Libris Britannia 4

home *** CD-ROM | disk | FTP | other *** search

/ Libris Britannia 4 / science library(b).zip / science library(b) / SECURITY / VIRUS / 0888.ZIP / DIRTYDOZ.007 < prev next >

Wrap

Text File | 1986-01-04 | 54KB | 900 lines

---------------------------------------------------------------------------- | | | THE DIRTY DOZEN -- An Uploaded Program Alert List | | | ---------------------------------------------------------------------------- | Issue #7: January 4th, 1987 | | | | | | | | Compiled by Eric Newhouse | ---------------------------------------------------------------------------- Recently, many unlawfully copied or modified programs have appeared on various IBM PC bulletin boards across the country. THE DIRTY DOZEN is a list of known examples. IMPORTANT NOTE: the author takes no responsibility for the validity or completeness of this list. Many sources contribute to the list, and it is very possible that one of the reported 'dirty' files works perfectly and is in the Public Domain. I will try to '*' asterisk any programs what I feel are not positively 'bad,' but all the same, it is quite possible that a mistake will slip in somewhere. Since this is the case, please keep in mind while reading this list that however unlikely, it is possible that I or my sources are incorrect in our accusations. Please also bear in mind that the dirty dozen list has not yet falsely accused a Public Domain program of being pirated, or a well working program of all existing bad software into one list. Everyday users upload bad software to hundreds of boards, and often times the software is not yet in this list. In other words, if you run a trojan horse that I did not list in here, don't call my board up call up and leave me a message so that I can get the destructive program in the next issue. If anyone is unsure whether a file is trojan, and it's not listed in here, then I recommend using a utility like BOMBSQAD.COM to prevent any mishaps. There are four major categories of bad software: commercial pirate jobs, unauthorized copies of otherwise legitimate freeware programs, malicious "TROJAN" programs which damage your system, and miscellaneous illegal software. Please look in the definitions section of this document for a more detailed explanation of these terms. SysOps: Please be careful with the files you post in your download libraries! An professional quality uploaded game or disk utility should arouse your suspicions, especially if it doesn't include the author's name, address, and distribution policy. Such programs are probably NOT public domain! The BBS community is already under legislative threat at the State and Federal level. We cannot fight this trend effectively while our directories sit stocked with cracked Sega games, wargames dialers, and malicious "trojan horses!" Let's demonstrate a little social responsibility by cleaning up our download libraries. If you as a SysOp have any of these files on your system, please delete them and post "blocking" dummy file entries like this one: ZAXXON.COM DELETED!! NOT PUBLIC DOMAIN!! If everyone works together to fight this new brand of software, the growing numbers of piraters and trojan horse writers may well be put 'out of business!' The idea behind THE DIRTY DOZEN is to bring this important issue to the attention of more SysOps and users - to act as an information "clearing - house" for the latest known examples of "bogusware," so that an educated public can fight effectively for safe downloadable files. The Dirty Dozen is a big project, and it needs your help to succeed! Please call in any updates of bad software that you know of, but DO NOT modify this article yourself. If everyone who discovers a pirated program starts modifying the DD, there would be hundreds of issues in circulation. Also, I think it's quite unfair, especially considering that I've spent over a hundred hours of my time on this list, for just anyone to put their name at the top of the list and say that they write, or helped write, the DD. For example, someone named Gerhard Barth added two files, both of which were already listed in the DD, and proceeded to write "Updated by Gerhard Barth, please send all further updates to Gerhard Barth," etc. If everyone does this, how will anyone know which file is the latest and TRUE Dirty Dozen? If you have an update, please see the end of this article for information on how to reach me with new information. A user of mine has notified me that some pirates have patched HARDHAT.COM and PANGO.COM to read "cracked by Eric Newhouse." This is ridiculous! Please disregard any programs that you may come across in the future advertising "copy protection busted by Eric Newhouse, " or the like. This is just one more way that pirates are trying to get me to stop publishing this list! A word on TROJANS: I have been hearing more and more reports of these "worm" programs, from all directions. While I don't doubt their existence, do not get hysterical. Remember, a Trojan rumor is