------------------------
Amiga Virus Encyclopedia
ConMan Typer Trojan
------------------------
- CONMAN-HYPER-Trojan Used to break into BBS's
Other name: Conman Hacker
Type A:
Length packed: 1948 Byted
Length unpacked:1380 Bytes
linked before WorldClock (for example).
This can be read inside the file:
00000000 00000000 00000000 4242533a ............BBS:
55534552 2e444154 41004242 533a5553 USER.DATA.BBS:US
45522e4b 45595300 646f732e 6c696272 ER.KEYS.dos.libr
61727900 41452e4d 61737465 7200434f ary.AE.Master.CO
4e4d414e 00000000 00000000 00000000 NMAN............
;......
00000000 00008948 59504552 00000000 .......HYPER....
No bent vectors.
No new process in memory.
No command will be written in C:.
That thing is only dangerous to Sysops.
VT suggests erase, if you ever find the file on it's own.
Writes #$2B to $00000000 for finding itself.
Searches for AE.Master-Port. If not found, it will end it's
run. After that USER.DATA and USER.KEYS will be tried to
read out.
Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
Kickstart all others: VirusZ III, and also Xvs.library must be installed
------------------------------------------------------
Translated to English by M0rpheus © 2001 VHT-Denmark
Org. Test by Heiner Schneegold.
------------------------------------------------------
>
☣ |
Virum Help Team Denmark & Canada Copyright © All rights reserved www.vht.dk |
☣ |
| |