VIRUS HELP TEAM



     ------------------------
     Amiga Virus Encyclopedia
     ZonderKommando 2
     ------------------------
     
     
     - ZonderKommando 2 File (name not understandable but over accepted)
        
         other name: Mongo51 see above
         Known files: mongo51.exe
         Length packed: 1464 bytes
         Unpacked length: 2268 bytes
         No bent vectors:
                         
         TRSI-znt.exe
         Length packed: 21784 bytes
         Unpacked length: 184,552 bytes
         Directed against BBS
         No propagation as a burglary tool.
         Looks for Snoopdo's end if yes
         Searches for Port ServerRP0 if no end
         Searches for ACP.STARTUP If no end
         Creates file ATX_NADA.DMS (passwords ???)
         VT offers delete.
      
       Extract from unpacked file:
           000751c8 fffa4e75 00000000 533a4143 ..Q ... Nu .... S: AC
           502e5354 41525455 50000000 00000000 P.STARTUP .......
                 ; .....
           00000000 00000000 0000434f 4e465f4c .......... CONF_L
           4f43414c 2030322d 0075706c 6f61642f OCAL 02-.upload /
           4154585f 4e414441 2e444d53 00757365 ATX_NADA.DMS.use
           722e6461 74610042 42535f4c 4f434154 r.data.BBS_LOCAT
           494f4e20 00000000 00000000 00000000 ION ............
                 ; .....
           536e6f6f 70446f73 00536572 76657252 SnoopDos.ServerR
           50300000 000003ec 0000004f 00000000 P0 ......... O ....


     Original test by Heiner Schneegold
     Translated from german to english by Google translate
     
     

Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht.dk