AhKeym-Trojan:
  --------------

  filelength: 2160
  other possible name: Heavne-Master-Key-Maker Trojan

  Possibly programmed in Arexx and then made executable via a Arexx compiler.
  All texts are crypted, only the normal access to the rexx#? libraries will
  be shown. This is a virus, which tries to kill the following stuff:

  - Many files in the prometheus: directory (Prometheus is a german mailbox
    programm)
  - All files in the directories sys:c/ sys:l/ sys:libs/ sys:l/

  Then it tries to kill various RDB via the KillRDB command. Accessed devices
  are oktagon.device and scsi.device.

  The whole stuff is programmed very lame, but effective.

  After decoding you can read a lot of text in the file:

  Heaven-Master-Key-Maker V1.1
  fuer die neuen sichereren Keys :
  Serien#.fuer.Tools.. :
  Serien#.fuer.Checker :
  Serien#.Sec. Abfr... :
  'Key fuer Checker, Tools oder Beide.. :
  delete >NIL: sys:s/startup-sequence'
  sys:c/delete Prometheus:pmbs.key');
  sys:c/delete Prometheus:daten/#?')
  'Fetich =;-)))
  'Das Key liegt in RAM:T....... have fun ( drueck ne Taste )'
  sys:c/reboot'
   call ciao;



  Original File_ID.Diz of this file:

     ____/\____:__/\ _ ____/\_____
     \:::.    :    Y  \     .:::/
      \_::. _____   | __\___.:__/
      /    __) /    l/ \./   Y   FAiRLiGHT
   .::\    |  .\    /    .    |.:. .::.:::\
        ___!:.::\ _______:____NeB::..
=================\/======:==================
          A-Heaven Master keymaker
            for the NEW key's



 Test by Markus Schmall              Detection tested 25.03.1995.

[Go back]