much easier to START than it is to STOP. Some people have accused legitimate *joke* programs, like DRAIN (which pretends to be gurgling excess water out of your A drive) of being "killers." If a program locks up your system, it isn't necessarily Trojan; it might not like co-residing with Superkey, or your graphics card. Ask around a little before you announce something as Trojan. I would appreciate a bagged specimen of any real Trojan program that you might have the (un)luck to find. A word on Pirated programs: Recently many pirated programs such as AUTODEX have been going under many different names. Although I will try to keep all these names current in the DD, the best way to check for piracy in a file is to run that file yourself -- checking for (C)opyright notices of commercial manufactures, similarities in looks and operations of commercial programs, and of course whether the name is in this list. Finally I want to thank all BBS SysOps and users that notified me of updates, additions, and/or corrections to DIRTYDOZ.006. It's great to see so much support! In this issue more people than ever called in with updates. Everyone else who reads this list, along with myself, really appreciates the effort! DEFINITIONS: HACKED An unlawfully modified copy of an otherwise legitimate public domain or user-supported program. It is illegal to distribute a modified copy of someone else's work without their permission! All modified programs must contain this permission, either in the program's display or documentation. *TROJAN* BEWARE!! These programs PURPOSEFULLY damage a user's system upon their invokation. Usually they aim to disable hard disks, although they can destroy other equipment too. It is IMPERATIVE that you let me know about any new examples of these that you find. PIRATED This is an illegal copy of a commercial program product. Examples: a cracked (de-protected) game, an accidentally or deliberately distributed compiler, editor or utility; sometimes a Beta test copy of a program under development, handed out by a disgruntled employee or dishonest beta tester. In the latter case, the program in question may never make it to market due to the piracy! In the case of games, there's a tendency for the pirate to patch a clumsy "PUBLIC DOMAIN" notice over top of the original copyright. ZAXXON.COM is a prime example. MISC This is miscellaneous illegal software and/or text. The best definition, aside from that, that I can think of is that it's NOT pirated software. NOTE: If I do not supply a file extension, that means that the file circulates under many different extensions. For instance, users commonly upload with extensions of either: .EXE, .COM, .EQE, .CQM, .LBR, .LQR, and .ARC. ---------------------------------------------------------------------------- | TROJAN HORSE PROGRAMS: | ---------------------------------------------------------------------------- Name Category Notes -------------- -------- ------------------------------------------------- ANTI-PCB *TROJAN* The story behind this trojan horse is sickening. Apparently one RBBS-PC sysop and one PC-BOARD sysop started feuding about which BBS system is better, and in the end the PC-BOARD sysop wrote a trojan and uploaded it to the rbbs SysOp under ANTI-PCB.COM. Of course the RBBS-PC SysOp ran it, and that led to quite a few accusations and a big mess in general. Let's grow up! Every SysOp has the right to run the type of BBS that they please, and the fact that a SysOp actually wrote a trojan intended for another simply blows my mind. ARC513.EXE *TROJAN* This hacked version of arc appears normal, so beware! It will write over track 0 of your [hard] disk upon usage, destroying the disk. ARC514.COM *TROJAN* This is totally similar to arc version 5.13 in that it will overwrite track 0 (FAT Table) of your hard disk. Also, I have yet to see an .EXE version of this program.. BACKTALK *TROJAN* This program used to be a good PD utility, but some one changed it to be trojan. Now this program will write/destroy sectors on your [hard] disk drive. Use this with caution if you acquire it, because it's more than likely that you got a bad copy. CDIR.COM *TROJAN* This program is supposed to give you a color directory of files on disk, but it in fact will scramble your disks FAT table. DANCERS.BAS *TROJAN* This trojan shows some animated dancers in color, and then proceeds to wipe out your [hard] disk's FAT table. There is another perfectly good copy of DANCERS.BAS on BBS's around the country; apparently the idiot author in question altered a legitimate program to do his dirty work. DISKSCAN.EXE *TROJAN* This was a PC-MAGAZINE program to scan a (hard) disk for bad sectors, but then a joker edited it to WRITE bad sectors. Also look for this under other names such as SCANBAD.EXE and BADDISK.EXE... DMASTER *TROJAN* This is yet another FAT scrambler.. DOSKNOWS.EXE *TROJAN* I'm still tracking this one down -- apparently someone wrote a FAT killer and renamed it DOSKNOWS.EXE, so it would be confused with the