COP 15 Trojan (Circle Of Power) - Amiga Virus Encyclopedia
VIRUS HELP TEAM Amiga Antivirus Website www.vht-dk.dk
Amiga Virus Encyclopedia
-------------------------------
Amiga Virus Encyclopedia
COP 15 Trojan (Circle Of Power)
-------------------------------
Please do not equalize this with Biomechanic.
Biomechanic-variants do Not shorten files. It changes at least five bytes
inside file, not in start!
Groupbuild: Files were shortened with 3E9-Trojanbegin. Files with the same
Trojancodelength and the same Destruktiontext were give a Type
-> Circle Of Power 15:
Known filename : TETRIS.EXE
Trojan warning : Read our warning
File size : 21.244 Bytes
Archive name : HF-TETA1.LHA
Archive size : 646.347 bytes
FILE_ID.DIZ : _ ____________________________________
/ I \_ ___\ / / ___\__/____ \_ __/
/ _ / __)/ /\ /\ _// \| / // __)
/ ! / ! / / / / \ |/ | \ \ ! \
\___! \____\____\____/ |\____| |\__\____/
----| \--------| |-----| |PreSENtS
TETRIS ATTACK *FULL RELEASE* [1/2]
Known filename : TETRIS2.EXE
Trojan warning : Read our warning
File size : 21.244 Bytes
Archive name : HF-TETA2.LHA
Archive size : 550.826 bytes
FILE_ID.DIZ : _ ____________________________________
/ I \_ ___\ / / ___\__/____ \_ __/
/ _ / __)/ /\ /\ _// \| / // __)
/ ! / ! / / / / \ |/ | \ \ ! \
\___! \____\____\____/ |\____| |\__\____/
----| \--------| |-----| |PreSENtS
TETRIS ATTACK *FULL RELEASE* [1/2]
Info for both : The two TETRIS.EXE have the same content!
Trojan-part is two Hunks, 432 Bytes.
Filelength after destruction: 41 Bytes.
The second part is the destruction part. This part alone IS EXECUTIVE!!!
Decoded reads: .FausT / cIRCLE oF pOWER'95 - TRUE POWER!
The files in the subdirectories should be shortened to #41 bytes.
The destruction part was linked as the first part using the 4EB9 method.
Damage : The trojan will replace files in LIBS:, DEVS:, S:, with a new file with
the length of 41 bytes, and in this file you can read this text:
"FausT / cIRCLE oF pOWER'95 - TRUE POWER!"
