*** This USA text file re-vamped on August 24, 1993 *** *** by Jim Maciorowski *** 0.0 OVERVIEW Rev. 15-08-93 DEAR AMIGA USER: My name is Erik Loevendahl Soerensen. I am a 48-year-old electronics technician, and I have founded a worldwide Amiga organization of about 500 Amiga enthusiasts. Our organization is called "SAFE HEX INTERNATIONAL". The purpose of this organization is twofold: 1.> To combat and prevent the spread of compter viruses. 2.> To bring the programmers of computer viruses to justice. "SAFE HEX INTERNATIONAL" (SHI) disks are released on a regular basis (approximately 12 times per year). This frequency has the dual purpose of maintaining up-to-date protection against new viruses as they appear, and to alleviate the problem of lame hackers making compilation disks without any docs and, even worse, no addresses to which you can send new viruses. In return for sending us new viruses, you will receive the new version of our disk, "New Superkillers", to help you combat your virus problems. * * I HOPE YOU WILL APPRECIATE OUR WORK! * * CONTENTS: 0.0 Overview 1.0 Introduction 1.1 How to get a new update 1.2 Subscription service & license 1.3 Regional Virus Center 1.4 Shareware donation 1.5 Virus Data Bank 1.6 Safe Hex: How to prevent viruses 1.7 How to use this disk & new unknown viruses 1.8 Specifically for harddisk owners 1.81 Hard Disk Virus Malfunctions 1.82 If your harddisk has stopped 1.83 Harddisk virus killers 1.84 How to Install the Programs Onto a Harddisk 1.9 Bug reports 2.0 What killer to use? 2.1 Virus Checker (VC) 2.2 VirusZ: A New Excellent Killer! 2.3 FindEmAll 2.4 VT 2.5 BootX REMOVED...Now Supporting Only KS 2.0/3.0 2.6 Virus Memory Kill (VMK) 2.7 CLI and Virus Killer Tools 2.8 About Unknown Viruses 3.0 View80 search and text printing ATTENTION! -------> 4.0 This disk contains viruses for learning purposes! 5.0 Resident programs 6.0 About clock viruses and the like 7.0 How to remove BGS-9 and other file viruses 8.0 About "Saddam Hussein" and the CCCP viruses 9.0 Virus tutor (list over all known viruses) 10.0 Commercial Virus Killers 11.0 How to repair damaged HD or disks 11.1 Repair of "Error Validating Disk" 12.0 Books about viruses and hackers 13.0 Virus hardware ATTENTION! ------> 14.0 Vector setting messages 15.0 BBS Message and update of this disk 16.0 List of group members and thanksgiving 17.0 Reward of $1000 for virus programmers 17.1 The DISASTER of the future 17.2 Tend Analysis of New Amiga Viruses 17.3 Jailing for virus making and spreading 17.4 Claim for virus damages 17.5 Donate an amount and help yourself 17.6 Donation form 17.7 Donation list 18.0 Programmers Prize 19.0 How to get our other SHI-released disks! 20.0 Bug Report 21.0 Well-Known Virus-Infected Commercial Software 22.0 Viruses wanted 23.0 WANTED: Programmers for SHI killer projects! 24.0 Our addresses and payment 1.0 Introduction ================ I hope you will find this disk useful. Please send me comments, bug reports and, MOST important, NEW viruses for the purpose of updating our killers. In return I'll send you the latest version of this disk. In the following you will find some short information about the programs and how to use them. Please read ALL the doc files in order to get the full advantage of the excellent programs. Anyone who sends a "NEW" virus to me will get the latest version of this disk in return and the thanks from the authors as well as from myself. You can help by sending me virus articles (Amiga, PC, MAC, etc.) for our virus bank. Please help us and help yourself to control and eliminate the nasty viruses. See my address and the donation form below. 1.1 How to get a new update --------------------------- There will be a new version of this disk at least 12 times a year. If you are interested in getting the newest edition, I'll send you one NON-PROFIT if you send me, IN UNITED STATES CURRENCY, $5.00 (if it is regional postage), $6 (inside Europe), $7 (outside Europe), or the EQUAL AMOUNT IN YOUR OWN MONEY!! Note that THIS PRICE REFLECTS THE COST OF THE DISKS AND POSTAGE! This disk contains ONLY "freely distributable" programs, which means that you can spread the disk without any problems at all. Please see my address below in this file or the address to your REGIONAL VIRUS CENTER. Please note that the virus-killing programs on this disk are ONLY COMPACTED VERSIONS of the original killer programs, but they contain the important DOCS to function. To get the full advantage of the programs, please contact the PROGRAMMERS, using the ABOVE PAYMENT SCHEME. Any donations to shareware programs are greatly appreciated. (See section 1.4, "Shareware Donations") 1.2 Subscription service & license ---------------------------------- Subscription: ------------ Are you using the latest killers? BE SURE! Subscribe to "New Superkillers" (minimum order of 6 disks over 6 months). Payment as follows (prices listed in US dollars): US $25.50 Send to Region (Within Country) US $30.00 Send to Europe (Outside Region) US $35.00 Send to the Rest of the World ............... OR THE EQUIVALENT IN YOUR OWN CURRENCY ............... License: ------- Computer shops and other establishments are welcome to sell the English version, but our translated regional versions are protected by copyright. However, for a nominal fee, you can get a license to sell our disk commercially by buying our regional labels for an amount equivalent in your own currency: 1-23 labels, US $3 each 24+ labels, US $2 each The above offer includes full "SHI" phone support to our virus hotline!!! 1.3 Regional Virus Center ------------------------- Do you have the time and the interest to be the leader of a REGIONAL VIRUS CENTER in your country? You are very welcome to contact me, and I will give all the help you need to start. It is VERY VERY important that you are "at home" in your Amiga and know a lot about viruses and the like, so that you can help people in your country with their virus problems. If you DO want to be a leader in your country, you have to start to translate ALL the docs on this disk, and send the disk to me. But give me an advice before, and tell me about yourself and your Amiga work. It is EXTREMELY important that you have a phone!! DON'T start this virus work if you don't have time to do this job...I think it takes about 10-15 hours a week! Please see if your country does have a "SHI" Virus Center by reading the "Addresses" file on this disk. We now have a LOT of virus centers...PLEASE read the "Addresses" file to see if there is a virus center in your country. Try to contact your virus center and please offer your help. We STILL NEED the following: 1. Good programmers (Assembler and "C") for new kinds of killers. 2. Good programmers to analyze new viruses. 3. People to help with desktop layout for our public relations. 4. People who can do illustrations for our articles in Amiga magazines. 5. Good Bulletin Board contacts for fast spreading. 6. People who have a fax or HST modem for communications. From The Regional Center you can get: ------------------------------------ 1. The newest update of this virus killer for a small price 2. Help by phone with your virus problems 3. The latest news about new viruses As A Regional Center you have to: -------------------------------- 1. Make a translation of the docs in your language, and ALWAYS do a new update of ALL the docs (in case something has changed) 2. Collect new viruses from your country, writing advertisements, or write little virus articles in order to get new viruses 3. Spread this virus killer disk in your country 4. Send this disk to some big BBS's in your country 5. Help people with their virus problems As you can see above, there is a benefit in earning some money, but don't think about that at this point. You NEED to work VERY hard for the money. The benefit is that I think you will get a LOT of new Amiga friends like the ones I have gotten. 1.4 Shareware donation ---------------------- On this disk you will find some of the newest and BEST virus killers ever made, thanks to the authors. If you are not a starving college student or in a similar financial situation, PLEASE send some money to authors! Note that most of these splendid programs are SHAREWARE. Follow the ethics of this system, and send your donation to the authors if you use these programs on a regular basis. Remember that the authors spend THOUSANDS OF HOURS to help you and me. They get no beer, no girls....Oh boy, what a life! DO IT NOW! IF YOU DON'T HAVE U.S. CURRENCY, THEN SEND THE SIMILAR AMOUNT IN YOUR OWN CURRENCY. THE FACT IS THAT ONLY VERY FEW DO IT...DO YOU WANT MORE UPDATES? 1.5 Virus Data Bank ------------------- I have founded a very unique virus data bank with international support that is open for all well-known virus killer programmers to use for updating purposes. Our virus data bank is now successful, and you can see there are many virus killers that know MORE THAN 300 VIRUSES! In that consequence, I have just started a new database, containing the names and addresses of virus programmers, in order to get them punished by the law. Do you know a virus programmer? You can get a $1000 reward for his name and address! The fact is that the law punishes data crimes VERY VERY hard. Please note that your name will be confidential, known only by me! 1.6 How to prevent viruses -------------------------- The simple way: ALWAYS write protect your disks. ALWAYS turn your Amiga off for 60 seconds and on again before you insert a write-enabled disk. And please note that if you use 5.25" disks, DO NOT use transparent tape for write-protection, use a black one! The best way: Use this disk and send it to your swap friends. DON'T swap with lazy guys who send you virus infected disks more than one time. We can all make mistakes, but half-brains like that should NEVER get programs from us! 1.7 How to use this disk ------------------------ This disk will check your memory for any resident in RAM in the startup. This means that you will get a warning if there is a virus (known or unknown) in your memory. This is done by VMK, which will find ALL NEW VIRUSES and, of course, ALL OLD VIRUSES! PLEASE NOTE...THIS IS A VERY IMPORTANT POINT! -------------------------------------------- The best and easiest way to use this disk is that you check your new disks for viruses as a final operation after your have seen the contents (the version, the introes, etc.). Remember to clear the memory before testing! On inserting THE NEW SUPERKILLERS, you will at once get a requester informing you that something is resident in your memory. A virus perhaps...? If it is in fact a virus, hunt it down. Use one of the ordinary virus killers from this disk. No mercy or weakness, but try to fix that particular kind of virus. If the virus is NOT mentioned in the Virus Tutor below, send it to me AS SOON AS POSSIBLE. DON'T USE THIS INFECTED DISK and KEEP IT AWAY FROM CLEAN DISKS! Use a copy of this disk, infect it, and send the COPY with the details of EVERYTHING that happened when you first met the virus (what happened, listing dates) TO ME OR A REGIONAL VIRUS CENTER to check out! 1.8 Specifically for harddisk owners ------------------------------------ 1.81 Hard Disk Virus Malfunctions --------------------------------- If you have a hard disk, be VERY careful with the XENO, the SMILING CANCER, and the TRAVELLING JACK viruses. These are the first viruses specially made to attack hard disks. Almost every non-boot virus is well-known to be able to harm your hard disk. However, few people know that boot viruses can infect your hard disk as well. If you have an auto-boot harddisk, you may get sectors 0 and 1 on cylinder 0 infected, and you will get a message saying something like "Not a DOS disk in unit 0". ATTENTION: Use the VT killer to save your hard disk bootup! 