real, harmless DOSKNOWS system-status utility. All I know for sure is that the REAL DOSKNOWS.EXE is 5376 bytes long. If you see something called DOSKNOWS that isn't close to that size, sound the alarm. More info on this one is welcomed -- a bagged specimen especially. DPROTECT *TROJAN* Apparently someone tampered with the original, legitimate version of DPROTECT and turned it into a FAT table eater. EGABTR *TROJAN* BEWARE! Description says something like "improve your EGA display," but when run it deletes everything in sight and prints "Arf! Arf! Got you!" EMMCACHE *TROJAN* This is a funny trojan. The author did a good V. 1.0 job of writing the documentation, and on the outside it looks to be a very well written program. However, after running it to install 69 pages of a EMS disk cache, the program A) Scrambled every file that I thereafter modified (changed and then wrote to disk), and B) Destroyed my boot sector. The program is especially dangerous because it will damage many of your most used files before you realize what hit you. FILER.EXE *TROJAN* One SysOp complained a while ago that this program wiped out his 20 Megabyte HD. I'm not so sure that he was correct and/or telling the truth any more. I have personally tested an excellent file manager also named FILER.EXE, and it worked perfectly. Also, many other SysOp's have written to tell me that they have like me used a FILER.EXE with no problems. If you get a program named FILER.EXE, it is probably allright, but better to test it first using some security measures. FINANCE4.ARC *TROJAN* This program is not a verified trojan; there is simply a file going around BBS's warning that it may be trojan. In any case, execute extreme care with it. FUTURE.BAS *TROJAN* This "program" starts out with a very nice color picture (of what I don't know) and then proceeds to tell you that you should be using your computer for better things than games and graphics. After making that point it trashes your A: drive, B:, C:, D:, and so on until it has erased all drives. It does not go after the FAT alone, but it also erases all of your data. As far as I know, however, it erases only one sub-directory tree level deep, thus hard disk users should only be seriously affected if they are in the "root" directory. I'm not sure about this on either, though. MAP *TROJAN* This is another trojan horse written by the infamous NOTROJ.COM *TROJAN* This "program" is the most sophisticated trojan horse that I've seen to date. All outward appearances indicate that the program is a useful utility used to FIGHT other trojan horses. Actually, it is a time bomb that erases any hard disk FAT table that IT can find, and at the same time it warns: "another program is attempting a format, can't abort!" After erasing the FAT(s), NOTROJ then proceeds to start a low level format. One extra thing to note: NOTROJ only damages FULL hard drives; if a hard disk is under 50% filled, this program won't touch it! If you are interested in reading a thorough report on NOTROJ.COM, James H. Coombes has written an excellent text file on the matter named NOTROJ.TXT. If you have trouble finding it, you can get it from my board. TIRED *TROJAN* Another scramble the FAT trojan by Dorn W. Stickle. TSRMAP *TROJAN* This program does what it's supposed to do: give a map outlining the location (in RAM) of all TSR programs, but it also erases the boot sector of drive "C:". PACKDIR *TROJAN* This utility is supposed to "pack" (sort and optimize) the files on a [hard] disk, but apparently it scrambles FAT tables. QUIKRBBS.COM *TROJAN* This Trojan horse advertises that it will QUIKREF *TROJAN* This ARChive contains ARC513.COM. load RBBS-PC's message file into memory 2 times faster than normal. What it really does is copy RBBS-PC.DEF into an ASCII file named HISCORES.DAT... RCKVIDEO *TROJAN* This is another trojan that does what it's supposed to do, then wipes out hard disks. After showing some simple animation of a rock star ("Madonna," I think), the program will go to work on erasing every file it can lay it's hands on. After about a minute of this, it will create 3 ascii files that say "You are stupid to download a video about rock stars," or something of the like. SECRET.BAS *TROJAN* BEWARE!! This may be posted with a note saying it doesn't seem to work, and would someone please try it; when you do, it formats your disks. SIDEWAYS.COM *TROJAN* Be careful with this trojan; there is a perfectly legitimate version of SIDEWAYS.EXE circulating. Both the trojan and the good SIDEWAYS advertise that they can print sideways, but SIDEWAYS.COM will trash a [hard] disk's boot sector instead. The trojan .COM file is about 3 KB, whereas the legitimate .EXE file is about 30 KB large. STAR.EXE *TROJAN* Beware RBBS-PC SysOps! This file puts some stars on the screen while copying RBBS-PC.DEF to another name that can be downloaded later! STRIPES.EXE *TROJAN* Similar to STAR.EXE, this one draws an American flag (nice touch), while it's busy copying your RBBS-PC.DEF to