COP 12 Trojan (Circle Of Power) - Amiga Virus Encyclopedia

VIRUS HELP TEAM
Amiga Antivirus Website
www.vht-dk.dk



Amiga Virus Encyclopedia

     -------------------------------    
     Amiga Virus Encyclopedia    
     COP 12 Trojan (Circle Of Power)
     -------------------------------


     Please do not equalize this with Biomechanic.
     Biomechanic-variants do Not shorten files.  It changes at least five bytes
     inside file, not in start!

     Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
                 Trojancodelength and the same Destruktiontext were give a Type


    -> Circle Of Power 12:
     Known filename      : TP5_Andromeda.exe
     Trojan warning      : Read our warning
     File size           : 40.216 Bytes
     Archive name        : TP5-ANDR.LHA
     Archice size        : 47.000 bytes
     FILE_ID.DIZ         : .------------------------------------------.
                           |        DIRECTLY FROM THE PARTY 5         |
                           `------------------------------------------'
                           .------------------------------------------.
                           |                                          |
                           | Andromeda's 40k intro called 'feelings'. |
                           |                                          |
                           `------------------------------------------'
     
     Known filename      : TP5_Parallax.exe
     Trojan warning      : Read our warning
     File size           : 39.980 Bytes
     Archive name        : TP5-PRLX.LHA
     Archice size        : 41.000 bytes
     FILE_ID.DIZ         : .------------------------------------------.
                           |        DIRECTLY FROM THE PARTY 5         |
                           `------------------------------------------'
                           .------------------------------------------.
                           |                                          |
                           |   Parallax's 40k intro called 'Cubic'.   |
                           |                                          |
                           `------------------------------------------'
     
     Known filename      : TP5_SilentsDK.exe
     Trojan warning      : Read our warning
     File size           : 39.440 Bytes
     Archive name        : TP5-TSL.LHA
     Archive size        : 46.000 bytes
     FILE_ID.DIZ         : .------------------------------------------.
                           |        DIRECTLY FROM THE PARTY 5         |
                           `------------------------------------------'
                           .------------------------------------------.
                           |                                          |
                           |       Silents DK's 40k intro called      |
                           |              'Byte Kitchen'              |
                           |                                          |
                           `------------------------------------------'
                           
     Known filename      : TP5_Spaceballs.exe
     Trojan warning      : Read our warning
     File size           : 38.060 Bytes
     Archive name        : TP5-SPAC.LHA
     Archice size        : 45.000 bytes
     FILE_ID.DIZ         : .------------------------------------------.
                           |        DIRECTLY FROM THE PARTY 5         |
                           `------------------------------------------'
                           .------------------------------------------.
                           |                                          |
                           |       Spaceballs 40k intro called        |
                           |              'Ice Frontier'              |
                           |                                          |
                           `------------------------------------------'
     
     Info                : NO bent vectors
                           NO multiplication
                           Trojan-part is unknown, no 4EB9.
                           Filelength after destruction: 31 Bytes.
                           According to FileID 40k intros
                           The files contain a lot of garbage that is never reached.
                           The device reports itself in the CLI with DOS-Extender...
                           The decoded file reads:
                           +46-620-13141 DUNGEON OF DOOM DOS-Extender V1.5 .1993 Fornax is..
                           Unable to wrrte Swapfile. remove write-protectction and retry
                           Creating new Swapfile. Pleasehold....
                           The files in the subdirectories should be shortened to #31 bytes.
                           The files are NOT salvageable. Text content:
     Note                : I have included the parts here, even though COP is not readable in the
                           destroyed file. However, the decoding routine, for example, with d7,
                           corresponds to the COP pattern.


     


Virus Help Team
Denmark & Canada
Copyright © All Rights Reserved