___________________________________________________________
/ _ . ___ ___ ___ __ _ . ___ ____ \
/ -\ / | |__)| | (__ (__ | /_\ |\ | | | (__ | - \
\ \/ | | \ |__| ___) ___) |__ / \ | \| |__ | ___) | /
\___________________________________________________________/
=> LIST OF DANGEROUS ARCHIVES,FAKES, TROJANS & BBS INFILTRATORS <=
Version: 1.21 - Date: 09-05-95 - Time: 17:58
*** Copyrights ***
It's not allowed to change any part of this text or the contents of the
archive VLIST121.LHA without the permission of the author. Spread the
word and the file!
*** Contributions ***
For any contributions / new / old 'WARNINGS', let me know by sending a
netmail message. Please use the format in the 'Info Format' topic.
*** Info Format ***
Info: Example:
----- --------
- Archive name => Virus.lha
- Length of archive (Packed) => 214056 bytes
- Date of archive => 19-jan-95
- File or program name => Virus.exe
- Length of file or program => 19811 bytes
- Kind of Virus (BB, File, Link, => Trojan Horse
Trojan, Fake version, etc.)
- Date of file/Program => 17-jan-95
- Where did you find it => The Netherlands, Virus BBS, Fido.
(Country,BBS,Network,etc.)
- Type of file it fakes / creates => C/Loadwb
- What does this virus do? => Formatting DH0:
*** E-Mail addresses ***
Internet/Usenet jhl@grafix.xs4all.nl (Preferred)
Nla 14:101/200.20 Penthe 17:100/100.20
Fido 2:286/407.20 Ldy 69:100/102.20
Anime 73:700/100.20
*** Disclaimer ***
Delete files / archives / etc. at your own risk! See 'Updates', on how
to get a 100% save version!
*** Function ***
To keep Sysops & ALL AMIGA users up-to-date with info about archives
/ programs / etc. containing viruses/trojans...etc.
*** Checking ***
Look in the 'History' topic for modifications to the last version.
For earlier versions you need the 'archive' version of Vlist.
*** Updates ***
File Updates are available on:
- Aminet :
/util/virus/VLIST121.LHA
- Grafix Attack BBS
Node 1 : + 31 010 - 4745816 28k8
Node 2 : + 31 010 - 4741062 19k2
Node 3 : + 31 010 - 4744682 28k8
- Hardware BBS
Node 1 : + 31 01840 - 99935 ISDN / 28k8
Node 2 : + 31 01840 - 90323 14k4
Mail Updates will be mailed to the following netz:
- Internet/Usenet -> comp.sys.amiga.misc
- Amynet -> Virus_Amy
- NlaNet -> Nla_Virus
- FidoNet -> Amiga
*** History ***
Modifications towards Version 1.20 (05-04-95) are:
- 29 new names : 168 - 196 (178 - 179 & 190 - 191 are older ones!)
- 15 modifications to V1.20 filenames.
9. VirusMemKill 3.00 -> Length added.
15. DMS 2.13 -> Length added.
47. MST-CF22.LHA -> Length added.
47b Conftop.000 -> Executable name added.
47c Conftop.020 -> Executable name added.
54. -p-turbo.dms -> Extra info.
55b LHAcheck -> Executable name added.
55c NC-LCHK!.LHA -> Archive name added.
78. FLT_DSQ.DMS -> Length added.
83. Denistro.exe -> Length added.
99. clx_doom.exe -> 'Unpacked' length added.
157. minidemo.exe -> Length added.
165. CED4 -> 'Unpacked' length added.
166. Dopus5.lha -> Length added.
167. nxs-tp4.lha -> Length added.
- Removed the 'Type' topic in the list. Isn't necessary.
*** Killer Info ***
The best AntiVirus Programs available : (in alphabetic order)
Name: Latest: Rel. Date: Author:
----- ------- ---------- -------
BootX 5.23b with recog 2.23 (01-05-95) Peter Stuer & SHI
Crunched File Xaminer 5.570 (29-03-95) Bob Rye &
Marcus Mroczkowski
VirusChecker 6.53 (23-04-95) John Veldthuis
VirusTerminator 2.72 (01-05-95) Heiner Schneegold
VirusWorkShop 5.1 (30-04-95) Markus Schmall
VirusZ II 1.16 (02-04-95) Georg Hörmann
XTruder 1.3 (06-01-95) Martin Wulffeld
*** Thanx to ***
- Markus Schmall, for his contributions to this list and his fast virus
analyses.
