8 24 hours for all users - Data Control BBS Sysop : Fred Van Vliet Node 1 : + 31 010 - 4196669 28k8 24 hours for all users - Grafix Attack BBS Sysop : Kees Huizer Node 1 : + 31 010 - 4745816 14k4 24 hours for all users Node 2 : + 31 010 - 4741062 19k2 24 hours for all users Node 3 : + 31 010 - 4744682 28k8 24 hours for all users *** History *** Modifications towards Version 1.16 (26-12-94) are: - 10 new names : 100 - 109 - No modifications to (V1.16) filenames. - VirusList is now available from Aminet : /Util/Virus - Copyright clarification made. NO changes mates! - New E-Mail addresses: AnimeNet & PentheMusicNet! - Ripped out 'Incubator' in 'Killer Info'. Crashes to often in Startup! - Added 'Info Format' for new filenames in 'Copyrights' topic. *** Killer Info *** The best AntiVirus Progs available : (in alphabetic order) Name: Latest: Rel. Date: Author: ----- ------- ---------- ------- BootX 5.23b with recog 2.18 (22-07-94) Peter Stuer & SHI Crunched File Xaminer 5.560 (05-01-95) Bob Rye & Marcus Mroczkowski VirusChecker 6.47 (31-12-94) John Veldthuis VirusTerminator 2.69 (04-12-94) Heiner Schneegold VirusWorkShop 4.6 (08-01-95) Markus Schmall VirusZ II 1.12 (12-12-94) Georg Hörmann XTruder 1.3 (06-01-95) Martin Wulffeld *** Thanx to *** - Markus Schmall, for his contributions to this list and his fast virus analyses. - Kees Huizer, for getting the newest anti-virus warez from Aminet and uploading the VLIST archive to AmiNet. :) - Ron Klinkien, for getting the newest anti-virus warez from Aminet. ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ NO. NAME TYPE BYTES EXTRA INFO --- ---- ---- ----- ---------- 1. UA62.LHA (Archive) 28170 2. UA (Program) 26828 3. CLP_WOW.EXE (Executable) ? bullet.lha (Archive) ? 4. MERRY.EXE (Executable) 61440 271360 5. KAIRO.EXE (Executable) ? Kiaro.exe (Executable) ? In other sources 6. viewtek22.lha (Archive) 93844 7. vmk30.lha (Archive) ? 8. vmk (Program) 2620 Unpacked 9. VirusMemKill 3.00 (File_ID.Diz) ? HD Formatter! 10. Trz-Ntro.lha (Archive) ? 11. X-copy 8.5 (Program) 66424 12. Decompiler (Program) 53992 AMOS Util look-a-like! 53990 13. Hacker (Program) 20980 14. DOSTrace 2.18 (File) 10636 FAKE,NO VIRUS! 15. DMS 2.13 (File) 94220 16. Dms213ur.lha (Archive) ? 17. NoCare27.lha (Archive) 28848 Unpacked 13556 Imploder4.0 packed 28840 Unpacked 18. DMS2.12.lha (Archive) 92208 FAKE,NO VIRUS! 19. Ua62.lha (Archive) 26828 20. Ua-dialer V6.2 (File) 51956 21. Ncomm 3.09 (File) 221056 22. HD_speedup.exe (Executable) 6252 23. HD_Speedup.lha (Archive) ? 24. Clx_doom.lha (Archive) 32020 25. Elien_virus_ (Program) ? No Killer but Installer! checker 0.1 anti_elien.lha (Archive) ? 26. Elien.exe (Executable) 596 (P-packed) 1016 27. Esp-dmpd.lha (Archive) ? 28. Diskmaster 2 PAL Fix (Program) ? 29. Amix43.lha (Archive) 176764 FAKE, NO VIRUS! 30. God-j12.lha (Archive) ? 31. JiZaNSi 1.2 (File) 22008 Unpacked 32. Dskslv3.DMS (Archive) 106584 33. Disksalv 3.01 (File) 3604 34. Descr40.lha (Archive) ? 35. Descriptor4.0 (Program) 3484 36. Z-Speed.lha (Archive) ? 37. Zenith Modem Speeder (Program) 3484 38. Jeff-Viruskiller (Program) 9960 V2.67 39. Mcheck.lha (Archive) 16772 Modemchecker 1.1 40. Gzus001.lha (Archive) 12252 12520 15016 Unpacked 41. messkill.lha (Archive) ? 42. Messangelviruskiller-Virus (Program) 1808 Packed 7100 Unpacked 43. Eleni V3 (Program) 1504 44. VirusZII V1.10 (Program) 70452 FAKE, NO VIRUS! 45. DSLV4367.LHA (Archive) 106584 See '32.' also 46. Madison.exe (Executable) ? Maybe a TROJAN! (Intro) 47. MST-CF22.LHA (Archive) ? ConfTop-Trojan,HD Crasher! 