------------------------
Amiga Virus Encyclopedia
ZonderKommando 2
------------------------
- ZonderKommando 2 File (name not understandable but over accepted)
other name: Mongo51 see above
Known files: mongo51.exe
Length packed: 1464 bytes
Unpacked length: 2268 bytes
No bent vectors:
TRSI-znt.exe
Length packed: 21784 bytes
Unpacked length: 184,552 bytes
Directed against BBS
No propagation as a burglary tool.
Looks for Snoopdo's end if yes
Searches for Port ServerRP0 if no end
Searches for ACP.STARTUP If no end
Creates file ATX_NADA.DMS (passwords ???)
VT offers delete.
Extract from unpacked file:
000751c8 fffa4e75 00000000 533a4143 ..Q ... Nu .... S: AC
502e5354 41525455 50000000 00000000 P.STARTUP .......
; .....
00000000 00000000 0000434f 4e465f4c .......... CONF_L
4f43414c 2030322d 0075706c 6f61642f OCAL 02-.upload /
4154585f 4e414441 2e444d53 00757365 ATX_NADA.DMS.use
722e6461 74610042 42535f4c 4f434154 r.data.BBS_LOCAT
494f4e20 00000000 00000000 00000000 ION ............
; .....
536e6f6f 70446f73 00536572 76657252 SnoopDos.ServerR
50300000 000003ec 0000004f 00000000 P0 ......... O ....
Original test by Heiner Schneegold
Translated from german to english by Google translate