1.82 If your harddisk has stopped --------------------------------- If you get virus problems and can't start your harddisk, try to fix the problem with a reboot of your own harddisk installation disk in order to startup your harddisk. That is VERY useful. Remember that file viruses (non-boot viruses) ALMOST EVERY TIME infect the first C: command in your s/startup-sequence. Delete this command, and replace the original C: command (found from your Workbench disk or from your hard drive backup...you DO make backups, don't you??) 1.83 Harddisk virus killers --------------------------- Ordinary killers: ---------------- For checking a harddisk, you have to use the file options in VirusZ and VT (PgrVTest). Click on "Drives" and choose yours (DH0:). Special killers: --------------- Use EVW (Virus Killer Tools directory) and Snapshot (root directory). All of these killers are excellent to place in your harddisk startup-sequence to protect for non-boot virus infection. Please remember to un-pack all imploded program files. If not, you can't run the "SHI" viruskillers from your harddisk, unless you have the explode.library and powerpacker.library placed in your LIBS: directory on your harddisk! 1.84 How to Install the Programs Onto A Harddisk ------------------------------------------------ Remember that all executable programs are IMPLODER-packed...therefore, you have to unpack (deplode) the programs before you install the programs on your harddisk. If you don't have the IMPLODER program, you can solve the problem by copying the LIBS:explode.library from this disk to the LIBS: directory of your harddisk. 1.9 Bug reports --------------- If you find some bugs, please inform the authors or me about the problems, and please use the BUG REPORT form in Section 20.0. An easy way to tell what your system has is by using the program "SysInfo" by Chris Hames and the excellent program SnoopDos by Eddy Carroll. (found on the SHI Utility Disk #1). 2.0 What killer to use? ======================= NEVER use a killer older than 3 months. Why? Because every month there are about 8-16 new viruses popping up...OF COURSE old killers will not find new viruses! All the virus killer programs mentioned beneath are SHAREWARE or FREEWARE unless otherwise stated. The commercial virus killer programs like "Viruscope", "Virus Control", and "Master Killer" are NOT better than the following mentioned virus killers: 2.1 Virus Checker (VC) ------------------------- The Virus Checker is an excellent all-purpose virus killer and is very easy to use. Please note the fact of its excellent "Learn Mode", which makes it easy to learn new uknown viruses too! If you want to use Virus Checker with KickStart 2.0 or higher, you need to remove the ";" in front of the "commodities.library" found in the LIBS: directory. In this way you will not get the requester error. It is good for all novices who don't know how to start and use other, more technical, virus killers. 2.2 VirusZ ---------- VirusZ is excellent for background running on user disks or for your harddisk. I'd like to remark that you have the advantage of having a virus killer still checking your disks as a background task! This program is a MUST for everybody. It has excellent un-pack features to test packed programs for viruses. And there is a pull-down menu...I have gotten reports that some killers have forgotten this. This killer is a killer of quite a new generation, knowing more than 10 different disk packers! 2.3 FindEmAll ------------- FindEmAll is a new and excellent RAM virus checker. When you want to use the program, remember first to format a disk, then install the FindEmAll on this disk or do the same on your favorite disks. Many people don't know how VERY fast and VERY reliable this program is to use. The way to use the program is very special. First, look at the new disks you get (you MUST load to the start of the program), then load the FindEmAll program. FindEmAll then tells you if there are some illegal calls, perhaps from a virus. This program is EXCELLENT to find new unknown viruses. 2.4 VT ------ Use the excellent VT virus killer. It is a German killer, but I think you will be very surprised how easy you are able to use this ultimate Killer. The author had done a very good amount of work with documentation and such. This new version has a check feature for Read/Write errors and cruncher types as well. EXCELLENT! Please note that you can save your hard disk boot block too, to avoid hard drisk breakdown by boot virus infection. A very good virus killer indeed...very useful for harddisk checks, and best knowing killer programs concerning file/link viruses! 2.5 BootX REMOVED...Now Supporting Only KS 2.0/3.0 -------------------------------------------------- BootX is a very good all-around virus killer with file check, learn option for boot viruses, and everything you need for a good virus killer program (except for an analyze mode, but maybe you will find it on the next version of this ultimate killer). You will NOT find BootX on this disk...you will find it on "The New Superkillers II" which is a disk that supports Amiga KickStart 2.0-3.0 programs. This is my FAVORITE! I think it is the BEST OF THE BEST, including commercial virus killers! (USA Note: SHI has acquired the rights to BootX, and Peter Stuer has released a patch for his ABSOLUTE FINAL release. It is now BootX 5.23b-1.75a.) 2.6 Virus Memory Kill (VMK) --------------------------- VMK is a very unique virus killer for your startup-sequence with an excellent analyze function. To this day, I have not yet found a new virus that VMK could not find. Please note that VMK has a very splendid feature which shows the virus text. This the MOST interesting point, because it also works if you have a new non-boot virus! 2.7 CLI and Virus Killer Tools ------------------------------ By using CLI, you will find some very, very useful programs and tools in the "Virus killer.Tools" directory and the C: directory, which gives you better results in hunting viruses. Program Usage Purpose --------- ------- --------- EVW EVW Protects HD in the startup Devs/Printers Devs/Printers Change printers BGS-9/TTV-1 Virus LEARNING PURPOSE ONLY SCA Virus LEARNING PURPOSE ONLY VMK VMK Killer for startup-sequence Update Update txt,files Warning that a disk is too old There are also some other C: commands, most of which are pretty much self-explanatory. 2.8 About Unknown Viruses...and X-Link, Bootjob, and the like ------------------------------------------------------------- Please follow these instructions if you get a disk with a new unknown virus or get a disk containing one of the following programs: X-Link, Bootjob, Xboot, or FileBootBlock. Dangerous prorgrams: -------------------- Several users are very confused when they read that the above programs are stated as REAL VIRUSES, as you can probably understand. These programs are able to hide a real virus in 2 ways, so that the virus killers can't find the virus itself: . Some can convert a bootblock to an executable. . Others (X-Link) are able to split up a file virus into 2 files. A new, unknown virus: --------------------- Several users are very confused, too, if they get a new virus not known by any virus killer, as you can probably understand. PLEASE FOLLOW THIS GUIDE if you have found a new unknown virus or the programs X-Link, Bootjob, Xboot, or FileBootBlock: . Make a copy of your original Workbench disk. . Try to infect this copy of your Workbench-backup-disk (boot up with the disk in write-enable position). . Try to check the file dates if you have an internal clock. If you have a file from "today" then this file is probably the virus itself. . Compare the original Workbench disk with this "infected" disk and try to find changes in the files or bootblocks. . The possible infected disk can of course be tested as usual by an ordinary virus killer because the hidden virus will now be visible on the infected backup-copy! . If you don't find any virus by scanning or by testing the bootblock, THEN you can say "no problems--no virus on this disk". 3.0 View80 search and txt. printing =================================== Try to use the print options in the menu of View80 to print out the documentation (complete files or pages of files) and use the excellent search feature! 4.0 ATTENTION! This disk contains viruses for learning purposes! ================================================================= NOTE: The BGS-9 / TTV-1 Virus is write-protected on this disk. You can't remove the virus, but it DOES NOT infect your memory or disks in this special case. You can ONLY use the SCA virus on this disk, if you use the option "Bootblocks/load" (from file), and "Write BB" (Bootblock) to another disk. Be EXTREMELY careful with the virus, or you will destroy some of your disks! This virus is ALIVE, but IT WILL NOT infect another disk from THIS DISK! The SCA virus only infects Amiga systems using Kickstart 1.2, but can be installed on all systems, and then will be found by any virus killer. Note that there are 3 different BGS-9 viruses for TESTING PURPOSES of the excellent unpack features you can find in the VirusZ and VT killers. These viruses are ONLY on this disk to make you familiar with virus hunting, by using the different virus killers in practice. 