COP 12 Trojan (Circle Of Power) - Amiga Virus Encyclopedia
VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
Amiga Virus Encyclopedia
-------------------------------
Amiga Virus Encyclopedia
COP 12 Trojan (Circle Of Power)
-------------------------------
Please do not equalize this with Biomechanic.
Biomechanic-variants do Not shorten files. It changes at least five bytes
inside file, not in start!
Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
Trojancodelength and the same Destruktiontext were give a Type
-> Circle Of Power 12:
Known filename : TP5_Andromeda.exe
Trojan warning : Read our warning
File size : 40.216 Bytes
Archive name : TP5-ANDR.LHA
Archice size : 47.000 bytes
FILE_ID.DIZ : .------------------------------------------.
| DIRECTLY FROM THE PARTY 5 |
`------------------------------------------'
.------------------------------------------.
| |
| Andromeda's 40k intro called 'feelings'. |
| |
`------------------------------------------'
Known filename : TP5_Parallax.exe
Trojan warning : Read our warning
File size : 39.980 Bytes
Archive name : TP5-PRLX.LHA
Archice size : 41.000 bytes
FILE_ID.DIZ : .------------------------------------------.
| DIRECTLY FROM THE PARTY 5 |
`------------------------------------------'
.------------------------------------------.
| |
| Parallax's 40k intro called 'Cubic'. |
| |
`------------------------------------------'
Known filename : TP5_SilentsDK.exe
Trojan warning : Read our warning
File size : 39.440 Bytes
Archive name : TP5-TSL.LHA
Archive size : 46.000 bytes
FILE_ID.DIZ : .------------------------------------------.
| DIRECTLY FROM THE PARTY 5 |
`------------------------------------------'
.------------------------------------------.
| |
| Silents DK's 40k intro called |
| 'Byte Kitchen' |
| |
`------------------------------------------'
Known filename : TP5_Spaceballs.exe
Trojan warning : Read our warning
File size : 38.060 Bytes
Archive name : TP5-SPAC.LHA
Archice size : 45.000 bytes
FILE_ID.DIZ : .------------------------------------------.
| DIRECTLY FROM THE PARTY 5 |
`------------------------------------------'
.------------------------------------------.
| |
| Spaceballs 40k intro called |
| 'Ice Frontier' |
| |
`------------------------------------------'
Info : NO bent vectors
NO multiplication
Trojan-part is unknown, no 4EB9.
Filelength after destruction: 31 Bytes.
According to FileID 40k intros
The files contain a lot of garbage that is never reached.
The device reports itself in the CLI with DOS-Extender...
The decoded file reads:
+46-620-13141 DUNGEON OF DOOM DOS-Extender V1.5 .1993 Fornax is..
Unable to wrrte Swapfile. remove write-protectction and retry
Creating new Swapfile. Pleasehold....
The files in the subdirectories should be shortened to #31 bytes.
The files are NOT salvageable. Text content:
Note : I have included the parts here, even though COP is not readable in the
destroyed file. However, the decoding routine, for example, with d7,
corresponds to the COP pattern.