48. kef_ani.lha (Archive) 179143 See '49.' also 49. Anim_demo.exe (Executable) 1795068 CLP-Trojan! 50. SPEEDER.EXE (Executable) 7016 See '34.' & '35.' & '36.' 51. d-aex220.lha (Archive) 135400 AmiExpr2.20-Virus! 52. Bluebox.lzh (Archive) 23033 53. Freedom!.LZH (Archive) 8153 54. -p-turbo.dms (Archive) ? 55. GOD-FBTR.LHA (Archive) 3836 LHACHECK-BBS-Trojan! 56. xcopy65e.lha (Archive) 25360 57. XCopyPro V6.5 (Program) 28336 See '56.' also 58. bnuke15.lha (Archive) 35050 scan.x-BBS-Bomb! 59. SNOOPD16.LHA (Archive) 35444 Snoopdos1.6 Virus! 60. -L-STOCK.LHA (Archive) ? stock.rexx (File) 74576 (door game for /X) has a BACKDOOR (DROPS UPLOAD STATUS OF USER TO 0 !!!) 61. demo99.lha (Archive) ? (No Lha file, but TROJAN KILLER V3.0) 62. demo98.lha (Archive) ? (No Lha file, but TROJAN KILLER V3.0) 63. dm-tr.lha (Archive) 5135 ZAPA_B.Door Virus! 64. dm-trash (Program) 4764 See '63.' also 65. XPRZSPEED.LHA (Archive) 8703 See '36.' & '37.' also 66. MVK.lzh (Archive) 1171 FileVirus! 67. qtx_pow.lzh (Archive) 139670 PP-Bomb! 68. Virusblaster.LZH (Archive) 27944 69. Guardian.DMS (Archive) ? Get rid of this F#cker! 70. Jismtro.exe (Executable) ? Infiltrate or damage BBS! 71. Killkim.exe (Executable) ? Infiltrate or damage BBS! 72. FJPEG111.lha (Archive) ? Debugger Virus! 73. zk-320.lha (Archive) ? Hacked AmiExpress/NO VIRUS Many backdoors! 74. ATX-chat.lha (Archive) 13492 Unpacked M_Chat Virus! 75. aereg`em.lha (Archive) ? (Infiltrator for Ami-Express V3.9) 76. M-WHO.lha (Archive) ? (Infiltrator Backdoor Virus) 77. ATX_NADA.dms (.DMS) ? BBS Infiltrator! Mongo05.exe (Executable) 1464 PP4.0 Packed 2260 Unpacked Mongo09.exe (Executable) 1708 PP4.0 Packed 3368 Unpacked 78. FLT_DSQ.DMS (.DMS) ? BBS Infiltrator! 79. PHA-1994.exe (Executable) 57508 Unpacked 80. MST-INTE.exe (Executable) 51256 Unpacked MST-VEC Format Virus! 81. dpl-mam1.dms (.DMS) 523162 Commander-Virus Infected! 82. dpl-mam2.dms (.DMS) 602250 Commander-Virus Infected! 83. Denistro.exe (Executable) 64924 66592 71800 84. Vampire.exe (Executable) ? (infector length 875778 bytes) 85. Commander Viruskiller by Focus Design (DON'T SPREAD IT!!!) It contains the entire code of the Commander Virus! (Program) 2252 86. dpl-de99.lha (.DMS) ? Virus infected! 87. FuckShop.exe (Executable) ? Virus infected! 88. VirusZ II 1.05 (Program) 68544 FAKE! Use NEW Version 1.12 89. VirusZ II 1.04 (Program) ? FAKE! Use NEW Version 1.12 90. VirusZ II 1.03 (Program) 67076 FAKE! Use NEW Version 1.12 91. VirusZ II 1.02 (Program) ? FAKE! Use NEW Version 1.12 92. ToolsDaemon 2.2 (Program) ? FAKE Version! 93. ModuleMaster 1.7 (Program) 20364 FAKE! PP Bomb! 94. SnoopDos 1.9 (Program) ? FAKE Version! 95. SnoopDos 2.1 (Program) ? FAKE Version! 96. DWEdit 1.62 (Program) ? FAKE Version! 97. DI Ansi Ed 2.8 (Program) ? FAKE DIAne AnsiAnimEditor! 98. Lha V3.00 (Program) 54440 Unpacked / Trojan Horse! 99. clx_doom.exe (Executable) 406012 Packed 100. dms2.06.exe (Executable) 45732 Trojan! FastCall Hacker 47532 101. Surprise Trojan (Program) 39296 HD Formatter! 102. dms206.lha (Archive) ? See '100.' also 103. cry_206.lha (Archive) ? See '100.' also 104. Surprise.exe (Executable) ? See '101.' also 105. EXE4.7.LHA (Archive) ? 2x Commander Virus installed! 106. Copy_LX 1.03 Trojan (Program) 6932 Trojan Horse! Fake LX1.03 107. SS-II Trojan (Program) 57449 Trojan Horse! Fake mega- trainer of Silent ServiceII 108. HST-CON.LHA (Archive) ? HD Formatter! Fake HST Util! 109. HST-FULL.EXE (Executable) ? HD Formatter! Fake HST Util! ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Signed : Jan Hendrik Lots alias PRIME TIME