5.0 Resident programs ===================== If you meet some resident programs like SYSTEM Z, GUARDIAN, and the like, INSTALL (get rid of) THEM. Such programs are now VERY dangerous because they can hide the new viruses (This will happen with the new generation of virus killers when you examine your Amiga memory for viruses). 6.0 About clock viruses and the like ==================================== Please note that NO virus can infect your clock and REMAIN alive in your clock! There ARE some programs and disk bugs which are able to make strange things happen with your clock. I recommend that you use a program called "System Test Program v9.1" to repair your clock if you have problems. Of course, there are other alternatives if you don't succeed: 1. Type "SETCLOCK OPT RESET" from the CLI , or 2. Use your Amiga BASIC and type "Poke 14417980" (HEX address dc003c). Then you will get a zero (0) on the HOLD BIT in your clock, and the clock will start again. 3. The newest SETCLOCK command on this disk, and Workbench 1.3/2.0/3.0 is now able to fix most of the problems. 7.0 How to remove BGS-9 and other file viruses ============================================== This virus is a non-boot virus (marked "F" in the virus tutor). It takes the name in the first command in the startup-sequence and infects this command like almost all non-boot viruses. But this virus is placing the original C: command in the DEVS: directory as a nameless file. You can remove this virus and other viruses like this by following these instructions: 1. Look at your startup-sequence and take note of the first command. 2. Find it in the C: or root directory (file size 2608 bytes) and delete this. 3. Load a disk utility like SID, DiskMaster, etc. 4. Look for the nameless file in the DEVS: directory. 5. Rename this file to its original name (the first command name in the startup-sequence. Move it to the C: directory or where it belongs. Please remember that several virus killers (like VirusX) think you have an infected disk if you don't rename this nameless file. A COPY hint: If you have errors when you are using X-Copy, try to copy to RAM and back again. In many cases you will then have a perfect disk! 8.0 About "Saddam Hussein" and the CCCP viruses =============================================== About Saddam Hussein: -------------------- Please be VERY careful if you are working with the new "Saddam Hussein" file/link virus. NOTE that there is boot virus with the same name, so don't be confused. I get a lot of reports about the worldwide spreading of this VERY nasty virus; 6 well-known BBS hard disks have been corrupted in the United States in the month of June 1991! Here are some facts about this virus: 1. The virus is a "multi-headed" file and link virus. It always infects in the L: directory; if one is not there, it will make one itself. 2. The Saddam file virus part is always to be found in L/Disk-Validator with the same file length (1848) and the same name. OH BOY!! 3. It can infect and survive a reset with the new Super Fat Agnus (1 MB ChipMem)...the only one I know of that can! 4. The Saddam link virus part is a VERY VERY easy spreading virus. It can link to all files (executed, written, or copied), but it does not change the file length; instead, it only writes "IRAK" in the start of the files. Please note that all these infected files will get R/W errors! The original "Saddam" infects hard disks as well...I have gotten several reliable reports from Australia (1) and the United States (5, all concerning BBS damages), where more than 500 program files were damaged. 5. It is IMPOSSIBLE to delete the virus or the link-infected files with a file editor like "DiskMaster" or from the CLI. 6. The Saddam Hussein virus does NOT infect any disk if copied from another disk AND if your disk is error-free! PLEASE NOTE that VirusZ and VT are the ULTIMATE "Saddam" killers, but ONLY use "Check files" to FIND the "Saddam" virus; you must then use the "Repair Disk" (or like option) to salvage the "IRAK" infected files. These killers will find the "Saddam" virus and make it passive, then repair the infected files near 100% of what they were. It can't remove the virus itself...you have to re-install the original Disk-validator. If you have infected disks, I recommend that you try to use several different killers from this disk. In some cases, the killer may just break down by meeting the virus if you try to repair your disks or it will not find the virus you've got. A good bit of advice: ALWAYS use a backup of your disk when you have to repair your virus problems, ESPECIALLY with the "Saddam" virus or other link or file viruses! Many people have contacted me, saying that they have found a "SPECIAL" virus, an "Australian Parasite" virus which cannot be killed with VirusX 4.01 (the LAST official release). I understand this problem quite well, because by a stroke of luck, VirusX is accidentally able to find the "Saddam Hussein" disk-validator virus. The problem here is that the Australian Parasite virus is a virus you will find in the boot block, and the nasty "Saddam" virus is to be found in the L: directory. After repair, always use a program like QUARTERBACK TOOLS to check the disk to see if the disk structure is all right. About the CCCP Virus: -------------------- I have gotten letters from several people who have problems with the "CCCP" virus. The problem is that this special virus has both a boot part and a link part. The solution is that you delete both parts. If you only delete the boot part, the remaining link part will write a new boot part as soon as possible. PLEASE NOTE: In most cases you will find all non-boot viruses infecting the very first C: command stated in the S/startup-sequence. If not, please try to check the file dates if you have a clock. If you STILL have problems, try to infect a copy of your "Workbench Disk" and try to find the changes in the files by doing a compare between the files or (even better) do a file scan with a program like BootX in the "check files" mode. 9.0 Virus Tutor =============== Code Remarks --------------------------------------------------------------------------- $4EB9 Link + 0 0 16 Bit Crew + 0 A ABC Virus - 0 0 Abraham + 0 P Access Forbiden + 0 0 Aibon trojan (776) - 0 0-BBS Aibon 2 trojan (784) - 0 0-BBS Aibon-ACP.Ctrl. - 0 0 AEK Virus + C L A.H.C. Virus - 0 0 AIDS (Vkill 2) + E 0 AIDS-HIV Virus + 0 0 Alien New Beat (New Beat) + 0 0 Amida - 0 0 AmigaDos Viruskiller V 2.1 + F 0 Amigafreak + 0 0 Amiga Knight (6048) - 0 0-F Amiga Master + 0 0 AmiPatch virus 1.0a (8288) - 0 0-BBS Angel - 0 0 Anti-Knacken - 0 0 Antichrist (Jeff Clone) - 0 F-F Antivirus - 0 0 ASS Virus + 0 0 ASV Virus + 0 0 Asylant + 0 0 Australian Parasite + 0 0 Australian Paradise - 0 0 AutoBootingBootProtectorv2.0 - 0 0 Bahan + 0 T Bamiga Sector One (B.S.1) + 0 0 BandVirusSlayer + 0 0 BB-Prot - 0 0 Beethoven (2608) - 0 0 Bestial Virus (7876) - 0 0-L BGS-9 1 (2608) + D B-F See for more in chapter 7.0 BGS-9 2 (2608) + D B-F See for more in chapter 7.0 BGS-9 3 (2608) - D B-F See for more in chapter 7.0 Big Boss + C F Black Flash 2.0 + 0 0 Black Night - 0 0 Blackstar + 0 0 Blade Runner + 0 F BLF Virus + 0 0 Blizzard Protector 1.0 + 0 0 Blizzard Protector 3.1 + 0 0 Blizzard Protector 3.3 + 0 0 Blockchain Virus - 0 0 Blowjob 1.0 + 0 0 Bluebox Trojan (23.033) + C 0-T Bombed by some vius + 0 0 Boot-Aids - 0 0 Bootjob 1.0 (9876) + 0 0-H Not virus, but able to hide virus BootX Virus (Perverse I) + 0 0 Bret Hawnes (2608) + 0 Å-F Butonics (1.1) + 0 T Byte Parasite (2108) + 0 0-F Byte Parasite II (908) + D 0-F Byte Parasite III (2160) + 0 0-F Byte Warrior 1 + C C Byte Warrior 2 + C C Byte Voyager I + 0 0 Change program code Byte Voyager II + 0 0 Change program code Byte Bandit 1 + B D Byte Bandit 2 + B D Byte Bandit 3 (NoHead) + B D Byte Bandit Error + B D Byte Bandit European + B D Byte Bandit Turbo + B D Cameleon + 0 0 Change program code (Xcopy 6.5) CCCP 1 Virus (1044) + 0 0-BL You have to remove both parts Centurion I (3916) + 0 U-L Called "Smily Cancer" too Centurion II(4676) + 0 U-F Called "Smily Cancer" too Chaos-Master 0.5 (16676) + 0 0-F Chaos (Lameblame) + 0 0 Challenger Trojan (126336) + E 0-T Charlie Brown (Hireling) - 0 0 Cascade - 0 0 CheaterHijacker + 0 0 Check Filevirus (18644) - 0 0-F Christmas Violator (1060) - 0 0-F Claas Abraham (MCA) + 0 P Cli-Manager + 0 0 Clist + 0 0 Clock 1.1 (setmap & Install) - 0 0 Clock Virus (fast running) - 0 0 Clock Virus (back running) - 0 0 Clonk + F 0 Cobra + 0 0 Coder + 0 0 Colors Virus Carrier (2196) + 0 Å Commodore Virus (1752) + 0 0 Commodore BB - 0 0 Compuphagozyte VC4.00 (1452) + 0 0-F Compuphagozyte VX5.00 (1148) + 0 0-F Compuphagozyte 1 (1452) + 0 0-F Compuphagozyte 2 (1148) + 0 0-F Compuphagozyte 2.2 (592) + 0 0-F Compuphagozyte 3 (900) + 0 0-F Compuphagozyte 3b (568) + 0 0-F Compuphagozyte 3c (936) + 0 0-F Compuphagozyte 3d (936) + 0 0-F Compuphagozyte 4 (892 ) + 0 0-F Compuphagozyte 4a (916) + 0 0-F Compuphagozyte 4b (1012) + 0 0-F Compuphagozyte 4c (1048) + 0 0-F CompuPhagozyte 7 - 0 0-F CopyLock-Virus (Block 0-3) - 0 0 Cracker Exterminator - 0 0 Crackright 1.01 + A J Crackright 1.02 + A J Crackright 1.03 + A J Crackright 1.04 + A J Crackright Paratax II + 0 0 Creeping-EEL - 0 0 Crime Link (1000) - 0 0-L Crime 2 (4920) + 0 0-L Crime 92 (12984) + 0 0-L Crime ++ Link (872) + A 0-L Destroyes data files! D & A virus + C F When infected you get N Dos disk D & A File virus (1052) + B 0-F Infector for the DA BB virus Dag + 0 0 Dag Creator (7000) + 0 0-F Dailer BBS V2.8g (33908) - 0 0-BBS Infiltrate or damage BBS Darthvader 1.1 + 0 0-F Dasa 1 (Byte Warrior 1) + C C Dasa 2( Byte Warrior 2) + 0 0 DAT 89 + 0 0 Datacrime (CCCP clone) + 0 0 Datacrime-killer (ASV clone) - 0 0 Deniz + C F Derk (Mallander) + 0 0 Descriptor 3.0 + C 0-T Destructor + 0 0 Devil.11.B.Door.