Virus Warning - Virus Help Team

VIRUS HELP TEAM
Denmark & Canada



Gath95-! Trojan Trojan
  
 VirusWarning ! VirusWarning ! VirusWarning ! VirusWarning !

 The archiv Gath95-!.lha contains a trojan ! DELETE IT !


 Gath95-! Trojan:
 ----------------

 Filelength: 14032 bytes unpacked (crypted with a simple loop)

 other possible names: Achtung(.exe) trojan

 This is a very simple trojan. It tries to format your dh0: using quick-
 format and afterwards it will be tried to fill your dh0: using files
 with the following names: dh0:lamer.aaaaa. The filesnames can differ in
 the last chars (possible to really fill up the drive).

 The trojan writes a new file with the name:

 "ram:verwirrung" (a german word, which means irritation)


 The the executecommand for the quickformat will be started. The new name
 of the dh0: device is then LAMER.

 This trojan is much more dangerous than the ordinary quickformat stuff,
 because of the high amount of new written files (lamer.aaaax), the intern
 structures of the qickformatted directory will be changed and a data loss
 is in most cases not to prevent.

 This trojan was spreaded as intro for the Gathering`95 party in Oslo.


 File_ID.DIZ:

 +------------------------------------------+
 |Virtual Dreams, Melon and Rage's New Intros
 +------------------------------------------+
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
  THE GATHERING PARTY INVETATIONS. 3 OF THEM
 [%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%]
 +------------------------------------------+
 |The BEST CODE of 1994/95. Defintly! Get it!
 +------------------------{ cSo/('g5! }---+


                                             Detection tested 11.2.1995.


  Special thanks to Mario/TRSi for keeping this virus for me !
                    Euronymous/TRSi for the warning !
                    Ixxy/TRSi for calling Mario


  Greets
            Markus Schmall




Virum Help Team
Denmark & Canada
Copyright © All rights reserved
www.vht-dk.dk