........................... VIRUS HELP DENMARK ...........................
Hi All.... 08.08.97
There is a new trojan out. The trojan in inside a "Fake Ibrowse v2.0" If you
run Ibrowse a picture will be shown with a face, and a text that is telling
you that ScareCrow has done damage to your system. When I tested the archive
on my test system (68000), everything it did was to replace my userstart-up
and startup-sequence, with a text file. If it does damage to other systems
I don't know at the moment, but it will be testet very soon.
Here is text:
>------------------------------ START LETTER -------------------------------
ScareCrow
Since i now have your undevided attention while you are trying to save
what is left of your hard-disk i might as well begin.
Your first question will be why? The why is becose i am playing a fair
game with someone for some time now, his name is Jan Hendrik Lots of
Virus Help team NL. He and his little buddies of AGA tryed to catch me
last year with no succes, but what would you expect if you relay on their
help lead by a clowns character calling himself KleinDuimpje. Yes,
KleinDuimpje, you better start up that board again becose we havnt finished
yet. Hunting season is open again fans, and these trojans i have been
spreading are just mearly the beginning of it. i would also like to invite
some of the people i admire: Nr. 1 is L.I.S.A. (lamers in serious agony)
They did a great job, and they inspired me. Nr. 2 is C.O.P. (faust, circle
of power) Damn, i loved that Tetris attack! Nr. 3 is smooth criminal aldo
the boy has no taste, im inviting him to this party. What have i cooked up?
i am planning to make a competition out of this, who ever wants to compete
is invited. Who can make the most trojans and virusses, who can put down the
most boards. Who can make the most hits and i am listing them all. The list
will be released in a trojan by the end of each month. time to play.
>------------------------------- END LETTER -------------------------------
I guess that Jan Hendrik Lots must know something about this guy, I'll get
in contact with Jan Hendrik Lots and have a talk with him.
Anyway, we know ScareCrow's real name, adress, phone number (the new one),
and a lot of other things about this guy. Actions might be taken later on.
Well...... But everybody should think before installing programs like this
one. A new update of Ibrowse ?????. version 2.0 ?????. Don't install these
programs that you are not 100% sure that is okay. If you want to, try and
install the programs like this on on floppy disks, it takes a bit longer,
but it might save your system........
Here is some info about this trojan & archive:
Archive name.....: DCN-IB2.LHA or DCN-IB2.LZX
Archive size.....: 595211 bytes (ripped for BBS adds)
Trojan name......: Ibrowse
Trojan size......: 327848 bytes Unpacked.
File-Id.Diz......: /\ _ _
___/ \___________(_)_______(_)__________
/ ________ / ___/ \ _____/ ____ ____ \
/ / / ___/ / / /\__ \/ / / / / /
\____/\___________ __________ /\____/\_/\_/|
.--aMiGA iLLEGAl--\/--------\/Rr!----------.
| IBrowse 2.00 FINAL 68030+ |
`----[1/1]------------------[28-04-97]-----'
Don't start this program.....
Regards....
__ Jan Andersen E-Mail..: jan@vht-dk.dk
__ /// -------------- FidoNet.: 2:237/38.100
\\\/// Virus Help Team Denmark AmyNet..: 39:140/127.100
\XX/ http://www.vht-dk.dk VirNet..: 9:451/247.0