another file (STRIPES.BQS) so Bozo can log in later, download STRIPES.BQS, and steal all your passwords. Nice, huh! TOPDOS *TROJAN* This is a simple high level [hard] disk formatter. VDIR.COM *TROJAN* This is a disk killer that Jerry Pournelle wrote about in BYTE Magazine. I have never seen it, although a responsible friend of mine has. ---------------------------------------------------------------------------- | HACKED PROGRAMS: | ---------------------------------------------------------------------------- | | | '*' = not verified by program's author | | | ---------------------------------------------------------------------------- ARC.COM HACKED Someone keeps running SPACEMAKER or a similar EXE squeezer on SEA, Inc.'s ARC archive program, then uploading the resulting COM file to BBS's without the author's permission. SEA will NOT support the COM version -- this is an unauthorized modification. AUTOMAXX.ARC HACKED This DOS menu-making program comes with documentation that is almost certainly plagiarized. Marshall Magee, author of the popular AUTOMENU program, contends that the AUTOMAXX documentation uses exact phrases from his documentation, and if this is the case, AUTOMAXX is clearly illegal. In addition, the executionable file in AUTOMAXX.ARC may also be plagiarized. For more information, please contact Marshall Magee, at (404) 446-6611. DOG102A.COM * HACKED Apparently this is a renamed early version of the DP102A.ARC utility DISKPACK.COM. One person has reported that it trashed his hard disk that was formatted under DOS 3.1 (2KB clusters). LIST60 HACKED Vern Buerg's LIST 5.1, patched to read 6.0. Note: Mr. Buerg has released a legitimate version 6.0 of LIST. Every legit. version will have a letter in the filename (e.g. LIST60H.ARC) LIST799 HACKED Vern Buerg's LIST 5.1, patched to read 7.99. QMDM110.ARC HACKED These hacked versions of qmodem are QMDM110A.ARC copies of 1.09, patched to read 1.10. There have been rumors of a worm in 1.10, but I have seen no evidence of it. Other versions are OK. ---------------------------------------------------------------------------- | PIRATED PROGRAMS: | | | | | | TYPES: | | Game -- some sort of game, usually of "Arcade" Quality | | Util -- a disk, screen, or general utility | | Misc -- miscellaneous, printer controllers, sound, etc. | ---------------------------------------------------------------------------- Program Name Type Description ------------ ---- ----------- 1DIR.COM PIRATED Util -- This is "The ONE Dir," a commercial shell sold with a Hard Disk subsystem. 21C.EXE PIRATED Game -- From the IBM Game Library -- blackjack ACUPAINT PIRATED Misc -- PC Paint -- ARC-ed file is 148,221 bytes. ALLEYCAT.COM PIRATED Util -- The IBM game "Alley Cat" ALTEREGO.ARC PIRATED Game -- Alter Ego game from Activision this archive file is huge -- about 450KB or so.. ARCHON.COM PIRATED Game -- Electronic Art's Archon. ARTOFWAR PIRATED Game -- Ancient Art of War game. AUTODEX PIRATED Util -- AUTODEX, a commercial file manager AXX.EXE PIRATED Util -- also AUTODEX B1-BOMB PIRATED Game -- Avalon Hill's B1 Bomber BATTLE PIRATED Game -- Battle Zone Game BBCHESS PIRATED Game -- Blues Box Chess BC-QUEST PIRATED Game -- Bc's Quest for Tires BIGMAC.ARC PIRATED Util -- Also Superkey BRUCELEE PIRATED Game -- Bruce Lee game BUCK PIRATED Game -- Buck Rogers on Planet Zoom BURGER PIRATED Game -- Burgertime BUSHIDO PIRATED Game -- Karate Game BUZZBAIT PIRATED Game -- Buzzard Bait CALL2ARM PIRATED Game -- Call to Arms CENTIPED PIRATED Game -- Be careful with this one. At least two other legitimate, PD copies of Centipede are in circulation. There pirated one is supposedly PUBLIC DOMAIN BY ATARI. Yeah, Right. COMMANDR.ARC PIRATED Game -- Norton Commander COSMIC PIRATED Game -- Cosmic Crusaders COPYRITE PIRATED Util -- Really Quaid Software's COPYWRITE COPYWRIT PIRATED Util -- Quaid Software's COPYWRITE again COSMIC PIRATED Game -- Cosmic Crusaders game CROSFIRE.COM PIRATED Game -- Cross fire game.. CRUSH-CC.ARC PIRATED Game -- Crush, Crumble & Chomp Game DEB88.EXE PIRATED Misc -- DeSmet "C" debugger DECATH PIRATED Game -- Microsoft Decathalon DEFENDER PIRATED Game -- Defender DIGGER.COM PIRATED Game -- Dig Dug DIGDUG.COM PIRATED Game -- Dig Dug DISKEX PIRATED Util -- Disk Explorer Utility DOSHELP.EXE PIRATED Util -- This is really Central Point Software's PC-tools. One special note: There is usually a poorly written documentation accompanying this file. In the documentation ERIC HSU asks for a monetary contribution to his bbs. Well, It seems that this was a poor attempt to damage ERIC HSU's reputation; Eric is a legitimate SysOp in the Houston area. DOSMENU PIRATED Util -- INTECH'S DOSMENU - The Menu screen says "PC DOS MENU SYSTEM 5.0" Archive size is 208,240 - The copyright notice is on the bottom of the screen. DOSSHELL PIRATED Util -- AUTODEX again DRL PIRATED Game -- Avalon Hill's "Dnieper River Line." DIPLOMCY PIRATED Game -- Avalon Hill's "Computer Diplomacy" game. EGADIAG PIRATED Util -- Quadram EGA (Quad