------------------------
     Amiga Virus Encyclopedia
     Port 1599 Trojan
     ------------------------


     Name         : Port-1599

     Aliases      : No Aliases

     Original     : -

     Type         : Trojan
     
     Size         : c:loadwb (incorrect)  packed:   1192 bytes
                                          unpacked:  748 bytes
                    l:startup.handler (real loadwb) 1136 bytes
                    l:background.handler            1700 bytes

     Installer    : Unknown

     Symptoms     : An ARexx program. The coding routine corresponds
                    to the Port-67 Trojan routine down to the byte.

     Discovered   : 5 march 1998

     Way to infect: Boot infection

     Rating       : Harmless

     Kickstarts   : 1.2
                    1.3
                    2.0
                    3.0

     Damage       : Overwrites Bootblock

     Visible text : -

     Comments     : An ARexx program, a time loop, test on Snoopdos
                    and Scout, newshell.
                    According to third-party statements:
                    There are supposed to have been unauthorized accesses
                    (spying on passwords, formatting partition)

     Info         : The 1599 port seems to have been known to "insiders"
                    for some time. The corresponding Amiga programs are
                    now said to allow defensive entries.
                    See also Port-67 Trojan

     Antivirus    : Kickstart 1.2 & 1.3..... : VT-Schutz
                    Kickstart 2.0 and higher : VirusZ III, with the new Xvs.library installed 

     Test made by : Heiner Schneegold
    

     

☣

Virus Help Team Denmark & Canada Copyright © All Rights Reserved

☣