- Jan Andersen of Virus Help Team Denmark for his contributions to this
list and his fast virus analyses.
- Kees Huizer, for getting the newest anti-virus warez from Aminet and
uploading the VLIST archive to AmiNet. :)
- Ron Klinkien, for getting the newest anti-virus warez from Aminet.
- Henrik Lauridsen of SHI for his Internet support of Virus warnings and
his contributions to this list.
- VirusTestCenter Hamburg, Amiga-Division : Karim 'Kasi Mir' Senoucci,
Jens 'ABert' Vogler & Soenke 'Joda' Freitag for their contributions
to this list.
- Remko Wiersma for his contributions to this list.
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
NO. NAME BYTES EXTRA INFO
--- ---- ----- ----------
1. UA62.LHA 28170 Fake Ua Dialer 6.2
2. UA 26828 See '01.' also
3. CLP_WOW.EXE ? Screws up S: directory
bullet.lha ?
4. MERRY.EXE 61440 4eb9 linker
271360 Formats mailboxes
5. KAIRO.EXE ?
Kiaro.exe ? In other sources
6. viewtek22.lha 93844 Linkvirus+Installer
7. vmk30.lha 4648 Trojan Horse, NO killer!
8. vmk 2620 Unpacked
9. VirusMemKill 3.00 2620 HD Formatter!
10. Trz-Ntro.lha ?
11. X-copy 8.5 66424 installs Eleni Bootvirus!
12. Decompiler 53992 AMOS Util look-a-like!
53990 Trojan Horse!
13. Hacker 20980 Unpacked. Trojan!
14. DOSTrace 2.18 10636 FAKE,NO VIRUS!
15. DMS 2.13 94220 Trojan! HD Formatter!
92440
16. Dms213ur.lha 79897 Trojan! HD Formatter!
17. NoCare27.lha 28848 Unpacked. Deletes many directories!
13556 Imploder4.0 packed
28840 Unpacked
18. DMS2.12.lha 92208 FAKE,NO VIRUS!
19. Ua62.lha 26828 Same as '01.'
20. Ua-dialer V6.2 51956 See '19.' also
21. Ncomm 3.09 221056 Trojan, Installs Eleni!
22. HD_speedup.exe 6252 Damage HD
23. HD_Speedup.lha 7318 See '22.' also
24. Clx_doom.lha ? Doom Filevirus!
25. Elien_virus_ ? No Killer but Installer!
checker 0.1
anti_elien.lha ?
26. Elien.exe 596 See '25.' also
1016 P-packed
27. Esp-dmpd.lha ? Linkvirus
28. Diskmaster 2 PAL Fix ? See '27.' also
29. Amix43.lha 176764 FAKE, NO VIRUS!
30. God-j12.lha 15525 Cylinder Formatter!
31. JiZaNSi 1.2 22008 Unpacked. NO ANSI!
32. Dskslv3.DMS 106584 Trojan horse!
33. Disksalv 3.01 3604 FAKE! It's a virus!
34. Descr40.lha 3484 Virus version of 3.0!
Descr40.exe 7016 Unpacked
35. Descriptor4.0 ? Deletes entire HD!
36. Z-Speed.lha 3484 NO speedup! See '34.' also
37. Zenith Modem Speeder ? See '36.' also
38. Jeff-Viruskiller 9960 Unpacked. V2.67
6496 Packed. Istalls BB virus!
39. Mcheck.lha 16772 Screws up cylinders on HD!
Modemchecker1.1 15516 Packed. Trojan Horse!