EGA+) diagnostics. EINSTIME PIRATED Util -- Another pirated IBM internal utility EXPLORER.COM PIRATED Util -- Quaid Software's Disk Explorer EVOLUTIO PIRATED Game -- Evolution F15 PIRATED Game -- F-15 Strike Eagle FILEEASE PIRATED Util -- Dos Utility FILEMGR PIRATED Util -- Really FILE MANAGER by Lotus Devel. Corp. FILEMAN PIRATED Util -- Also FILE MANAGER. The file is 10 KBytes FINDIT PIRATED Util -- IBM internal 'locate a file' utility FSDEBUG PIRATED Util -- IBM's Full Screen Debug program.. GOLDCUP PIRATED Game -- Gold Cup championship soccer GOLF21.ARC PIRATED Game -- Golf's Best version 2.1 GREMLINS.COM PIRATED Game -- Gremlins game HARDHAT.COM PIRATED Game -- Hard Hat Mack HIGHORBT PIRATED Game -- High Orbit (like Star Wars) HOOP.COM PIRATED Game -- One-on-1 ID PIRATED Util -- Persyst Ram disk software IBM21 PIRATED Game -- 21c IPLTIME.COM PIRATED Util -- IBM Internal Use Clock utility JBIRD PIRATED Game -- Jbirds -- Q-bert Game JET PIRATED Game -- Jet is a flight simulator JETDRIVE.ARC PIRATED Util -- JET Drive -- copies files quickly JOUST PIRATED Game -- Joust. Be careful, there is a 6K version KEYWORKS.ARC PIRATED Util -- Keyworks macro program, usu. version 2.0 KONG PIRATED Game -- Donkey Kong LIGHTNIN PIRATED Util -- Can be either the cache or spell checker MACE+ PIRATED Util -- Paul Mace's MACE+ utilities MACROS PIRATED Util -- Again Superkey, or even Prokey MEDMAG.COM PIRATED Util -- Quaid Software's Media Magician MISSLEC PIRATED Game -- Missle command MONTYS.COM PIRATED Game -- Montezuma's Revenge MOONBUGS PIRATED Game -- Moon Bugs MS PIRATED Util -- IBM internal utility. MTS PIRATED Util -- IBM Multitasker that's similar to Double-Dos MULTASK PIRATED Util -- Same as MTS MURDRBY# PIRATED Game -- Murder by Numbers MUSICCON PIRATED Misc -- Music Construction Set NFL.ARC PIRATED Game -- Xor's NFL challenge. NICE PIRATED Misc -- A printer Controller NODISK-A.COM PIRATED Util -- Central Point software's Nokey. NORTON.COM PIRATED Util -- Peter Norton's Utilities! NOVATRON PIRATED Util -- Tron light cycles. ONE-ON-1 PIRATED Game -- One-on-1 basketball game. PATHMIND PIRATED Util -- Dos Shell PC-POOL PIRATED Game -- Really PC-POOL, commercial game PC-TOOLS PIRATED Util -- Central Point Software's PC-tools PCBOSS PIRATED Util -- Another Dos shell PCED PIRATED Util -- Pro CED, DOS command line editor PEII PIRATED Util -- IBM Personal Editor II PINCONST PIRATED Game -- Pinball Construction Set POOL.ARC PIRATED Game -- Same as PC-POOL POPALARM.COM PIRATED Util -- Part of POP DOS POPDOS.ARC PIRATED Util -- Pop up (resident) dos utilities. PRIME PIRATED Util -- Columbia Data Co. hard disk utility. PROKEY PIRATED Util -- Prokey macros program PSHIFT PIRATED Util -- really MEMORY SHIFT PSRD.ARC PIRATED Util -- IBM utility (redirects PrtSc) QDOS PIRATED Util -- Quickdos QUCKDOS PIRATED Util -- Quickdos QIX PIRATED Game -- The game. RACTER PIRATED Game -- Racter RASTER-B PIRATED Game -- Raster Blaster RIGHTW PIRATED Util -- Right Writer (writing style checker) ROBOTRON PIRATED Game -- Robotron, hacked to read PUBLIC DOMAIN BY ATARI. Don't pirates have any imagination? ROGUE.EXE PIRATED Game -- Game very similar to the PD game HACK.EXE ROMANTIC PIRATED Game -- Romantic Encounters at the Dome. Also RE.ARC SEADRAG.ARC PIRATED Game -- Sea Dragon SEE PIRATED Misc -- DeSmet editor SFX PIRATED Util -- really AUTODEX (again!) SM.COM PIRATED Util -- Realia's SPACEMAKER utility SMAP PIRATED Util -- IBM Internal utility, with the copyright notice blanked out and real author's name () replaced by "Dorn W. Stickle". SPYHUNT PIRATED Game -- Spy Hunter Game. STARGATE.EXE PIRATED Game -- Hacked to say "PUBLIC DOMAIN BY ATARI," but don't you believe it! Be careful not to confuse this 57 KB .EXE file with the public domain STARGATE MERCHANT game, which is a little 12 KB BASIC program by G. E. Wolfworth. STRIPKR PIRATED Game -- Strip Poker by Artworx SUPERCAD PIRATED Misc -- Easy CAD, a drawing program -- LQR file size is 242,660 bytes SUPERKEY PIRATED Misc -- Superkey macro program TEMPOFAP PIRATED Game -- Temple of Apshai THEQUEST.BAS/EXE PIRATED Game -- The Quest TIRES.EXE PIRATED Game -- Again, really bc's quest for tires TREASURE PIRATED Game -- Pirate's Treasure game ULTIII PIRATED Game -- Ultima 3 UTILITY PIRATED Util -- Norton's Utilities Arced and with the file names changed. When run, however, the programs display the copyright notice of Peter Norton. Many other pirated utilities could also go under the name UTILITY. VOYAGERI PIRATED Game -- (Avalon-Hill Game) VS PIRATED Util -- Also INTECH'S DOSMENU WCKARATE PIRATED Game -- World Championship karate by Epyx WG-BBALL PIRATED Game -- World's Greatest Baseball Game WORSTR PIRATED Util -- Word Star, labeled as a 'great new editor' XDIR PIRATED Util -- Pre-release version of DOS FILE TRACKER XTREE PIRATED Util -- IBM's tree utility, an IBM "Personally Developed" program. ZAXXON PIRATED Game -- Hacked (sound familiar?) to say "PUBLIC DOMAIN BY SEGA." Sorry, Charlie! ---------------------------------------------------------------------------- | MISCELLANEOUS