_________    _                ______      _____    _  ____      _
  ____/"""./###/____)\_____________  \   ./ ____/"""./____)\/""./______)\
 /"""/   //_______   /"""/""./"___/_  \ // /""./   //""____/  //_______  \
/   /   //"""/"  / //   /  //____   \_ \/ /  //   //  ____/  //"./""""/ //
\      //   /  ____/   /  //""""/X\@!/   /  //   //  /"""/     //    ___/
 \_____/\__/___/_""\______/_________/   /___/____/\_____/\_____/\___/::.
                /____/
                              Team Denmark
  >>>>>>>>>>>>>>>>>>>>>>>>>>>--------------<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
                               02-05-1995


 Hi All.....

 There has been released a program that is said to be a CallingCard Hacker,
 if you  start the program it  will look for a BBS: assign,  and  then read
 the user.data file. This textstring is coded in the the file. Why a hacker
 program for CallingCards, want to read the 'BBS:User.Data', I do not know,
 but do not trust this program....

 Here is some info about the trojan:

 Name.....: CCHACK2.exe
 Size.....: 11216 Bytes (unpacked).


 If you start the program this will be displayed:

 MCI CallingCard Hacker by ByTePaCkEr/Finland 1995

 Usage: CChack2.exe 


 VT v2.72 will find this 'thing', but in the doc to VT, Heiner states that
 the file has a size of 11368 Bytes (unpacked), so maybe there is an other
 version of this trojan,  and maybe the name of this is 'CCHACK.EXE', I do
 not know.

 This 'thing' is on it's way to every wellknown antivirus programmer, that
 will accept new virus from us.

 Thanx again to Kim B. a great virushunter, for uploading it to us.....
 And to Markus Schmall for the first info about this 'thing'...

 Regards....
                                       _________    _
 Jan Andersen.                    ____/"""./###/____)\_____________
 Virus Help - Team Denmark.      /"""/   //_______   /"""/""./"___/_HELP!
                                /   /   //"""/"  / //   /  //____   \_
                                \      //   /  ____/   /  //""""/X\@!/
                                 \_____/\__/___/ ""\______/_________/
                                              /____/

[Go back]