22252 Unpacked. FUCK Virus!
40. Gzus001.lha 12252 Packer Bomb Trojan!
12520
15016 Unpacked
41. messkill.lha 3758 See '42.' also
42. Messangelviruskiller 1808 Packed
-virus 7100 Unpacked
43. Eleni V3 1504 See '42.' also
44. VirusZII V1.10 70452 FAKE, NO VIRUS!
45. DSLV4367.LHA 106584 See '32.' also
46. Madison.exe ? Maybe a TROJAN! (Intro)
47. MST-CF22.LHA 48083 ConfTop-Trojan,HD Crasher!
Conftop.000 38322 Unpacked.
Conftop.020 38300 Unpacked.
48. kef_ani.lha 179143 See '49.' also
49. Anim_demo.exe 1795068 CLP-Trojan!
50. SPEEDER.EXE 7016 See '34.' & '35.' & '36.'
51. d-aex220.lha 135400 AmiExpr2.20-Virus!
AIBON Installer 194064 Unpacked
52. Bluebox.lzh 23033 Trojan horse for AmiXpress
BlueBox 5608 Packed
53. Freedom!.LZH 8153 Trojan Horse!
Freedom 10876 Unpacked
54. -p-turbo.dms ? Divina Exterminator I Virus
55. GOD-FBTR.LHA 3836 LHACHECK-BBS-Trojan!
LHAcheck 3836
NC-LCHK!.LHA 7350 Archive with the LhaCheck BBS trojan!
56. xcopy65e.lha 25360 Trojan Horse!
57. XCopyPro V6.5 28336 See '56.' also
27196
58. bnuke15.lha 35050 scan.x-BBS-Bomb!
ULOG.X 18560 Virus Installer
59. SNOOPD16.LHA 35444 Snoopdos1.6 Virus!
60. -L-STOCK.LHA ? See '61.' also
stock.rexx 74576 Ddoor game for /X) has a BACKDOOR.
DROPS UPLOAD STATUS OF USER TO 0 !!!
61. demo99.lha ? No Lha file, but TROJAN KILLER V3.0!
62. demo98.lha ? No Lha file, but TROJAN KILLER V3.0!
63. dm-tr.lha 5135 ZAPA_B.Door Virus!
64. dm-trash 4764 See '63.' also
65. XPRZSPEED.LHA 8703 See '36.' & '37.' also
66. MVK.lzh 1171 FileVirus!
MVK.exe 1052 Unpacked
67. qtx_pow.lzh 139670 PP-Bomb!
68. Virusblaster.LZH 27944 Version 2.3. Virus!
Virusblaster 9232 Unpacked
69. Guardian.DMS ? Get rid of this F#cker!
70. Jismtro.exe ? Infiltrate or damage BBS!
71. Killkim.exe ? Infiltrate or damage BBS!
72. FJPEG111.lha 100998 Debugger Virus!
FJPEG_AGA 27964
73. zk-320.lha ? Hacked AmiXpress/NO VIRUS/Many backdoors
74. ATX-chat.lha ? M_Chat Virus! for AmiXpress
M_Chat 2.3 13492 Unpacked
75. aereg`em.lha ?
AE-Registrator 656 Imploder. Infiltrator for Ami/X V3.9
664 Unpacked
76. M-WHO.lha ? Infiltrator Backdoor Virus!
77. ATX_NADA.dms ? BBS Infiltrator!
Mongo05.exe 1464 PP4.0 Packed
2260 Unpacked
Mongo09.exe 1708 PP4.0 Packed
3368 Unpacked
78. FLT_DSQ.DMS 1993 BBS Infiltrator!
79. PHA-1994.exe 57508 Unpacked
80. MST-INTE.exe 51256 Unpacked. MST-VEC Format Virus!
81. dpl-mam1.dms 523162 Commander-Virus Infected!
82. dpl-mam2.dms 602250 Commander-Virus Infected!
83. Denistro.exe 64924 Commander Virus!
64844
66592
71800 Installer length
84. Vampire.exe ? Infector length 875778 bytes
85. Commander Viruskiller 2252
by Focus Design (DON'T SPREAD IT!!!)
It contains the entire code of the Commander Virus!
86. dpl-de99.lha ? Virus infected!