(3 files) - 0 0-BBS Infiltrate or damage BBS Devil.V8.B.Door (44224) - 0 0-BBS Infiltrate or damage BBS Died 2.8c PP Bomb (67028) + 0 0-BBS Infiltrate or damage BBS Digital Emotion + 0 0 Dirty Tricks + 0 0 Disgust - 0 0 Diskguard 1.0 + 0 0 Disk.info virus + 0 0-B Disk.info Bomb (370) - D 0-F Disktroyer (804) + D 0-F Disktroyer v2 (812) - 0 0-F DisasterMaster V2 (1740) + 0 0-F Disgust - 0 0 Disktest (1348) - 0 0-F Disk-doctors 1.01 + A J Disk-doctors 1.02 + A J Disk-doctors 1.03 + A J Disk-doctors 1.04 + A J Disk Herpes (Phantasmuble) + 0 0 Disk-Killer 1.0 (1368) - 0 0 Disk Repair V.1.2 (49336) - 0 0-BBS Infiltrate or damage BBS Disk Repair v 2.6 (37740) - 0 0-F DiskRepair BBS-Link - 0 0 Disk Speed Check (33152) + 0 0-T Disk Terminator (Sca clone) + 0 F Diskval 1234 (1848) + 0 0-F Saddam Hussein strain Diskval Risc (1848) + 0 0-F Saddam Hussein strain Divina Exterminator I + 0 0 Divina Exterminator II + 0 0 DM Trash (7636) + 0 0-BBS Infiltrate or damage BBS Dopus (6408) - 0 0-F Dotty + 0 0 Dr. Mosh 1 + 0 0 Dr. Mosh 2 + 0 0 Drive.info (Trojan) + A 0-B Infect disks with Crime ++ DSC 101 virus (33152) + 0 0-T DStructure A (428) + 0 0-B DStructure B (352) + 0 0-B DStructure C (464) + 0 0-B DumDum + 0 0 DumDum 2 (BB 6 sectors) + 0 0 DwEditv1.6 (43700) - 0 0-BBS Echo Compuphago Link + 0 0-L EM-Wurm (3888) + 0 0-BBS Destroy Euromail! Excrement Installer - 0 0 Excreminator 1 (2392) + 0 0-F Executors - 0 0 Express 2.20 + A 0-T Very destructive Exterminaor 2 + 0 0 Extreme + 0 0 Fast Eddie + 0 0 Fast Virus 1 + 0 0 Fast Virus 2 + 0 0 Fast-loaded Byte Warrior + 0 0 FileBootBlock (1080) + 0 0-H Not virus, but able to hide virus F.I.C.A.Virus + 0 0 Forpib + 0 0 Freedom Virus (10876) + 0 0-F French Kiss + 0 0 Freshmaker virus - 0 0 Fritty + 0 Æ Fuck device BB - 0 0 Fuck virus Installer (22252) + A 0-T Fuck virus (3604) + A 0-T Take over the original loadwb Future Disaster + 0 0 G-Zus Packer (15016) - 0 0-B Gadaffi + 0 0 Gadaffi-Mad II + 0 0 GCA - 0 0 GeneStealer + 0 0 Glastnost (2048 Boot) + 0 0-BL Gandalf - 0 0 GCA BB (forpib clone) - 0 0 Genetic Protector 2.0 BB - 0 0 Germany + 0 0 Golden Rider (836) + B 0-L Grafitti + 0 A Gremlins + 0 0 Gremelin 2 + 0 0 Guardian.DMS - 0 0-BBS Infiltrate or damage BBS Guardians Boot Aids - 0 0 Gyros + C 0 GX Team + 0 0 Hackers Etic - 0 0 Happy New Year - 0 0 Hardex Saddam (1848) - 0 0 Hauke + 0 0 Hauke Exterminator + 0 0 H.C.S. 4220 1 + 0 0 H.C.S. 4220 2 + 0 0 Heil Virus + E 0 Shows graphics e.g. a swastika Herpes-Phanta + 0 0 Hill - 0 0 Highlander + 0 0 Hilly + 0 0 HNA Virus - 0 0 Hochofen-Trabbi (3400) + 0 0-L Hoden 33.17 + 0 0 Hulksters + 0 0 Hunk-lab - 0 0-L Ice + 0 Q Ice Breakers + 0 0 Iceman and IRQ Virus + 0 Q Incognito (Noname) + 0 0 Infector (Fast Eddie clone) - 0 0 Infiltrator (1052) + B 0-L Int-Cli (6048) + 0 0-F Another name for Amiga Knight Virus IRQ Run (1096) + 0 0-L IRQ Team 4.10 (1096) + 0 X-L Indiana Jones - 0 0 Influenza - 0 0 Ingo + 0 0 Ingos Return - 0 0 Infiltrator (1052) + C 0-L Spreaden by Diskmaster20+ Infector (Fast Eddie clone) - 0 0 Inger IQ + B D IRQ II (1164 Byte) - 0 X-F Jeff-Butonic 1.31 (3408) + 0 V-F Promt "Einen ganz wunderschonen. Jeff-Butonic 3.00 (2916) + 0 V-F Promt "Jeff is speaking" Jeff-Butonic 3.10 (2916) - 0 V-F Promt "Sauf blos keinen Wodka" Jeff-Butonic 3.20 (2900) - 0 V-F Attention destroy Harddisk boot! JITR + 0 0 Joshua 1 + 0 0 Joshua 2.1 + 0 0 Joshua 2.2 + 0 0 Joshua 3 - 0 0 Julie (Tick) + 0 0 Gotcha Lamer + 0 0-L Kauki + 0 0 Kefrens I + 0 0 Kefrens II - 0 0 Kefrens N + 0 0 Kobold II - 0 0 L.A.D.S + 0 0 Lameblame (Taipan) + 0 0 Lamer Decoded + 0 0 Lamer Exterminator I + A E Lamer Exterminator II 1 + A E Lamer Exterminator II 1a + A E Lamer Exterminator II 1b + A E Lamer Exterminator II 1c + A E Lamer Exterminator II 2 + A E Change program code. "Invisible" Lamer Exterminator III + A E Lamer Exterminator IV + A E Change program code Lamer Exterminator 10 + A E Lamer Exterminator (3916) + 0 0-L Lamer8 File/VirusX (13192) + 0 0-F Lamer Trojan Horse (4172) + 0 0-L Lame Saddam (1848) + 0 0-F Lamestyle UK + 0 E Clist Strain Lamervirusx (13192) + A 0-T Laurin Saddam (1848) + 0 0-F Lhwrap Trojan (48280) + 0 0-T Leviathan - 0 0 Leviathan file (1056) - 0 0-F Liberator 1.21 (10936) + B 0-B Liberator 3.0 (10712) + 0 0-F Liberator 5.01 (16924) + 0 0-F Loverboy & the sex machine + 0 0 LSD + C F Lupo (Nano clone) (1484) - 0 0-F LZ Link virus (400) + 0 0-L LZ 2.0 Trojan (37380) + 0 0-T M & U 5.5 + F 0 M & U 6.1 + F 0 MAD 1 (Forpib Strain) + 0 0 MAD 2 + 0 0 MAD 2a - 0 0 MAD 3 (Dasa Strain) + 0 0 MAD 4 (Lamer Strain) + 0 0 MagiCall (149664) + 0 0-T MegaMaster (MGM 89) + 0 0 MegaMon PP Bomb (26856) - 0 0-BBS Infiltrate or damage BBS Metamorphosis 1.0 (1060) + 0 0-L Metamorphosis Boot + 0 0 Mallander V1.0 (Derk) + 0 0 MemSearcher virus - 0 0 Menems Revenge (4168) + A 0-L Metamorphosis 1.0 (1060) + 0 0-L Metamorphosis 1.0 BB + 0 0 Mexx + C F MG's + A 0 Micro-Master (AEK) + C L Microsystems + 0 0 Minidemo.lzh (11688) + 0 0-T ModemCheck Installer (22252) + A 0-T ModemCheck virus (3604) + A 0-T Take over the original loadwb ModemCheck 1.1 LoadWB (22252)+ 0 0-T Monkey Killer - 0 0 Morbid Angel + 0 0 Mount Virus (1072) - 0 0-B MT Virus + 0 0 MVK (1052) - 0 0-F MWB virus (Julie clone) - 0 0 Nano (1448) + 0 0-F Nano 2 - 0 0-F Nasty-Nasty + 0 0 Nast (2608) + 0 0-F Newbeat (Alien Newbeat) + 0 0 Ninja - 0 0 No Head (ByteBandit 3) + 0 0 No Bandit Any More + B D No-Guru 2.0 (1224) + 0 0-F Noname 1 (Incognito) + 0 0 Noname 2 (Incognito 2) - 0 0 Northstar 1 + C G Northstar 2 + C G Northstar 3 + C G NoVi- Terrorist 2 (1612) + 0 B-F Nuked 007 - 0 0 Obelisk I + 0 0 Obelisk II + 0 0 Ohio - 0 0 Opapa + 0 0 Overkill (block 1-3) - 0 0 P-Cracks - 0 0 Paradox I (Logic Bomb) + 0 0 Paradox II + 0 0 Change program code Paramount + C C Paratax 1 + 0 0 Paratax 2 + 0 0 Paratax 3 + 0 0 Payday - 0 0 Pentagon Circle + 0 H Pentagon Circle Virusslayer 1+ 0 H Pentagon Circle Virusslayer 2+ 0 H Pentagon Circle Virusslayer 3+ 0 H Perverse I + 0 0 Phantasm + 0 R Phatasmic Force - 0 0 Phantasmuble + 0 R Phantastograph + 0 R Plastique (16 Bit-Crew clone)+ 0 0 Power Bomb 2.0 + B D Powerpacker32.lzh ( 139670) + C 0-T Attention don't use this Trojan! PowerPacker 3.2 Bomb (71308) + C 0-T From Powerpacker32.lzh Power Team - 0 0 Pstats - 0 0-F PVL Sound bootblock + F K Qz Parasite + 0 0 Red October + 0 0-? Replex + 5 0-F Not virus intercept vectors! Republicaner + 0 0 Return of the Lamer (1848) + 0 0 Also called "Disk-Validator Virus" Revenge + 0 I Revenge Bootloader + 0 0 Revenge of Lamer 1 (4448) + 0 M-F Revenge of Lamer 2 (4560) + 0 M-F Rimednac - 0 0 Ripper + 0 0 Riska + 0 Æ Rob Nothern (2616) + D 0-F Rude Xeroxx 2.0 + 0 0 Sachsen Virus no 1 + 0 0 Sachsen Virus no 2 - 0 0 Sachsen Virus no 3 + B 0 Saddam Hussein (boot virus) + 0 0 Saddam Hussein (1848) + A 0-FL Danger! See for more in chapter 8 Saddam clone Risk (1848) + A 0-FL Clones only the txt is changes Saddam clone Loom (1848) + A 0-FL Saddam clone ][ (1848) + A 0-FL Saddam clone Lame (1848) - A 0-FL Saddam clone Hard (1848) - A 0-FL Saddam clone Laurin (1848) - A 0-FL Saddam clone Animal (1848) - A 0-FL Saddam clone Kick (1848) - A 0-FL Saddam clone Nato (1848) - A 0-FL Saddam clone Affe (1848) - A 0-FL Saddam clone Iran (1848) - A 0-FL Saddam clone Gral (1848) - A 0-FL Saddam file (1452) + A 0-F Sao Paulo - 0 0 Satan - 0 0 SCA 1 + C F SCA 2 + C F SCA-2001 + C F SCA-Paratax + C F SCA-Kefrens + C F Scarface + 0 0 Scarface II + 0 0 Schwartznegger - 0 0 SCSI virus (1560) - A 0-F Self-Writer Pseudo Virus + 0 E Sendarian + 0 0 Sentinel (Excrement clone) - 0 0 Sepultura (1876) - 0 0-F Setmap & install - 0 0 Sherlock 2.0 + F 0 Shit virus + 0 0 Show Sysops (7860) + 0 0-BBS Infiltrate or damage BBS SMBX-Mount.Installer.(64488) - 0 0-F Smily Cancer I (3916) + A 0-L Also called "Centurion" Smily Cancer II (4676) + 0 0-L Also called "Centurion" Snap PP Bomb (44260) - 0 0-B SnoopDos 1.6 Trojan (11312) + 0 0-BBS Trojan against AmiExpress Sonja Virus + 0 0 Speed Check Virus (33152) + 0 0-T SS Virus + E 0 Shows graphics e.g. a swastika Starfire + C G Starfire 2 + C G Starlight-Warhawk + 0 0 Starlight II-Microsystems + 0 0 Suicide - 0 0 Suntron - 0 0 Suntronic + F 0 Superboy + 0 0 Supply Team + 0 0 Swiftware (44224) - 0 0 Switch-Off Virus + 0 0 Change program code Synister Syndicate + E 0 Sysinfo 1.1 (5680) - 0 0-BBS Infiltrate or damage BBS Sysinfo 2.2 (5656) + 0 0-BBS Infiltrate or damage BBS System Z 3.0 + F 0 System Z 4.0 + F K System Z 5.0 + F K System Z 5.1 + F K System Z 5.3 + F K System Z 5.4 + F K System Z 6.0 (Telstar) + F K System Z 6.1 + F K System Z 6.3 + F K System Z 6.4 + F K System Z 6.5 + F K Taipan Chaos + 0 0 T.ET.E Virus - 0 0 Taipan Lameblame + 0 0 Target BB 101 Crew + C 0 Target Installer (14080) + 0 0 Telecom (756) - 0 0 Telstar (SystemZ 6.0) + F 0 Termigator + 0 0 Terrorists (1612) + 0 B-F Terrorist 2 -NoVi (1612) + 0 B-F T.ET.E Zombi Clone - 0 0 T.F.C. Revenge 1.03 + 0 0 T.F.C. Revenge 2.14 + 0 0 T.F.C. Revenge (2804) + 0 0-F The Amiga Freak + B D The Cure of little Sven + 0 0 The New Kid + 0 0 The Revenge + B I The Traveling Jack 1 (198) + A U-L The Traveling Jack 1a (198) + A U-L Hunk change and is not found as 1. The Traveling Jack 2 (198) + A U-L The Traveling Jack 4 + 0 0 Tick (Julie) + 0 0 Timebomb Avirex (1024 Byte) + D 0-B Timebomb 0.9 (7840) + E 0-B Timebomb 1.0 (7840) - 0 0-B Timebomber (936) + 0 0-B TimerDate virus (4812) + 0 0-B Need the setmap file (1712) to start Timer virus (4812) + 0 0-B Need the setmap file (1712) to start Timer virus setmap (1712) - 0 0-B TNK Virus + 0 F Tomates Gentechnic Service + 0 0 Tomates Gentechnic Service 2 + 0 0 Topdog 1.0 (2260) - 0 0-BBS Infiltrate or damage BBS Top Util Virus (2260) - 0 0-BBS Infiltrate or damage BBS Tristar Viruskiller Virus - 0 0 Twinz Santa Claus + 0 0 Trabbi-Hochofen (3400) + 0 0-L Traveller 1.0 + 0 0 Triplex + 0 0 TriSector 911 + 0 0 Tristar-Viruskiller V1.0 - 0 0 Trojan 3.0 (10536) + 0 0-BBS Trojan against AmiExpress Trojan Killer - 0 0 TTK Virus - 0 0 TTV1 1 (2608) + D B-F TTV1 2 (2608) + D B-F Turk + 0 0 UCA - 0 0 UcAIDS - 0 0 Uhr virus.BB - 0 0 UInfo (13048) - 0 0-BBS Infiltrate or damage BBS ULDV 8 + 0 0 Ultrafox + E S Uinfo (13048) - 0 0-BBS Infiltrate or damage BBS Umyj Dupe Virus - 0 0 Unicorn V1.1 + F 0 USSR 492 (excrement clone) - 0 0 V Kill 1 + D 0 V Kill 2 + D 0 Waft + 0 0 Wahnfried - 0 0 Warhawk 1 + 0 0 Warhawk 2 + 0 0 Warshaw (Avenger) + 0 0 Vermin + 0 0 Change program code Wieder da (VirusV1) + 0 0 WiteBox BBS-Link - 0 0 Witebox v 8.0 Trojan (34896) - 0 0-BBS Infiltrate or damage BBS VCCofTNT + 0 0 Viphs + 0 0 VirConSet virus - 0 0 VirconSet 2 virus - 0 0 Virkill 2 - 0 0 Virus Construktion Set - 0 0-F Virus Terminator 6.0 (1880) - 0 0-T Virus V. 4.2 + 0 0 Virus V.1 (Wieder da) + 0 0 Virus II - 0 0 Virusblaster 2.3 (9232) + 0 0-B Virus Fighter + 0 0 Virushunter + F 0 Virusmaker 1 - 0 0 Virus Slayer 1.0 + 0 0 VirusTest (936) + 0 W-B Virus Killer virus + F 0 Zaccess 1 + 0 0 Zaccess 2.0 + 0 0 Zaccess 3.0 + 0 0 ZAPA_B.Door (7636) + 0 0-BBS Infiltrate or damage BBS Zest (Gremelin 2) + 0 0 Zombi 1.0 + 0 0 Zorro Willow - 0 0 