ILLEGAL FILES: | ---------------------------------------------------------------------------- COPYWRIT MISC Patch -- Although the real COPYWRITE is going around Bulletin Boards like fire, there is another illegal file under the same name. The former takes around 40 KB ARC-ed, whereas this takes about 2 KB. What I'm referring to is an archive of 1-3 files that explains how to remove the serial numbers from copywrite. Now it's allright to "unprotect" a program for backup purposes, but removing serial numbers can only lead to piracy. LOCKPICK MISC Text -- This is a text file, usually with a .TXT extension, that casually explains how to pick locks. I'm not sure whether this is illegal, but it's definitely in poor taste. MONOPOLY MISC Game -- The authors of all monopoly programs are, according to a fairly reliable source, being sued by Parker Brothers over copyright infringements. These files may become illegal soon, but as of this printing they are still legal. MOVBASIC MISC Util -- This highly illegal file breaks IBM copyright on BASIC and BASICA. What it does is create new files called SBASIC or SBASICA that run "IBM BASIC" on an IBM clone. Guys, don't you think that these clones don't run IBM BASICA for a good reason? The clones don't support BASICA because it's illegal! XTALK MISC Patch -- Like Copywrite, there is a patch circulating BBS's to remove the serial numbers from Crosstalk. ---------------------------------------------------------------------------- | Many thanks to generous, continuous update contributions from: | ---------------------------------------------------------------------------- | | | | | 1. THE SOURCE information service. | | 2. Jim Harrington | | 3. Jim Golden | | 4. You? | ---------------------------------------------------------------------------- This is the end of the "bad files list." The rest of this document contains instructions on what to do if YOU run a trojan horse, an update history, a glossary, and information on how and where to contact me with updates. ---------------------------------------------------------------------------- | If you run a trojan horse.. | ---------------------------------------------------------------------------- While reading this, bear in mind that there is no better remedy for a drive that has run a trojan horse than a recent backup.. The first thing to do after running what you think to be a trojan horse is diagnose the damage. Was your [hard] drive formatted? Did the trojan scramble your FAT table? Did every file get erased? Did your boot sector on the [hard] drive get erased/formatted? Odds are that the trojan incurred one of these four disasters.. After the initial diagnosis, you are ready to remedy the problem. 1) If the trojan low-level formatted your [hard] disk: Hope that you have a recent backup; that's the only remedy for this disease. 2) If the trojan high-level formatted your [hard] disk: There is only one way out of this mess, and that is to use the MACE+ utilities by Paul Mace. MACE+ has two devices in it to recover formatted disks, and believe me, they work! I will talk more about the MACE+ utilities later. 3) If the trojan scrambled your FAT table: Once again, there is nothing to do. However, there is a program called FATBACK.COM (available on my board) that will back up your FAT table in under a minute to floppy. Using FATBACK, it is easy and non time consuming to back up your FAT regularly. 4) If the trojan erased file(s), and the FAT table is undamaged: There are many packages to undelete deleted files. Norton Utilities, PC-tools, MACE+, and UNDEL.COM will all do the job. I recommend the first three, but they are more expensive than the Public Domain program UNDEL.COM. When you are undeleting, be sure to undelete files in the order of last time written to disk. I know that PC-tools automatically lists undeletable files in the correct order, but the other three may not. 5) If the boot sector on your [hard] disk gets erased/formatted: There are four things to do if this happens, and the worst that can happen is that you will go without a [hard] disk for a while. To be on the safest side, back up everything before even proceeding to step "A," although I can not see why it would be necessary. A) Try doing a "SYS C:" (or "SYS A:") from your original DOS disk, and copy COMMAND.COM back onto the [hard] drive after that. Try booting and if that doesn't work try step B. B) If you have the MACE+ utilities go to the "other utilities" section and "restore boot sector." This should do the job if you have been using MACE+ correctly. C) If you are still stuck, BACK EVERYTHING UP and proceed to do a low level format. Instructions on how to perform a low-level format should come with your [hard] disk controller card. Be sure to map out bad sectors using either SCAV.COM by Chris Dunford or by manually entering the locations of bad sectors into the low level format program. After the low level format, if your have a