- COP-Variants generaly.

Destruction: Files a shortened, and overwriten with a text.

Please do not equalize this with Biomechanic (ref.) Biomechanic-variants
do Not shorten files. It changes at least five Bytes inside file, not in
start!

Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
            Trojancodelength and the same Destruktiontext were give a Type

    >Type-A
     Trojan-part is two Hunks, 1920 Bytes.
     Filelength after destruction: 21 Bytes.
     Known filename: NComm32, 121896 Bytes.

    >Type-B
     Trojan-part is two Hunks, 1904 Bytes.
     Filelength after destruction: 19 Bytes.
     Known filename: LHA3.0, 69888 Bytes.
                   CED4, 174500 Bytes.

    >Type-C
     Trojan-part is two Hunks, 1860 Bytes.
     Filelength after destruction: 6 Bytes.
     Known filenames: DOpus5, 347296 Bytes.

    >Type-D
     Trojan-part is unknown, only one Hunk.
     Filelength after destruction: 5 Bytes.
     Known filenames: SInfo, 2852 Bytes.

    >Type-E
     Trojan-part is unknown, only one Hunk.
     Filelength after destruction: 38 Bytes.
     Known filenames: FutureTracker, 317608 Bytes.
                    Virusworkshop V5.0, 135744 Bytes.

    >Type-F
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 20 Bytes.
     Known filenames:  acp, 71904 Bytes.

    >Type-G
     Trojan-part is two Hunks, 460 Bytes.
     Filelength after destruktion: 31 Bytes.
     Known filenames: CopKiller, 8428 Bytes.
                    cALLERSLOG.SFX, 8428 Bytes.
     The two file have the same content!

    >Type-H
     Trojan-part is unknown, no 4EB9.
     Filelength after destruktion: 63 Bytes.
     Known filenames: LZX130_680000EC, 67680 Bytes.
                    LZX130_680020, 64896 Bytes.
                    LZX130_680040, 65385 Bytes.

    >Type-I
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 75 Bytes.
     Known filenames:   ProTracker 4.0, 336804 Bytes.
                      LZX125_68000EC, 68492 Bytes.
                      LZX125_68020, 65708 Bytes.
                      LZX125_68040, 65456 Bytes.

    >Type-J
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 71 Bytes.
     Known filenames: ACP-4.20, 62384 Bytes.
                    EXPRESS_4.20 Bytes.

    >Type-K
     Trojan-part is two Hunks, 432 Bytes.
     Filelength after destruction: 41 Bytes.
     Known filenames: dmv05.exe, 36480 Bytes.
                    TETRIS.EXE, 21244 Bytes.
                    TETRIS2.EXE, 21244 Bytes
     The two TETRIS.EXE have the same content!

    >Type-L
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 31 Bytes.
     Known filenames: TP5_Andromeda.exe, 40216 Bytes.
                    TP5_Parallax.exe, 39980 Bytes.
                    TP5_SilentsDK.exe, 39440 Bytes.
                    TP5_Spaceballs.exe, 38060 Bytes.
                    TP5_TRSI.exe, 37412 Bytes.*
                    BlueSky2.exe, 37412 Bytes.*
     The two files marked *, have the same content!

    >Type-M
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 31 Bytes.
     Known filenames: PHA_XMAS.EXE, 461384 Bytes.

    >Type-N
     Trojan-part is unknown, no 4EB9.
     Filelength after destruction: 75 Bytes.
     Known filenames: QBTools3, 227716 Bytes.


------------------------------------------------------------
 Translated to English by Steen Jacobsen  2001 VHT-Denmark
 Org. Test by Heiner Schneegold.
------------------------------------------------------------

[Go back]