Zviruskiller 1.5 - 0 0 ZSpeed (9556) - 0 0-BBS Infiltrate or damage BBS XaCa virus (1368) - 0 0-F XBoot (2266) + 0 0-H Not virus, but able to hide virus Xcopy2 - 0 0 Xcopy 6.5 Trojan (28336) + 0 0-BT Infect "The Cure" BB virus Xcopy 6.5 Trojan (28020) + 0 0-T Infect with "Saron" link virus Xcopy/Sca + E F Xeno (3260) + B 0-L X-link 3.0 (3628) + 0 0-H Not virus, but able to hide virus XprZSpeed 3.2 (9556) - 0 0-BBS Infiltrate or damage BBS X-Ripper 1.1 (41360) - 0 0 BBS Infiltrate or damage BBS (xxxx) indicates file length ---------------------------- Tutor Explanations: ------------------ Code 1' - I don't have this virus, please send it to me! + I have this virus for test purposes. Code 2' 0 I don't know anything about this virus A Very dangerous and easy spreading virus B Dangerous and easy spreading virus C May be dangerous and it is easy spreading D May be dangerous and is NOT easy spreading E Not at all a virus F Virus Protector normally resident in RAM Code 3' A- Family Code indicates virus-family. Please note that a virus can be exactly the same name as another, but with a different name. -F Indicates a non-boot block virus (File virus) -L Indicates a non-boot block virus (Link virus) -BF Indicates a boot virus with a file part -BL Indicates a boot virus with a link part -B Indicates a BOMB, which can't infect -T Indicates a TROJAN HORSE, which can't infect -TB Indicates a TROJAN HORSE which infects Bootblocks -TL Indicates a TROJAN HORSE which infects link viruses -BBS Indicates an infiltrator program for Bulletin Boards -H Indicates a program which can hide a virus. Example: B-F...."B-" (the first part) indicates FAMILY (TTVI), and "-F" (the second part) indicates FILE. Compare List : (The same viruses have different names, depending on which virus killer you are using) Crackright = Disk-Doctors MicroMaster = AEK Byte Warrior = Dasa BGS-9 = TTV-1 / File Virus The Amiga Freak = Byte Bandit 2 Starfire = Northstar Claas Abraham = Abraham Disk Herpes = Herpes Herpes = Phantastograph Phantastograph = Phantasmuble Iceman and IRQ = Ice Revenge of the Lamer = Lamer Trojan Pentagon Circle Virusslayer = Pentagon Circle Phantastograph = Phantasm Dasa 1 = Byte Warrior Aids = Vkill 2 Julie = Tick Newbeat = Alien Newbeat MegaMaster = MGM (89) Smiling Cancer = Centurion Self-writter Pseudo virus = Lamer Ext. II-2 U.K. Lamerstyle = Lamer (mutant Virusslayer 1.0 = The Band Australian Parasite = Oz Parasite Byte Warrior = Byte Hawk Digital Emotions = Digital Dreams Bytebandit Error = Bytebandit 2 Virus Predator (Spain) = Julie/Tick Centurion = The Smily Cancer Bytebandit Plus/Bytebandit 3 = Nohead Switch-Off = Joshua 2 Incognito = MT Virus Self-Writer Pseudo/Rene = Lamer Ext. 7 PVL Virus Protector 6.0 = Telstar Modem virus Trojan = Bluebox Hochofen = Trabbi Mallander V1.0 = Derk Wieder da = Virus V1 Lamer 8 File = LamerVirusX Taipan Chaos = Chaos Class Abraham = MCA U.K. Lamerstyle = Clist Coders Nightmare = Coder Dirty Tricks = Incognito Taipan Lameblame = Lameblame Liberator virus 2.1 = Memcheck 8.1 Revenge of the Lamer = DosSpeed Taipan Chaos = Chaos SystemZ 6.0 = Telstar Little Sven = Cameleom AutoBootingBootProtector v2.0 = VCCofTNT Nuked 007 = Shit Amiga Knight = Int_Cli Terrorist 2 = NoVi (1612) TimerDate = Timer virus Speed Check Virus = DSC 101 virus Republicaner = REP Cli-Manager = Viruskiller Gremelin 2 = Zest Perverse I = BootX Virus The New Kid = TNK Virus Top Util Virus = Topdog 1.0 Setmap & install = Clock 1.1 XprZSpeed 3.2 = ZSpeed Zapa B Door (Adder) = DM-Trash Lamer Exterminator File = Lamer loadWB Compuphagozyte VC 4.0 trojan = Compuphagozyte 1 Compuphagozyte VX 5.0 trojan = Compuphagozyte 2 T.F.C Revenge 1.03 = The Fanatic Crew 1.03 T.F.C Revenge 2.14 = The Fanatic Crew 2.14 ModemCheck 1.1 virus = Fuck virus Disktest = XaCa virus Acces Forbiden = VCCofTNT Antivirus = Payday NOTE! Most of all, I want a new virus which makes the clock run either backwards or very fast. I have only heard about this and do not know the name or type. But I will be EXTREMELY happy if you are able to help me. Please also note that I am very interested in documentation and articles about viruses, and about jailed virus makers/spreaders from your country. 10.0 Commercial Virus Killers ============================= Kill Da Virus V (KDV V). Price $25 (US Currency). ----------------------- Knows more than 200 viruses. This virus killer is a MUST for busy people because of the excellent check routine, which searches out both boot and non-boot viruses and runs like LIGHTNING! KDV V has one important detail: a superb analysis routine which finds almost all unknown viruses. With it comes several virus tools of really good quality such as: 1. Hard disk virus brake, which effectively prevents viruses from infecting your harddisk. 2. Background virus check (KDV III) which keeps continual surveillance over stored media such as disks (which are changed), RAM, hard disk, and so on. Can be obtained from the programmer: TUPsoft C/o Mike Hansel P.O. Box 1785 Seven Hills West NSW 2147 Australia 11.0 How to repair damaged HD or disks ====================================== With a Freely Distributable Program: ------------------------------------ If you get disk errors caused by the infection of a virus or because of ordinary disk errors, I recommend you to use DISKSALV v1.42, programmed by David Haynie. You can find this program on Fred Fish #251, or you can contact your REGIONAL VIRUS CENTER to get this one and several other Public Domain utilities for disk repair and more! With A Commercial Program: -------------------------- Quarterback Tools 1.5 is a very excellent program for disk repair, and ESPECIALLY excellent for Hard Disk repair. The price is about $60-80 US, so if you own a hard disk, SURELY you can afford that (and no, we're NOT calling you "Shirley")! 11.1 Repair of "Error Validating Disk": -------------------------------------- Do you get this message? I have a little trick to repair your disk with this nasty error: Open the Shell or CLI and type the following: MAKEDIR RAM:L COPY DF0:L to RAM:L ALL ASSIGN L: RAM:L Then, copy all the files to a formatted new (and hopefully better) disk! 12.0 Books about viruses and hackers: ==================================== If you want to know MORE about viruses, I recommend some very good books: In english :"Computer Viruses", (mostly about PC viruses, but with a little about Amiga and MAC viruses) by Ralph Roberts, ISBN 0-87455-178-1, Compute! Books Publications, price in U.S.A 15 $. (USA NOTE: This is an EXCELLENT BOOK!!!) In german : "Das Grosse Viren SchutsPaket",( only about Amiga viruses, and with a disk with virus killers ) by Jennrich & Tornsdorf , Publisher Data Becker price in German 69 DM. In danish : "Computer Pirater". Mostly about hacker groups in Germany, who worked for K.G.B - the russian "Intelligence Service", but there are about 30 pages about viruses. The book is very thrilling for computer fans!. Written by Leif Bomberg , Forlaget Datatid A/S price 148 D.Kr. In danish : "Den Elektroniske Underverden" : A very exciting book about all facets in data crime. There are reports from a lot of cases - like short stories from the data jungle: Hackers, viruses and like. Flemming Berg, ISBN 87-557-1329-7. Forlaget Fremad In swedish : "En Hacker i Systemet" Mostly about hacker groups in Germany, who worked for K.G.B the russian " Intelligent Service ". This true story is told by the man , who caught the young computer spies. Forlag Svenska Dagbladet, ISBN 91-7738-270-6. Price 295 SV. Kr. In danish : "Bogen om Computer Virus". Only about PC viruses , but you will learn a lot about viruses you can use , because there is no difference from PC viruses to Amiga viruses . A very, very good book , which is sold with a 5 1/4" disk with all..... the best PC Shareware Virus killers. Published by Teknisk Forlag, price including disk 248 D.kr. In danish: "Sikkert" A book about data security. Mostly concerning security in big concerns, eg. about krypto, hackers, data registers. Writtem by Anders Djurså & Torsten Madsen. Published by Kommunedatas Forlag. ISBN 87- 88719-14-6. Price 130 Dkr. Ralf Burger, "Computer Viruses : A High-Tech Disease", Abacus, Grand Rapids , 1988. Fites Philip Et Al , "The Computer Virus Crisis" , Van Nostrand Reinhold, New York 1998. Virus! The Secret World of Computer Invaders that Breed and Destroy , Allan Lundell, Contemporary Books 1990 V.I.R.U.S. Protection: Vital Information Resources Under Sige, Pamela Kane, Batam Books 1990. Complete Computer Virus Handbook, 2end edition, Price Waterhouse, Pitman Publishing, London 1989. Computer Viruses , Worms, Data Diddlers, Killer Programs and other Threats to your System, McAfee, John & Hayes, Colin, St.Martins Press 1990 (USA NOTE: Another EXCELLENT BOOK! ISBN 0-312-03064-9) The New Hacker's Handbook, Hugo Cronwall 1986 The Electronics Criminals, Robert Farr 1975 Out of the Inner Circle, A hacker's Guide to Computer Security, 1985 Datasikkerhed i danske virksomheder , Bjarne Kohl m.m. , Rapport nr 30 Databehandlingsforeningens Forlag 1986. Computer Insecurity, Adrian R.D. Norman, 1983 Fighting Computer Crime, Donn B. Parker, 1983 Computerkriminalitet und Strafrecht, Ulrich Sieber, 1977 Datorteknik og Brottslighet, Artur Solarz, 1985 Computer Capers, Thomas Whiteside, 1978 Cyberpunk, Outlaws and Hackers, John Markoff & Kattie Hafner, Published from Fourth Estate PC-Virus. In danish written by Lars Rasmussen og jørgen Thelin. Teknisk Forlag, price 290 dkr. Amiga Computer Viren. In german written by Niki Laber 160 pages incl. disk. Publisher: Gabriele Lechner Verlag, Am klostergarten 1, 8000 Munchen 60, Germany. ISBN 3-926858-37-0 Price 69 DM. 13.0 Special virus hardware =========================== I can give my recommendation to buy the hardware "virus warner". I have bought an excellent new kind, "PHASE II", which gives you a warning for "virus writes" both as the ordinary way for boot viruses and as all non- boot viruses. This also has an automatic WRITE PROTECT MODE! I think this is the only one in the world with this new feature. Send a bank check for 19.95£ + about 5£ (Europe post fee) for postage or the like to: SHI England UK VIRUS RESEARCH Michael A. Sewell P.O. Box 2 Tyldesley Manchester M29 7BN England Phone +44 0942 895320 14.0 Vector setting messages ============================ DON'T PANIC if you see the following vector messages: From VT, VirusZ, and VMK: $096 (dos.library) = $0020F7E8 (caused by the EXPLODE.LIBRARY) $0D2 (exec.library) = $0020E0A4 (caused by the "Update" program) From VT: Loadseg $4EF90020 (caused by the EXPLODE.LIBRARY) These messages are NOT caused by viruses, but caused instead by some of the above mentioned programs on this disk. Are you using KickStart 2.xx or 3.xx? You probably will get even MORE vector setting messages. These vectors are normal for your startup settings, BUT PLEASE WATCH IF SUDDENLY THERE ARE SOME NEW ONES OR IF YOUR OLD ONES HAVE CHANGED! 