hard disk, run FDISK.COM (it comes with DOS) and create a DOS partition. Refer to your DOS manual for help in using FDISK. Then put your original DOS diskette in drive A: and do a FORMAT <drive letter>:/S/V. Drive letter can stand for "C" or "B" depending on whether you are reformatting a hard disk or not. Finally you are ready to attempt a reboot. D) If you are still stuck, either employ some professional computer repairmen to fix your drive, or live with a non-bootable [hard] drive.. By now you may be saying to yourself: "How can I get a hold of a 'MACE+' utilities package so that I can guard against trojans? Why, MACE+ can recover a formatted drive, undelete files, restore boot sectors, optimize a disk, and provide a disk cache! Anyone can obtain these marvelous utilities in one of two ways: one is to call up the Paul Mace Software Company (tm) and order them at a retail of $ 79.95. The other is place an order for them at the WEST LOS ANGELES PC-STORE, which supports next day UPS shipping! The BBS phone # for the PC-STORE is at the end of this document. ---------------------------------------------------------------------------- | Update History: | ---------------------------------------------------------------------------- Version 1.0 Plans were drawn up for a "bad file" list and a dozen bad files were entered in the list. Version 2.0 Saw the addition of a short introduction and 3 more files. All work up to here was done by Tom Neff. Version 3.0 Here Tom Neff and I started collaborating on the Dirty Dozen. 22 files were added, and the introduction was completely re-written. Version 3.0 had a total of 37 files. Version 4.0 By this time I totally took over responsibility of the DD, as Tom Neff lost interest. Another 30 or so files were added to the list, making the DD 65+ files strong, as well as a few more additions to the introduction. Version 5.0 By the time I released version 5.0 to the public, the Dirty Dozen was being greeted favorably and with enthusiasm around the country. Updates started coming in with regularity; the list prospered (if one can say that about a list!). A few more paragraphs were added to the introduction, and about 40 new files were bringing the file total up to 103! Version 6.0 The Dirty Dozen is now such a big project that I am now writing it in stages. Although I am going to make absolutely no effort to spread these "intermediate versions," they will always be downloadable from my board. This way if anyone so desires, they may keep an extremely current issue of the DD, although the changes will only be minor. You might think of stage "a" of issue #6 as version 6.1, stage "b" as version 6.2, stage "c" as version 6.3, etc. New in version 6.0 is the following: A) Many minor revisions, B) 17 more files, bringing the total to 120! C) Two new paragraphs in the introduction, D) Instructions on how to recover from a trojan horse, E) A comprehensive glossary, F) This update history, G) An acknowledgments section set up for major contributors of information regarding new bogusware H) A new bogusware catagory of "miscellaneous illegal software." Version 6.0a MOVBASIC.ARC and SBASICA added to the list of illegal files. as well as six Trojan horses have been added to the list. Version 6.0c NOTROJ.COM added to the trojan horse list. Version 6.0d DOG102A.COM added to the hacked files list. HACKED files separated from TROJAN files Version 6.0e DANCERS.BAS added to the trojans list. Version 6.0f 4 pirated files added, + NODISK-A and DMASTER to trojans Version 6.0g NODISK-A removed from trojan horse list & placed into pirated programs list. Monopoly warning issued in misc section. added a few pirated programs. + DPROTECT added as trojan. Version 6.0h EMMCACHE and TIRED added to trojan list, + PEII added. Version 6.0i Added TOPDOS to Trojan list, and AUTOMAXX to HACKED list. Version 6.0j Added QUICKREF to trojans list. Revised introduction, and added a paragraph to the intro about modifying the DD. Version 6.0k Moved paragraph about 'I'm not responsible for this list' to the front of the file for legal reasons. Also added the '*' convention for HACKED programs. Version 6.0l Added FINANCE4 as a possible trojan. Added a few glossary definitions. Version 7.0 The major changes in this version took place in the revision stages above. However, I still changed quite a bit in version 7.0 compared to 6.0 revision stage 'L;' for example, I added seventeen new pirated programs, bringing the file total to a whopping 165! Moreover, I rewrote virtually every paragraph in the dirty dozen in order to 'stylize' (clean up the writing in) the document. Once again I would like to thank all users who called in updates to the Dirty Dozen; those users are the people that encourage me to keep producing the dirty dozen! ---------------------------------------------------------------------------- | Glossary: | ---------------------------------------------------------------------------- | | | I have intended this glossary at the beginning to intermediate | | user; all experienced BBS users will be bored to death with this. | | | ---------------------------------------------------------------------------- ?Q? -- (? standing for any character). File extension for SQueezed files. Squeezed files are unusable until unsqueezed by a utility such as NUSQ.COM or USQ.COM. The advantage of a SQueezed file is that it is smaller than a regular UnSQueezed file, thus saving disk space and download time. ARChives are more efficient than Squeezed files; that's why there are so many more ARChives on BBS's these days. Example of the extensions of SQueezed files: .EQE, .CQM, .LQR, .TQT, .DQC, etc. ABBRV -- abbreviation for the word: "abbreviation" ARC -- File extension for an ARChive file -- many files combined together to save space and download time that require ARC.EXE, PKXARC.COM, ARCE.COM, or ARCLS.EXE to separate the files in to runnable and readable (in the case of text) form. BAS -- abbrv for "BASIC," as in the programming language BBS -- abbrv for "Bulletin Board System" BBS's -- abbrv for "Bulletin Board Systems" BOARD -- Also "Bulletin Board System" BOGUSWARE -- software that is damaging to one or more parties BOOT or -- to boot a computer is to restart it from scratch, erasing REBOOT all TSR programs. One reboots by either powering off and then back on, or pressing ctrl-alt-del at the same time. BYTES -- Bytes measure the length of a file, with one byte equaling one character in a file. CACHE [disk] -- Area of memory set aside to hold recent data. All programs then read recent data from that memory rather than from disk. CLUSTER -- a phyical block on all [hard] disks, composed of sectors, that holds data. COM -- file extension for a file that is executable from DOS level DD -- abbrv for "dirty dozen" DOC -- abbrv for "documentation" EMS -- Enhanced Memory Specification. An EMS card holds 2 MB extra mem. EXE -- file extension for a file that is executable from DOS level HACKED -- see "definitions" section HIGH LEVEL FORMAT -- This type of format is what most computer users view as a regular DOS-format. That is, formatting a disk using FORMAT.COM (included with DOS) is a high level format. IBM -- International Business Machines IBM OR COMP -- IBM computer or a 99% or greater IBM Compatible computer KB -- Abbreviation for "KiloBytes," one Kb equals 1024 bytes LBR -- Extension on Library files. Library files are really many combined files like ARChives, but they require different utilities to extract the individual files. Some examples of such utilities are LUU.EXE, LUE.EXE, LAR.EXE, AND ZIP.EXE. See "ARC" LOW LEVEL FORMAT -- This type of format is only executed on a hard disk, therefore most hard disk low-level format programs come only with a hard disk controller card. There are a few PD low-level formatting packages, though. Most manufacturers low-level format their hard drives at the factory. Low level formatting is the first step in the three part formatting process; the second step is to use FDISK, and the third is to execute a high level format. MB -- abbrv for "Megabytes," or "millions of bytes." MISC -- abbrv for "miscellaneous" OPTIMIZE -- to make all files on a disk "contiguous," or physically linked together on a [hard] drive. PATCH -- a file that is patched (combined) into another file to change the original file in some way PD -- abbrv for "Public Domain" PIRATED -- see DEFINITIONS section in this issue. RAM -- abbrv for "Random Access Memory." (memory used by software) RBBS -- abbrv for RBBS-PC, a type of BBS (Remote Bulletin Board System) ROM -- abbrv for "Read Only Memory." (memory used by hardware to boot) SYSOP -- SYStem OPerator of a BBS *TROJAN* -- see DEFINITIONS section in this issue. TROJAN HORSE -- see DEFINITIONS section in this issue. TSR -- abbv for "Terminate, Stay Resident" Synonym = "Memory Resident" TXT -- abbrv for "text" USU -- abbrv for "usually" UNP -- abbrv for "unprotect" UNPROTECT -- an "unprotect file" is a patch file that results in the breaking of copy protection (no doubt for back up purposes). UTIL -- abbrv for "utility" WORM -- Trojan Horse ZOO -- All files compressed with ZOO.EXE bear this file extension. ZOO-compressed files are NOT compatible with ARC.EXE. ---------------------------------------------------------------------------- | Finally: | ---------------------------------------------------------------------------- If you have any additions or corrections for this list, send them to Eric Newhouse at any of the following places: (in order of most frequented) * The Crest RBBS (213-471-2518) (1200/2400) (80 MB) [ This is my board ] * The West LA PC-STORE (213-559-6954) (300/1200/2400) (50 MB) * The Sleepy Hollow PCB (213-859-9334) (300/1200/2400) (108 MB) * VOR BBS (415-994-2944) (300/1200/2400) (20 MB) * The Source (leave E-mail to "Doctor File Finder" in IBM SIG #4) Doctor File Finder (Mike Callahan) will relay your name and update information to me. ---------------------------------------------------------------------------- End of file.