COP 10 Trojan (Circle Of Power) - Amiga Virus Encyclopedia
VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
Amiga Virus Encyclopedia
-------------------------------
Amiga Virus Encyclopedia
COP 10 Trojan (Circle Of Power)
-------------------------------
Destruction: Files a shortened, and overwriten with a text.
Please do not equalize this with Biomechanic.
Biomechanic-variants do Not shorten files. It changes at least five bytes
inside file, not in start!
Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
Trojancodelength and the same Destruktiontext were give a Type
-> Circle Of Power 10:
Known filename : ACP-420
File size packed : 62.384 Bytes
File size unpacked : 71.904 Bytes
Archive name : LSD_AE42.lha
Archive size : 278.290 Bytes
FILE_ID.DIZ : ?
Info : Trojan-part is unknown, no 4EB9.
Filelength after destruction: 71 Bytes.
An Ami Express file after FileID
The programmer was unable to properly integrate the decoding loop.
SUB instead of ADD would have been correct!!
That's why it ALWAYS results in a GURU.
If SUB had been used, the corrupted files would have been
71 bytes long, and the Trojan would read:
CIRCLE.OF.POWER= [ THE TERROR WILL NEVER STOP, PHEAR THE MIGHTY COP! ]