15.0 BBS Message and update of this disk: ======================================== You will always be able to get the last update or send a message to me (my name is Erik Loevendahl, Fidonet 2:23424/43) if you have a modem. FOR THE LAST UPDATE PHONE TO: ---------------------------- Denmark: DAN BBS 24 hours a day Sysop: Bo Bendtsen Line 1: +45 42643827 2400 - 19200 baud Line 2: +45 43628230 1200 - 2400 baud Denmark: BITS'N'CHIPS BBS Line 1: +45 31318742 2400 - 19200 baud This disk is DMS packed, is called "TNS", update 25-10-91 (for example), and it is FREE to download! 16.0 Special thanks to: ====================== Professor Dr. Klaus Brunnstein , The University of Hamburg , West Germany. The Amiga Group: Wolfram Schmidt , Alfred Mantey Rojas , and Oliver Meng. Palle Bruselius Cheif Editor , the excellent " EXEC " magazine , Denmark. Leclercq Xavier journalist , the excellent " A-News " magazine , France. Philippe Grussenmeyer journalist , the excellent Zine magazine, Germany. Pat Kelly Co-ordinator , the excellent Amiga User International, England. Christer Rindeblad , Cheif Editor , the excellent Dator Magazin , Sweden. Carsten Lohmann , for using his famous BBS to spread this disk worldwide. Peter Klein, for his help to spread this disk, and virus news he send to me. Marco van den Hout, for his great help with translation and his virus fight. Paul E. Browne, for his excellent english translations of many of the docs. FOR SENDING ME THE VIRUS AND DOCUMENTATATIONS: IN DENMARK : ---------- Mr Big Cigar - Mr Noname - Tom P - Knud the soldier - John - Andreas - Jan Henrik - Michael - Jørgen - Søren - Bent - Nikolay - Gert - Claus - Thommas Christian - Poul - Morten - Jacob - Aleks - Torben - Kim - Per - Ole - Rene Jens - Nikolaj - Daniel - Ernst - Allan - Preben - Bjarne - Erik - Kristjan Flemming - Lasse - Niels - Lars - Åge - Leif......... And everyone else that I may have forgotten (sorry)! AROUND THE WORLD : ---------------- Dag from Norway Kurt from Brazil Karel from Czechoslovakia Kinashay from Spain Jesus from Spain Juan from Spain Volterrani from Italy Keresztes from Hungary Tony from U.S.A. Al Capone from Germany Ian from England Janzon from Turkey Bill from England Kelvin from U.S.A. Fire-Wulf from South Africa Odd from Norway The Bug from Germany United Forces from Germany PVL from Holland Jonathan from Australia Falck from Norway Mike from Australia Jean-Jacques from France Martin Odaischi from Germany Geert Lamers from Holland Rune Nilssen from Norway Rod Skupin from Germany Uwe Numberger from Germany Jørg Rauch from Germany Steve Tibbert from U.S.A. Enver Haase from Germany Rike Voland from Germany Arthur Hagen from Norway Oswaldo from Argentina Nic Wilson from Australia Peter Stuer from Belgium Heiner Schneegold from Germany Diamond from Germany N.A Hoytink from Holland Amiga Quarantine from Australia John Veldthuis from New Zealand Ondrej Krebs from Czechoslovakia Topic GFX Code from Holland Georg Hormann from Germany And everyone else that I may have forgotten (sorry!) 17.0 Reward of $1000 for virus programmers ========================================== We are a group of Amiga enthusiasts who are very VERY angry toward people who make viruses. To prevent the spreading of new viruses, we have decided to do something about it. We each offer at least $50 or more to the first guy who sends us the name and address of a virus maker to our group. I can promise you that you name will be held IN TOTAL SECRECY. It's only 50 cents per week...consider the fact that it takes 2 years to finish a case by the court. I think that we all can afford to spend that small amount! ATTENTION! The reward is ONLY to be paid if the virus maker is convicted by the law. Therefore, try to send some evidence for guilt; we can send for the law. I hope that we are able to collect about $1000 for each man who will help us. If we get more money, we will use it for the next one, and so on. You shall first pay the donations after 1-2 years from the date of catching the virus maker when the laws have declared the judgment. I am saying this if you don't have the money for it now (in that way, I think it will be 25 cents per week, which we ALL can afford!). I will send you different evidence from newspapers, a copy from the official deliver judgment, or something like that. THEN you shall first send your money directly to the person who had helped us. 17.1 THE DISASTER OF THE FUTURE ------------------------------- 1000 Amiga viruses x 900 800 700 600 x 500 400 300 x 200 x 100 (SCA) x --x-------------------------------------------------------------------- 1987 88 89 90 91 92 93 94 95 The virus problem is growing like a nuclear disaster. In the end of 1995 we can expect more than ten thousand (10,000) Amiga viruses. In the PC world of viruses you will see the same like above (800 viruses). As of July 1993, we have OVER 350 viruses!! 17.2 Tend Analysis for New Amiga Viruses ---------------------------------------- 40 Numbers ______ | | 35 | | ______ | | | | | | 30 | |______ | | | | | | | | | | | | 25 | | |______ | | | | | | | | | | | | | | 20 | | | | | | | | | | | | | | | | | | 15 | | | | | | | | | | | | | | | |______| | 10 | | | | | | | | | | | | | | | | | | 5 | | | | | | | 33 | 28 | 25 | 12 | 37 | | | | | | | 0------------------------------------------------------------------------- | | | | | | May 1 Sep 1 Jan 1 May 1 Sep 1 Jan 1 | | 1992 1993 (From date to date each fourth month) 17.3 Jailing for virus making and spreading ------------------------------------------- Here in Denmark you can get up to 4 years in jail for doing such things, and the first man who was convicted for virus making received 6 months in prison. Please send me documentation from your country: I am very interested in everything you can find about jailing virus makers in your country (in newspapers and whatnot). 17.4 Claim for virus damages ---------------------------- Have you lost more than $1000 caused by a virus infection? I can probably help you to get your money back by the court of justice. 17.5 Donate an amount and help yourself -------------------------------------- We think that this is the ONLY way to do something effective against virus spreading. You are very welcome to give a donation too, and again, DON'T SEND MONEY...just fill out the form you find under here and send it to me (Use the PRINT PAGE option from the pull-down menu). I will state your name and address here on the disk when I have received the form from you. Groups, your friends, etc. are welcome to donate also, but only ONE address for every donation, please! --- 17.6 Donation form ------------------ Cut here < ----------------------------------------------------------------------------- ATTENTION...DON'T SEND MONEY TO ME, JUST THE DONATION FORM! ----------------------------------------------------------------------------- DONATION AGAINST VIRUS SPREADING ----------------------------------------------------------------------------- NAME : ----------------------------------------------------------------------------- ADDRESS : ----------------------------------------------------------------------------- COUNTRY : PHONE NUMBER : ----------------------------------------------------------------------------- I declare I will donate $______ (minimum $50) to the first person who actively has co-operated to get an Amiga virus maker judged by the court for making a virus on the Amiga. I declare by "The Holy Bible" that I will send the money to the aforementioned after receiving documentary proof about the judgment, directly to the informant who helped us against spreading of Amiga viruses. ----------------------------------------------------------------------------- SIGNED: ----------------------------------------------------------------------------- Cut here < 17.7 Donation list ------------------ Eric Løvendahl Sørensen , Snaphanevej 10 , 4720 Præstø , Denmark 200 $ Tina Rasmusen , Tulevej 9 , 4800 Nykøbimg Falster , Denmark 50 $ Kim Sørensen , Søndersognsvej 26 , 4780 Stege , Danmark 50 $ Dirk Weber , A. D. Pickert 53 , 4100 Duisburg 14 , Germany 50 $ Ole Victor , Bentzonsvej 37 , 2000 Frederiksberg , Denmark 50 $ Mogens Jeppesen , Kildebanken 12 , 4681 Herfølge , Denmark 50 $ Uwe Kurzweg , Burgstrasse. 30 , 4150 Krefeld 11 , Germany 50 $ Torben Nielsen , Lopargatan 20 a , Landskrona , Sweden 50 $ Morten Schwabe , Wittenberggade 22 , 2300 Købenbenhavn , Denmark 50 $ Nikolaj Knudsen , Kastanie Alle 19 , 3450 Birkerød , Denmark 50 $ Kenni Andersen , Skanderborgvej 124 , 8660 Skanderborg , Denmark 50 $ Kasper Thor Larsen , Allegade 53 , 7800 Skive , Denmark 50 $ NA Hoytink , Soerte 3A , 7983 KC Wapse , Holland 50 $ John Szirt , 9 Dowsett RD Kingsgrove , NSW 2208 , Australia 100 $ Nils Trautner , Knud Den Storesvej 7 , 3600 Frederikssund , Denmark 50 $ Otakar Divis , Bomlærkevej 18 , 2970 Hørsholm , Denmark 50 $ Jan Bo Andersen , Veronikavej 33 1.tv , 2610 Rødovre , Denmark 50 $ Left Side Software, J. Potter, P.O.Box 289, Goodwood 5034, Australia 200 $ Leif Brunnlieb Andersen, Rylevænget 4, 4520 Svinninge, Denmark 50 $ Henrik Kærhus Sørensen, Haldsvej 11, 8700 Horsens, Danmark 50 $ Olle Viksten, Observatoriegatan 2 a, 11329 Stockholm, Sweden 50 $ Jørn Nielsen, Rejnstrupvej 11, 4250 Fuglebjerg, Danmark 50 $ Per Olsen, Ladegårdsalleen 5 a, 4300 Holbæk, Denmark 50 $ Claus Deleuran, Nødholmsvej 58, 4171 Glumsø, Denmark 50 $ Kurt Sodon, Sandbakken 28, 4700 Næstved, Denmark 50 $ Tage Nielsson, Nordvejen 25, 4050 Skibby, Denmark 50 $ Gunni Grahn, Runddyssen 24, 4700 Næstved, Denmark 50 $ Michael K. Hansen, Indre Ringvej 147, 7000 Fredericia, Denmark 50 $ Carsten Lohmann, Lyshøjsgårdsvej 99, 2500 Valby, Denmark 50 $ Andy Barker, 61 Derby Road, Hilton, DE6 5FP Derbyshire, England 175 $ Christian Søgaard, Maglemosevej 9, 4100 Ringsted, Danmark 50 $ Goldstars Computers Ltd, P.O. Box 2, Tyldesley, MAN. M29 7BN, England 100 $ Benny Frederiksen, Islandshøjparken 41 st.mf., 2990 Nivå, Denmark 50 $ Teddy Juhl Petersen, Holmebækhusene 388, 4681 Herfølge, Denmark 50 $ Niels Overgaard, Parkvænget 40, 9620 Ålestrup, Denmark 50 $ Exec Amiga Magazine, Egeskov 25, 4360 Kirke Eskilstrup, Denmark 100 $ Ronny Bjørkås, Jerikoveien 31 F, 1067 Oslo 10, Norway 50 $ Tom Poulsen, Stenmøllen 28, 2640 Hedehusene, Denmark 50 $ Jim Maciorowski, P.O. Box 724, Port Richey, Florida U.S.A. 50 $ Martin Peeters, Amer 7, 4761 HS Zevenbergen, Holland 50 $ Erik Thomsen, Jernaldervej 231, 8210 Århus V, Denmark 100 $ Oswaldo Romano, Manuel Ugarte 3319 (1430), Capital Federal, Argentine 50 $ Regional Virus Centre Norway, Langøyveien 13, 4026 Stavanger, Norway 100 $ John Lehmkuhl, Gåsebanken 44, 4681 Herfølge, Denmark 50 $ Knut Røed, Kleivene 24, 3041 Drammen, Norway 50 $ Michael Allerslev Simonsen, Nørregade 27, 6623 Vorbasse, Denmark 50 $ Henrik Pedersen, Henrik Hertzvej 64 H 2tv, 8230 Åbyhøj, Denmark 50 $ Johnny Espersen, Grønnegårdsvej 27, 6705 Esbjerg, Denmark 50 $ Niels Henriksen, Rosenvængets Alle 29 3' , 2100 København Ø, Denmark 50 $ Hans Jørn Hansen, Koralvej 18, 8700 Horsens, Danmark 50 $ Flemming Slabiak, Tycho Brahes Alle 3, 2300 København S, Denmark 75 $ Martin Lauridsen, Starupskovvej 19, 6100 Haderslev, Denmark 50 $ Simon Skals, Adelgade 92, 1., 4720 Præstø, Denmark 50 $ Sune Ørbæk Hansen, Pilevænget 37, 8990 Fårup, Denmark 50 $ Meier Remy, Hardstr. 111, CH-4052 Basel, Switzerland 50 $ Alexandre Reis, Rua Antònio Nobre, Lote 5, 2700 Amadora Portugal 100 $ Pablo Trincavelli, Dorrego 459 1, 2000 Rosario, Santa Fe, Argentina 50 $ Lee S. Gilliland, PSC Box 10892, WPAFB, OH 45433, USA 100 $ Alexandre M. M. Reis, Casal de Sào Bràs, Lote 5, Amadora Portugal 100 $ Lars P. Kristensen, Safirvej 25, 3650 Ølstykke, Denmark 50 $ Thomas Alsbro, Nyponvag 206, 613 38 Oxelosund, Sweden 50 $ Per Danielsson, TallBacksvagen 9 C, S-791 32 Falun, Sweden 100 $ Ognjen Antonic, Rozmanova 24/F, SLO-66250 IIirska Bristrica, Slovenia 50 $ Lorenzo C. Carbonell, C/Anibal 1, Sabadell 08208, Barcelona, Spain 50 $ Björn Tidal, Åbovägen 5. S-141 39 Huddinge, Sweden 50 $ Glenn Pettersson, Box 50, S-512 22 Sveuljuuga, Sweden 50 $ John Svendsen, P.B. 6765, Rudeløkka, Oslo, N-0503 Norway 150 $ Flemming M. Rasmussen, Jernbane Alle 20 2 th. 2720 Vanløse, Denmark 50 $ D. Anderson, Suite 119, 7143 State Road 54, New Port Richey, FL 34653 75 $ Jan Forsberg, Domherrev. 9A, S-510 40 Sandared, Sweden 50 $ ------ Total Now 4425 $ HELP YOURSELF...PLEASE SEND YOUR NAME, TOO! ------------------------------------------- 18.0 Programmers Prize ====================== When you are buying a disk from one of our SHI virus centers, 5% of the money is passed onto the SAFE HEX INTERNATIONAL Foundation. This foundation will support the virus killer programmers, who have done the best or the most remarkable program of the year. We have planned the first prize will be given at the "Amiga Expo Köln", in Germany or the like. In the following list you can dollow the donation from our regional centers: SHI Virus Center Germany, Markus Schmall............................ 160 $ SHI Virus Center Sweden............................................. 321 $ SHI Virus Center Norway, Kurt Hansen................................ 142 $ SHI Virus Center Denmark, Martin Harboe............................. 80 $ SHI Virus Center Slovakia, Ondrej Krebs............................. 16 $ -------------------- Total now 719 $ (We hope we will reach $3000-4000 for our first SHI prize in 1993!) 19.0 How to get our other SHI-released disks ============================================ To help fix the damage done by virus infection, and to spread the latest news about virus problems, SHI has compiled some very useful disks. These disks are translated to your own language and copywritten by SHI, but without ANY limits...that means you are welcome to spread our disks by BBS, in a public domain service or the like. If you are interested in getting the newest edition, I'll send you one NON-PROFIT if you send me, IN UNITED STATES CURRENCY, $5.00 (if it is regional postage), $6 (inside Europe), $7 (outside Europe), or the EQUAL AMOUNT IN YOUR OWN CURRENCY. Note that THIS PRICE REFLECTS THE COST OF THE DISK AND POSTAGE! These disks contain ONLY Public Domain programs, which means that you can spread the disks without any problems at all. Please see my address below in this file or the address to your REGIONAL VIRUS CENTER. ABOUT THE SHI DISKS ------------------- SHI TNS v1: This is our main disk containing Amiga Virus Killers for KickStart 1.2-3.0 users. This disk contains the very best anti-virus programs and a lot of articles and virus documentation. If you don't have our TNS v2 Disk, please order it to get the best support...you need this disk! SHI TNS v2: This disk is a SHI anti-virus disk too, but ONLY for use with KickStart 2.0-3.0. On this disk you will find the Virus Interceptor for your hard disk startup-sequence, and the BootX killer. Both programs were designed for KS 2.0-3.0 and CANNOT run on KS 1.2-1.3! Please note that the new BootX now supports several languages! SHI BUDDY SYSTEM: This disk contains the BootX Buddy System, an excellent way for novices (and the skilled) to learn all about how to use the BootX virus killer. Furthermore, there are more than 200 pages of articles, tests, etc. about virus and hardware problems. SHI UTILITY #1: This disk contains the newest and best Public Domain utilites, specially for the repair of virus-damaged disks. Includes programs like DirWork, FixDisk, PowerPacker, Imploder, DiskSalv, Reorg, Qed, SnoopDos, MessyDos, TurboGIF, LhA, Zip, and more... Note that the disk is configured so that the programs are easily usable! SHI RESIDENT MAG: This disk is made like an ordinary disk magazine and contains a LOT of news and interviews (mostly concerning virus and hardware problems, but also about useful user programs as well). 20.0 Bug Report =============== Well, I hope I don't see too many of these come back, but here it is anyway. If you should happen to find a bug in any of the programs supplied, AND you've taken ALL the time to thoroughly read the supplied documentation, PLEASE take the time to print out the bug report form shown below. Fill out the details and return it to: Erik Løvendahl Sørensen Snaphanevej 10 4720 Præstø Denmark Cut here < ----------------------------------------------------------------------------- BUG REPORT FORM DATE: ----------------------------------------------------------------------------- NAME: ----------------------------------------------------------------------------- ADDRESS: ----------------------------------------------------------------------------- COUNTRY: PHONE: ----------------------------------------------------------------------------- Which Program?: Revision: ----------------------------------------------------------------------------- Your machine configuration (use SysInfo): ---------------------------------------- 1. Amiga 500 Amiga 600 Amiga 1000 Amiga 1200 Amiga 2000 A Amiga 2000 B Amiga 2000 C Amiga 2500 Amiga 3000 Amiga 4000-030 Amiga 4000-040 2. 1/2 MB ChipMem Fat Agnus (old) 8371 A 1/1 MB ChipMem Big Agnus (Fatter) 8372 A 2/1 MB ChipMem ECS Agnus (Hires) 8372 B Fast RAM Total RAM 3. Denise (old) 8362 ECS Denise (new) 8363 4. Kickstart 1.2 Kickstart 1.3 Kickstart 2.0 Kickstart 3.0 5. Special boards and stuff (AT-Card, Action Replay, Turbo Card, etc): 6. Your motherboard revision: 7. How old is your Amiga? ----------------------------------------------------------------------------- Details of the bug: ------------------ --------------------------------------------------------------------------- Cut here < 21.0 Well-Known Virus Infected Commercial Software ================================================== Do you get commercially sealed software infected with viruses? Please send a report to one of our virus centers. We are very interested too, if you have some additional time, to get the same sealed software with read/write errors from your supplier or the like! We have gotten the following reports: Virus Infected Sealed Software: ------------------------------ Electronic Pool from Microdeal --BYTEBANDIT VIRUS-- (3 Reports) Black Crypt, Electronic Arts --SADDAM HUSSEIN-- (1 Report ) 22.0 Viruses wanted =================== Have you found new viruses? Please send them TODAY! I am currently searching for the following viruses: A.H.C.virus.BB Aibon (776) Infiltrate or damage BBS Aibon2 (784) Infiltrate or damage BBS Aibon-ACP.ctrl Amida.BB AmiPatch virus 1.0a (8288) Infiltrate or damage BBS Angel.BB Anti-Knacken.BB.(Sca clone) Antichrist.Link.(Jeff.clone) Antivirus.BB Australian.Paradise-BB BB-Prot.BB Beethoven.(2608) Bestial-Devastation Link (7876) BGS-9.III.(File.2608) Black.Knight.BB Blockchain.Virus Boot-Aids.BB Cascade.BB Charlie.Brown.(Hireling).BB Check.Filevirus.(18644)File Christmas.Violator.(1060).Link Clock.1.1.(setmap.&.S.Install) Clockvirus.(Back-running) Clockvirus.(Fast running) Commodore.BB CompuPhagozyte 7 File CopyLock-Virus.BB block 0-3 Cracker Exterminator.BB Creeping-EEL.BB Dailer.BBS.v2.8g.(33908) Infiltrate or damage BBS Datacrime-killer.BB (ASV clone) Detlef.BB Devil.11.B.Door.(3 files, 23452, 2342, 17884) Infiltrate or damage BBS Devil.V8.B.Door-Swiftware-(44224) Infiltrate or damage BBS Dialer.2.8g.(33908) Infiltrate or damage BBS Disgust.BB Disgust.BB Disk-killer.v1.0.(File1368) DiskRepair V.1.2 (49336) Infiltrate or damage BBS DiskRepair V.2.6 (37740) DiskRepair BBS-Link (xxx) Disk.Speed.Check.1.01 (DSC101) Disktest virus (1368) Disktroyer v2 (812) DOpus.(6408).File Infiltrate or damage BBS DwEdit v1.6 (43700) Infiltrate or damage BBS Excrement-Installer Executors.BB Freshmaker virus.BB Fuck.device.virus.BB G-Zus Packer (15016) Gandalf.BB GCA.BB.(Forpip.clone) Genetic.Protector.2.0 BB.(Dotty clone) Guardian.DMS Infiltrate or damage BBS Guardians Boot Aids.BB Hackers.Etic Happy.New.Year.BB Hardex.Saddam.Clone.(1848) Hill.BB HNA.Virus.BB Hunk-Lab.link Indiana.Jones.BB Infector.BB (Fast Eddie clone) Influenza.BB Ingo's.Return.BB Jeff-Butonic.3.10(2916)File Jeff-Butonic.3.20.(2900)File Kefrens.I.BB Kefrens.II.BB Killed.virus.BB Kobold.II Lame.Saddam.Clone.(1848) Laurin.Saddam.Clone.(1848) Leviathan.BB Leviathan file (1056) Lupo (1484) MAD.IIa.BB MegaMon.PP-Bomb (26856) Infiltrate or damage BBS MemSearcher virus.BB Monkey-Killer.BB Mount.Virus.(1072) Mutilator.BB MVK.(1052)File MWB.BB virus (Julie clone) Ninja.file.virus Noname.2.BB Nano2 Ohio.BB Overkill.BB.(block.1-3) P-Cracks.BB PayDay.BB Phatasmic.Force PowerTeam.BB PStats.