ConMan Typer Trojan - Amiga Virus Encyclopedia

VIRUS HELP TEAM



    ------------------------
    Amiga Virus Encyclopedia    
    ConMan Typer Trojan
    ------------------------


    - CONMAN-HYPER-Trojan             Used to break into BBS's
      Other name: Conman Hacker    
    

        Type A:
        Length packed:  1948 Byted
        Length unpacked:1380 Bytes
        linked before WorldClock (for example).
        This can be read inside the file:
          00000000 00000000 00000000 4242533a ............BBS:
          55534552 2e444154 41004242 533a5553 USER.DATA.BBS:US
          45522e4b 45595300 646f732e 6c696272 ER.KEYS.dos.libr
          61727900 41452e4d 61737465 7200434f ary.AE.Master.CO
          4e4d414e 00000000 00000000 00000000 NMAN............
          ;......
          00000000 00008948 59504552 00000000 .......HYPER....
        No bent vectors.
        No new process in memory.
        No command will be written in C:.
        That thing is only dangerous to Sysops.
        VT suggests erase, if you ever find the file on it's own.
        Writes #$2B to $00000000 for finding itself.
        Searches for AE.Master-Port. If not found, it will end it's
        run. After that USER.DATA and USER.KEYS will be tried to
        read out.


        Removal: Kickstart 1.2 & 1.3 : VT-Schutz v3.17
                 Kickstart all others: VirusZ III, and also Xvs.library must be installed

    ------------------------------------------------------
     Translated to English by M0rpheus © 2001 VHT-Denmark
     Org. Test by Heiner Schneegold.
    ------------------------------------------------------

    


>
Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk