VIRUS/TROGAN warning "Not the Good times Joke"

From: Kevin Snively (ksnive@premier1.net)
Date: Tue May 13 1997 - 19:51:14 PDT

Next message: Neal Nagata, Jr.: "funky lookin' Sarracenia"
Previous message: cadgen: "What do you thing about?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Date: Tue, 13 May 1997 19:51:14 -0700 (PDT)
From: Kevin Snively <ksnive@premier1.net>
To: cp@opus.hpl.hp.com
Message-Id: <aabcdefg1899$foo@default>
Subject: VIRUS/TROGAN warning "Not the Good times Joke"

I've found some rather disturbing imbeded text in the a.docfile sent to
the ICPS by VIKTOR RAKOV. I believe there maybe a VIRUS or TROGAN embeded
in this file. If you downloaded this file and have not yet uudecoded it
you probably are safe simply deleating it. If you have decoded it allready
it is Time to CHECK your HD. Please do not write to me for helpin this
matter. I actualy need a bit of help my self.

My best recomendation is to aquire a relative new VIRUS SCANNER and learn
to use it. I removed the machine code from the file in question leaving
much of the embeded (hidden) text behind. the following is that text.

Kevin Snively
Former ICPS Secretary / Treasurer

"Anti_Trace",
"Good Luck in Creating Antivirus. (C) 1993, AT Corp.".

Apparition.254,700
TSR-
BA00:0000 INT21h.

Apparition.700
Anti WEB Mutation Engine [AWME] by AD. v1.0
</".AWME.AD.1267

Ian Townrow

"SCCLF-TBVSVIIMMSCV".

"This virus was written by Doctor Revenge November 23 - December 29
1993 -Italy-".

BAT.282
        Batch-
        C: VIRUS.BAT,
        AUTOEXEC.BAT VIRUS.BAT.

BAT.Batman
        BAT- BAT-
        B.COM,
        B.COM, BAT-
        INT 21h. B.COM
        (f.40h Int 21h)
        @echo.
        BAT-
        BAT.Batman

        @ECHO OFF
        REM [............]
        copy %0 b.com>nul
        b.com
        del b.com
        rem [............]

[......].

BAT.Naive
        BAT- BAT-
        RANGE_CHECK,
        "yes", BAT-.
        "yes",
        naive.com,
        "@naive.com". TSR- NAIVE.COM
        BAT-
        NAIVE.COM
        (CON),
        NAIVE.DAT,

NAIVE.COM ASCII

NAIVE.EXE:

        @echo>naive.com ?........
        @echo>naive.dat DDMJDDNCLEP........
        @echo>>naive.dat IMAGPAACIJ........
        ...................................
        @naive.com<naive.dat >naive.exe

NAIVE.COM NAIVE.DAT:

@del>nul naive.com
@del>nul naive.dat

        NAIVE.EXE, TSR-.
        @naive.exe>nul
        NAIVE.EXE Word for Windows 95

Next message: Neal Nagata, Jr.: "funky lookin' Sarracenia"
Previous message: cadgen: "What do you thing about?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jan 02 2001 - 17:31:03 PST