Magnetic Pages Article | 1995-09-02 | 30KB | 94 lines
MPARTICLE
<`Pq^
.XH?K
8tq6)
<F 8O
090\`
PV?6q
?;2<P
F6#Ga
Warnung !
C Das File "slinkv10.lha" enthaelt ein trojanisches Pferd, welchesN versucht, dass SYS: Laufwerk zu formatieren. Der Code aehnelt sehr dem CodeH in VCKey110.lha. Es wurde auch wieder ein 4eb9 Linker benutzt, um den< pp-gepackten Viruscode an das eigentliche File zu linken.
" Die FileID sieht wie folgt aus:
- ~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~* ScanLink v1.0 - Latest hack in the war( against viruses! This one can detect- linkviruses yet unknown using new antivir! technology. Latest from S.H.I
|- ~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
O Das File ist in der Nacht vom 11.7. auf den 12.7. auf europ
ischen Mailboxen
aufgetaucht...
! Also bitte das File loeschen !
Gruss
Markus Schmall
Hallo zusammen,
D ich habe die diskusion
ber "Amigas von Esslinger?" in diesem BrettL mitverfolgt, darum glaube ich das Euch diese Artikel aus dem neuesten Amiga" Magazin 8/95 interressieren wird.
Zitat:
Fehler im Detail
^^^^^^^^^^^^^^^^
AMIGA 4000T
lschlicherweise haben wir in Ausgabe 7/95 berichtet, da
das Geh
use-DesignM des Amiga 4000 Tower von Prof. Dr. Esslinger (-frogdesign-) stammt. Dies istO leider falsch. Das Geh
use wurde von BjOrn Rybakken der Firma Bates StrategiskI Design aus Oslo entworfen. Herr Rybakken ist bekannt f
r sein Design derD Scala-Oberfl
che und -Fonts und arbeitet seid Jahren mit dem Amiga.O Das Bild des Towers, das im Editorial zu sehen war, hat Walter Ostern von FamoN A/S mit Real 3D V3.0 berechnen lassen; es ist das Einzelbild einer Animation.
! Per Sverre Wold-Hansen, Norwegen
Zitat Ende
< Viruses found in Hdtb409.lha and lzx120t.lha ! Delete it !E Viren gefunden in hdtb409.lha und lzx120t.lha ! Bitte diese Archive
eschen !
WireFace Type C Virus:
----------------------
A found in lzx120t.lha (trojan in lzx_1.20t.lha 83660 bytes long)@ and in hdtb409.lha (trojan in hdtoolsbox2 106508 bytes long)
D Found when: night from 21.07. to 22.07. 1995 on a european mailbox, See also at: VCKey110.lha and SLINKV10.lha
F Both files were created using the 4eb9 linking method and are highlyF dangerous ! The linked file is 1880 bytes powerpacked and 2876 bytesC unpacked long and contains a formatroutine for several drives andE assign just like the COP trojans. It will be done via a Dos COmmand and not via the systemcommand.
F The files contain a lot of text at the end of the hunk and even someB kind of nickname for me well be used. You surely know the famousG Cornflakes from KELLOGS ? Some guys in the past from my school alwaysG called me Cornflake and now this "%/&%" viruscoder tells me this waY.
D The viruscode was partly optimized since the last versions of this7 virus but in general the fucking formatroutine stays.
' At the end of the virus you can read:
'dos.library'
'BBS'
'BBS:' 'CHOKe'
'CHOKe:DOPisGOD%ld'H 'ALFONS +BERG ViRUS v2.0 #eta by WiREFACE / dEMONS oF tHE pENTAGRAM, "! "dedicated to (Corn)Flake/TRSI'
'CHOKe:GODisEViL'
'DH0'
'DH0:'
'dOP'
'dOP:aNuS%ld'
'dOP:hihihi'
'DH1'
'DH1:
'dEMONS'
'dEMONS:pENiS%ld'
'DH2'
'DH2:'
'pENTAGRAM'
'pENTAGRAM:rEVENGE!'
'DH3'
'DH3:'
'WiRELESS'
'WiRELESS:hELL%ld'
'WiRELESS:!hATe!'0 'You''ve been hit by (boom) (boom), you''ve b'0 'een hit by (boom) a smooth criminal (Alfons '0 'that is, tihi)! - Good luck restoring your l'0 'ousy hD - WE HATE YOU ALL! HA HA HA HA HA !!'
'! (echo) ha ha ha'
0 The file id of the hdtoolsbox looks like this:
hdtoolbox 40.9 (9.7.95)
2 The file id of the lzx120t fake looks like this:
- +-----------------------------------------+- | Lzx v1.20 TURBO Version |- `-----------------------------------------'
12% Faster Testing
10% Faster Adding!' 3% Faster Packing (-lh5-)- .-----------------------------------------.- | C 1995 Data Compression Technologies |- +-----------------------------------------+
M It is really surprising. At first SHI (slinkv10) and VirusChecker(vckey110)I got attacked by this crazy guys and now I seem to be the destination of% this person? . I don`t know, why...
Greets
Markus
K P.S.: Special thanks to Apollo for sending me the warning and the files !