87. FuckShop.exe ? Virus infected!
88. VirusZ II 1.05 68544 FAKE! Use NEW Version 1.16
89. VirusZ II 1.04 ? FAKE! Use NEW Version 1.16
90. VirusZ II 1.03 67076 FAKE! Use NEW Version 1.16
91. VirusZ II 1.02 ? FAKE! Use NEW Version 1.16
92. ToolsDaemon 2.2 7128 FAKE! Installs Aibon virus
93. ModuleMaster 1.7 20364 FAKE! PP Bomb!
94. SnoopDos 1.9 15336 FAKE! Installs butonic1.31
95. SnoopDos 2.1 13776 FAKE! Installs Saddam!
96. DWEdit 1.62 41468 Trojan Horse!
43700 Installs Aibon2 virus
97. DI Ansi Ed 2.8 ? FAKE DIAne AnsiAnimEditor!
98. Lha V3.00 54440 Unpacked / Trojan Horse!
99. clx_doom.exe 406012 Packed. See '24.' also
407688 Unpacked.
100. dms2.06.exe 45732 Trojan! FastCall Hacker
47532
101. Surprise Trojan 39296 HD Formatter!
102. dms206.lha ? See '100.' also
103. cry_206.lha 43664 See '100.' also
104. Surprise.exe 39296 See '101.' also
105. EXE4.7.LHA ? 2x Commander Virus installed!
106. Copy_LX 1.03 Trojan 6932 Trojan Horse! Fake LX1.03
107. SS-II Trojan 57449 Trojan Horse! Fake megatrainer of Silent
ServiceII
108. HST-CON.LHA ? HD Formatter! Fake HST Util!
109. HST-FULL.EXE ? HD Formatter! Fake HST Util!
110. MuchAdoAbout.lha ? Commander Virus
111. IStrip21.lha 12212 Unpacked. AmiExpress Hacker!
112. istrip.bin 1156 Unpacked
113. addy099.lha 7293 Trojan, Installs new DIR command.
114. addy0.99.exe 9584 Unpacked
115. dpl-dc99.lha ? Writes a new loadwb command! and quick-
format sys:device
Trojan 12088
LoadWB (New!) 2088 Packed (See '115.' also)
2124 Unpacked
116. VZII-114.lha 79535 FAKE VERSION!! Use VZ 1.16
117. VirusZ1.14 64664 FAKE VERSION!! Use VZ 1.16
118. GATH95-!.lha 45646 Screw up DH0: partition
119. Achtung 14032 See '118.' also
120. Achtung.exe 14032 See '118.' also
121. Decomp.lha 42061 See '12.' also
122. Surprise.DMS 43704 See '104.' sldo
123. Overland.dms ? SCA XCopy virus infected
124. Mformat12.lha 15986 Formats HD's!
25168 Unpacked
125. dagis!up.exe ? Commander virus!
126. Denistro_1.exe ? Commander virus!
127. Denistro_2.exe ? Commander virus!
128. mn-acid.exe ? Commander virus!
129. Removcmd.lha ? Commander virus!
130. axripii.lha 117999 Link virus named 'X-Fucker'!
120046
131. amirip 1348 See '130.' also
132. NetWork90.dms 794624 Commander virus infected!
FileLoader ? AGA demo by Anathema UK
133. Personal Paint 6.2 ? FAKE! No virus!
134. ConMan-LoadWB 24596 Unpacked. Trojan Horse!
Installer 2
135. World-Clock 1.16 21396 Unpacked. AmiXPress Trojan
136. Rastenbork Installer 5220 Packed. BB-Virus Installer!
8640 Unpacked
137. StellarXdemo.lha 444898 Trojan bomb
138. diskrepair V1.20 49336
139. PowerPacker3.0b 71308 PP-Bomb. See '67.' also
140. SnoopEx-DLog- 23452 messes up BBS data!
DevilDoor11
141. WhiteBox V8.0 34896 BBS virus
142. Dialer V2.8 11992 Packed. BBS Infiltrator!
33908 Unpacked
143. JEFF Viruskiller 3.10 9064 Trojan horse!
144. VIRUS TERMINATOR 6.0 1880 Installs Cheater Hijacker!
145. PP-Snap 1.61 44260 PP-Bomb!
146. PP-Died 2.8 67028 PP-Bomb!
147. PP-MegaMon 26856 PP-Bomb!
148. BootShop 108008 Virus Bootblock installer
149. Disk Repair 2.6 37740 File virus!
150. SMBX-Mount.Installer 64488 File virus installer!
65488
151. AmiPatch 1.0a 8288 BBS Infiltrator
152. DirOpus CRC 20716 BBS Infiltrator
153. Sysinfo 1.1 5680 BBS Infiltrator
154. UInfo 13048 BBS Infiltrator
155. NCOMM32.LHA 122017 COP Trojan Type A!
156. NComm 121896 Packed. See '155.' also
226116 Unpacked
157. minidemo.exe 776 Trojan Horse!