(19784)File Infiltrate or damage BBS Rimednac.BB Saddam clone Lame (1848) Saddam clone Hard (1848) Saddam clone Laurin (1848) Saddam clone Animal (1848) Saddam clone Kick (1848) Saddam clone Nato (1848) Saddam clone Affe (1848) Saddam clone Iran (1848) Saddam clone Gral (1848) Saksen.no.2.BB Sao.Paulo.BB Satan.BB Schwartznegger SCSI-Virus (1560) file Sepultura. (1876) file Sentinel.BB Shit.Virus.(Nuked.007).BB SMBX-Mount.Installer.(64488) Suicide.BB Sysinfo 1.1 (5680) Infiltrate or damage BBS Sysinfo 2.2 (5656) Infiltrate or damage BBS Suntron.BB T.ET.E BB.Zombi.Clone T.ET.E-BB.Zombi.Clone Telecom.(756).File TimeDate TimeDate.Setmap Timer.virus.setmap(1712) Infiltrate or damage BBS Topdog.1.0 / TopUtil (2260) Infiltrate or damage BBS Tristar.Viruskiller-1.0.Virus.BB Trojan.Killer Infiltrate or damage BBS TTK.virus.BB UCA.BB UcAIDS.BB Uhr virus.BB UInfo (13048) Infiltrate or damage BBS Umyj.Dupe.virus BB USSR 492.BB (excrement clone) VirConSet virus 1 BB VirconSet virus 2 BB Virkill.2.BB Virus.II Virus Construktion Set File virus Virus.Terminator.6.0 (Trojan 1880) Virusmaker.1 Wahnfried.BB Warhawk 2 BB Witebox v 8.0 Trojan (34896) Infiltrate or damage BBS WiteBox BBS-Link (xxx) XaCa virus (1368) XLink.3.0 XprSpeed.3.2 (9556) Infiltrate or damage BBS X-Copy2.BB X-Ripper 1.1 (41360) Infiltrate or damage BBS Zenker.BB (4 sectors) Zorro/Willow.BB ZSpeed (9556) Infiltrate or damage BBS Zviruskiller.1.5.BB And...infected disks with "French Kiss Virus" and "ABC virus" containing the whole viruses (Blocks 0-3 or 4). I only have the first 1024 bytes!!! And, of course, any NEW viruses you might find! Please mark the disk "ATTENTION: VIRUS" (please take care of my hard disk!). Remember to state your address and phone number if you want a reply, but it is NOT necessary if you wish to remain anonymous...only the VIRUS counts. I don't care what KIND of disk you send me. After the disk is analyzed, the disk is formatted and your name will be 100% arcivated in my trashcan...I ALWAYS KEEP MY PROMISE! (No more questions then!) A very EASY way is to send the viruses to your regional center who will then send them along to me. THANK YOU VERY, VERY MUCH FOR YOUR HELP! 23.0 WANTED: Programmers for SHI killer projects! ================================================= PLEASE READ THIS! We have started a quite new viruskiller project specially to prevent BBS spreading of viruses. This killer has to be able to unpack all modem programs and to be able to analyze all uploaded files to find new unknown viruses. This program will stop 95% of all new virus spreading and is VERY important for our future virus fight! We need a group of the best programmers to make this program (5-10 people)! Please contact me (Erik Loevendahl) for more information! PROJECT 1: A NEW GENERATION BBS KILLER? WE NEED YOUR HELP!! ------------------------------------------------- Most viruses are known as, by the first step, being spread from BBS's (Bulletin Board Systems). Case in point: One of the most worldwide spread viruses, the "Saddam Hussein", was spread by the pirate copies of the game "Renegade Legion Interceptor", as one of the first steps from the States, and unfortunately uploaded to BBS's worldwide within a week. We all know the result of that! You can maybe see that it's foolish to wait for the next virus disaster. To this day we are all waiting ALL TOO LONG before we are going into action. Why not make a new kind of killer specially for BBS's? A BBS killer has to do these important tests: 1. Analyze for all well-known viruses by using a standard virus non-boot brainfile as an option of the System Operator. 2. Analyze for all well-known viruses by using a stanard virus BOOT brainfile as an option of the System Operator. 3. Analyze for the packing method (ie, LhA, DMS, LZ, etc.) and then be able to do automatic unpacking. 4. All unpacked files are then started, executed step by step from the memory. 5. The memory is tested every time before the executing and the used memory addresses are being cleared between every program test. 6. Additional to the ordinary virus tests (Points 1 and 2), there are tests for illegal vector calls and so on, but as a quite new feature for write to device commands too. Our SHI virus center in Spain is near the beta release of a non- bootvirus brainfile in the first of October, and I hope in August 1992 with a boot virus Brainfile for Amiga viruses!! NB. In Denmark we have started to make the same BBS killer programs for PC's as well, perhaps finished in early 1993. PROJECT 2: NO MORE LOST TIME WITH VIRUS UPDATES! ------------------------------------- Several virus killer programmers are spending a lot of time with updating their virus killers every time new viruses are discovered. I hope this will stop in the near future, because I have started to co- operate together with an assembler programmer who, together with me, will make two virus libraries, which is intended to be placed in the LIBS: directory. The one library will be for boot block viruses, and the other one for non- bootblock viruses. In that way your killer will be updated AUTOMATICALLY when you are installing our newest virus brainfile in the LIBS: directory. Easy, I think! Then you can spend your time to improve your program itself. The future thoughts about these brainfiles: 1. You will be allowed to use the virus brainfiles free, if your program is shareware (with donations less than $20) or freeware of course. 2. If your killer is commercial or has a shareware donation of over $20, you will have to pay a little license. 3. This little brainfile is intended to be placed on several well-known Bulletin Boards, and updated maybe 20 times a year on several BBS's all over the word for fast updating of your program. I hope that as many programmers as possible will co-operate in getting these files as a new Amiga standard of the future to stop the viruses! 4. In addition, the programs these libraries are intended for: a. File utilities (SID, Diskmaster, DirWork, and Directory Opus) b. Packer programs (PowerPacker, Imploder, DMS, LhA, and more) c. Modem programs (N-Comm, JR-Comm, and many more) 5. ALL WHO ARE USING our brainfile has to give SAFE HEX INTERNATIONAL credits in their doc file, and mention a little about our virus work (for example, something like this:) You can do me a great favor by helping Mr. John Lohmeyer, our man in the Spanish SHI Virus Center with his "FBV" Brainfile Program. This program is made specifically for non-boot viruses. Why was this made? Because then we can use the same virus brains in a LOT of utility programs. This brainfile is NOT intended to support the ordinary virus killers, but rather to support programs like DIRECTORY OPUS, DISKMASTER, packer programs, BBS's, and modem programs. Programmers and co-ordinators : AMIGA FILE VIRUS BRAIN: Started! -------------------------------- John Lohmeyer Parque Guell 7 08338 Premia de Dalt Barcelona Spain Phone: + 03 752 38 85 Fax : + 03 752 30 79 BBS : + 03 892 39 83 AMIGA BOOT VIRUS BRAIN: Finished! --------------------------------- Johan Eliasson Bäckgatan 6 S-60358 Norrköping SWEDEN Phone : + 46 11 169 138 LINK VIRUSES REMOVER BRAIN: -------------------------- Started programmer: Johan Öhman Geografigränd 6A S-90732 Umeå Sweden Phone: + 46 90 19 32 74 Concerning the above mentioned file-brainfile, I want VERY much a program to make this brainfile, and maybe more important to do, to be able to do updates myself when I get new file-viruses. Do you have an interest to help with this program and how to use this brainfile in other programs (like packer programs)? I will be very happy. Can you think of a lot of programmers? I don't know or trust them all. A lot of people ask me for viruses and, sorry to say, I don't send viruses to most of them because I don't know if I can trust them or not. In this way we maybe will lose a lot of very good anti-virus programs for the future virus fight, HOW TO DESIGN THIS PROGRAM I don't exactly know how, but I think of the following ideas for the new brainfile maker: 1. A stand-alone program, very much like the way and usage as in the ZeroVirus boot-learn features (I am not a programmer) 2. The recognize bit must NOT be 8-bit as in the ZeroVirus, but I prefer 16-32 bit for the 100% best safety (you see if some files are named viruses without meaning to be, it will be a disaster!) 3. This brainfile must be designed in assembled code for fast running I think, and as a normal AmigaDOS library. 4. The docs must tell how to use this program in C and Assembler programs. Programmer and coordinator: MAYBE YOU? PROJECT 3 A NEW GENERATION OF UNPACK LIBRARIES? WE NEED YOUR HELP! --------------------------------------------------------- Most viruses are known as, by the first step, being spread from our BBS (Bulletin Board Systems). For example, one of the most worldwide spread viruses, the "Saddam Hussein", was spread by the pirate copies of the game "Renegade Legion Interceptor", as one of the first steps from the States, and unfortunately uploaded to BBS's worldwide within a week. We all know the result of that! You can maybe see that it's foolish to wait for the next virus disaster. To this day we are all waiting all TOO LONG before we are going into action. Why not make a new kind of killer specially for BBS's? What we need is an Unpack Library knowing all BBS modem packers and all disk packer programs for both Amiga and PC use. You can probably see the meaning in this Unpacker programs used with a virus-killer, BBS, file editors, and a lot of other programs. This unpack.library is near being completed! Programmer and co-ordinator: Thomas Neuman Kongensgade 78 3550 Slangerup Denmark No phone PROJECT 4: AMIGA VSUM LIBRARY ------------------ A text library of text files, all about the more than 300 Amiga viruses, maybe in a dBaseIII-like program as the excellent PC program VSum. Program designer and co-ordinator: MAYBE YOU...But you need to have a fair knowledge about assembly language. For support of the above mentioned programs, we already are working with the following programs: Our "SHI", Virus Center in Spain is near the beta release of a non-bootvirus brainfile.library in early March 1993. Programmer and co-ordinator: Martin Wulffeld Fredensvej 14 4720 Præstø Phone: (+45) 53 78 00 16 24.0 Our addresses ================== PLEASE CONTACT ONE OF OUR CENTERS AND WE WILL TRY TO HELP YOU! SEE MORE INFO IN THE "ADDRESSES" TEXT FILE MAIN CENTRAL VIRUS CENTER: Erik Loevendahl Soerensen Snaphanevej 10 DK-4720 Praestoe Denmark ALIAS: * * * * * SPEEDY GONZALES * * * * *