COP 6 Trojan (Circle Of Power) - Amiga Virus Encyclopedia
VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
Amiga Virus Encyclopedia
------------------------------
Amiga Virus Encyclopedia
COP 6 Trojan (Circle Of Power)
------------------------------
Please do not equalize this with Biomechanic.
Biomechanic-variants do Not shorten files. It changes at least five bytes
inside file, not in start!
Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
Trojancodelength and the same Destruktiontext were give a Type
-> Circle Of Power 6:
Known filename : acp
Trojan warning : Read our warning
File size : 71.904 Bytes
Archive name : PSG-AE5.LHA
Archive size : 71.982 Bytes
FILE_ID.DIZ : AmiExpress 5.0
Info : Trojan-part is unknown, no 4EB9.
Filelength after destruction: 20 Bytes.
NO bent vectors
NO proliferation
Decoded (NOT.B D0) the file reads:
Coded by Khanan & Grajsah (c)
[cOp].[cOp]: Khanan :[cOp]
Process: : A window opens and a COP text is output. This
MUST be noticeable to the user. I recommend an immediate RESET. Perhaps
the damage can still be limited.
Caution: the hard drive may then have validation problems.
The files in devs, s, bbs, L, and NCOMM will be truncated to 20 bytes.
The contents after that, for example: [cOp]: Khanan :[cOp]
Sorry, there's nothing left to salvage.
Damage : acp will replace every file in your S:, Devs: and L: with a new file,
in this file you can read '[cOp]: Khanan :[cOp]'.