773
158. MemCheck 8.1 10936 Liberator1.21 virus
159. Check Vectors 5.1 10712 Liberator 3.0 virus
160. PV 1.02 16924 Liberator 5.01 virus
161. DiskSpeedCheck1.01 33152 File deleter
162. CED4.lha 174590 COP Trojan Type B!
163. LHA30.lha 69981 COP Trojan Type B!
164. LHA3.0 69888 Packed. See '163.' also
105808 Unpacked
165. CED4 174500 Packed. See '162.' also
314216 Unpacked.
166. Dopus5.lha 464162 COP Trojan!
167. nxs-tp4.lha 180188 Unpacked. COP Trojan!
168. sinfo10.lha 4432 COP Trojan Type D!
SInfo 2852 Unpacked.
2552 Replaces every file in C: Libs: S:
169. hackt.lha 12288 NEW ConMan Trojan!
170. hakvirus.lha 42956 NEW ConMan Trojan!
42744
72077
171. Hackt.exe 12692 Packed. See '169.' also
12312 Unpacked.
10820 Packed. See '170.' also
14216 Unpacked.
172. Ahkeym Trojan 2160 Trojan! Fake Key maker
2168
173. Devil-Zine10 Hacker BBS Trojan
C/.fastdir 9800 Packed
16696 Unpacked
174. Opus5.lha 464162 See '166.' also
Opus5 347308 Powerpacked
175. Creator.lha 2757 Trojan which format the SYS device!
176. CD-Shell / FTP Emulator ? Ami /X Door which deletes files!
177. Creat_11.lha ? Trojan! See '175.' also
178. WBPrefs 63140 6661 Trojan! Writes garbage on HD's!
179. challenger_d.main 126336 Trojan Horse!
180. TRSI-VW5.LHA 221737 NEW COP Trojan! Use NEW Version 5.1!
181. VirusWorkShop 135744 FAKE VWShop 5.0 release : COP trojan
182. ABASE.DMS 222609 Archive contains SADDAM virus!
ABase 83096 PowerPacked!
138332 Unpacked
183. Icond13.lha 2993 Trojan! makes your HD unbootable!
IconDepth 1.3 2384 PowerPacked
4188 Unpacked
184. TOOLSD26.lha ? New COP Trojan!
ToolsDaemon 2.6 ? Trashes C,Libs,Envarc,Devs,L dirs!
185. THACK.LHA 12288 ConMan Trojan! See '169.' also
186. cchack2.exe 11216 /X bbs:user.data will be changed.
11368 Fake Calling Card Coder! BBS Trojan!
187. FutureTracker 317608 Unpacked. COP Trojan Type D!
TRSI-FT.lha ?
188. V-Scan 5.05 37896 Devil-VScan Trojan! Ami /X Hacker!
189. vzwarn!!.lha ? FAKE warning about VirusZ 1.16!
VZWARN!!.TXT 1856
190. Exe_this_first!.exe 15308 Formatter Virus!
191. Lazze_Zidens_Modem_Commander_V1.0
8340 East Star BB virus installer!
192. psg-ae5.lha ? New COP Trojan Horse!
AmyExpress 5.0 71904 Unpacked
193. SNK305.lha 4792 Super Nova Killer. Not a SHI release!
5480 Unpacked.
194. ORB-KC.dms ? HD Formatter
195. dt230.lzx ? Unpacked. COP Trojan Horse!
DosTrace 2.30 9692 FAKE release!
196. Zaxxon.DMS ? HD formatter.
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Signed : Jan Hendrik Lots alias PRIME TIME
Moderator : NLA_VIRUS