------------------------
Amiga Virus Encyclopedia
Bulletin Trojan 
------------------------


- Bulletin-Trojan    Destruktive file.

Name taken infectet file. Proberly spread as Demo.
Length: 77740 Bytes
No hidden vectors.
Unable to spread by itself.
Multi-compresed.
Start of file has 3E8-Hunk (*Art), i order to make packer
recognition difficult.
Within the file, it operates with the 4EB9-4EF9-Method.

In unpacked file reads:
    62726172 7900533a 00496e73 70656374 brary.S:.Inspect
    6f722058 206f6620 412e4c2e 46ff0000 or X of A.L.F...

Damage:
All files i S: is opened and changed.
Shell-Startup before:
      ; $VER: Shell-Startup 40.1 (9.2.93)
      Prompt "%N.%S> ".....
Shell-Startup after:
      Inspector X of A.L.Fp 40.1 (9.2.93)
      Prompt "%N.%S> ".....

Original filelengths are retained.
Even Icons and excecutables are changed.
No routine to facilitate changes to writeprotection has
been found.
Originaly more directories should be corruptet. Due to an
error in programming this has failed in the tests.
(2 bytes has been displaced.)

           62726172 79006262 733a0049 6e737065 brary.bbs:.Inspe
           63746f72 2058206f 6620412e 4c2e4620 ctor X of A.L.F
           2d20414c 69454e20 4c696645 20664f52 - ALiEN LifE fOR
           4dff0000 00000000 00000000 00000000 M...............
             ;....
           62726172 7900433a 00496e73 70656374 brary.C:.Inspect
             ;....
           62726172 79004445 56533a00 496e7370 brary.DEVS:.Insp
             ;....
           62726172 79004c49 42533a00 496e7370 brary.LIBS:.Insp
             ;....
           62726172 79006262 733a6e6f 6465312f brary.bbs:node1/
             ;....
           62726172 79005359 533a0049 6e737065 brary.SYS:.Inspe

The text (ALieN...) became someward longer


Antivirus removal...: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                      Kickstart all others: VirusZ III with Xvs.library installed


------------------------------------------------------------
 Translated to English by Steen Jacobsen © 2001 VHT-Denmark
 Org. Test by Heiner Schneegold.
------------------------------------------------------------