Virus Warning - Virus Help Team

Denmark & Canada

ScareCrow 1 trojan

 ...........................  VIRUS HELP DENMARK  ...........................

 Hi All....                                                          08.08.97

 There is a new trojan out. The trojan in inside a "Fake Ibrowse v2.0" If you
 run Ibrowse a picture will be shown  with a face, and a text that is telling
 you that ScareCrow has done damage to your system. When I tested the archive
 on my test  system (68000), everything it did was to replace my userstart-up
 and startup-sequence,  with a text file. If it does damage to other systems
 I don't know at the moment, but it will be testet very soon.

 Here is text:

 >------------------------------ START LETTER ------------------------------- 


 Since i now have your undevided attention while you are trying to save
 what is left of your hard-disk i might as well begin.
 Your first question will be why? The why is becose i am playing a fair
 game with someone for some time now, his name is Jan Hendrik Lots of
 Virus Help team NL. He and his little buddies of AGA tryed to catch me
 last year with no succes, but what would you expect if you relay on their
 help lead by a clowns character calling himself KleinDuimpje. Yes,
 KleinDuimpje, you better start up that board again becose we havnt finished
 yet. Hunting season is open again fans, and these trojans i have been
 spreading are just mearly the beginning of it. i would also like to invite
 some of the people i admire: Nr. 1 is L.I.S.A. (lamers in serious agony)
 They did a great job, and they inspired me. Nr. 2 is C.O.P. (faust, circle
 of power) Damn, i loved that Tetris attack! Nr. 3 is smooth criminal aldo
 the boy has no taste, im inviting him to this party. What have i cooked up?
 i am planning to make a competition out of this, who ever wants to compete
 is invited. Who can make the most trojans and virusses, who can put down the
 most boards. Who can make the most hits and i am listing them all. The list
 will be released in a trojan by the end of each month. time to play.

 >------------------------------- END LETTER -------------------------------

 I guess that Jan Hendrik Lots must know something about this guy, I'll get
 in contact with Jan Hendrik Lots and have a talk with him.

 Anyway, we know ScareCrow's real name, adress, phone number (the new one),
 and a lot of other things about this guy. Actions might be taken later on.

 Well...... But everybody should think before installing programs like this
 one. A new update of Ibrowse ?????. version 2.0 ?????. Don't install these
 programs that  you are not 100% sure that is okay. If you want to, try and
 install the programs like this on on floppy disks,  it takes a bit longer,
 but it might save your system........

 Here is some info about this trojan & archive:

 Archive name.....: DCN-IB2.LHA or DCN-IB2.LZX
 Archive size.....: 595211 bytes (ripped for BBS adds)
 Trojan name......: Ibrowse
 Trojan size......: 327848 bytes Unpacked.
 File-Id.Diz......:       /\             _         _
                      ___/  \___________(_)_______(_)__________
                     / ________  /  ___/ \  _____/ ____  ____  \
                    /  /  /  ___/  /  /  /\__  \/  /  /  /  /  /
                    \____/\___________ __________ /\____/\_/\_/|
                    .--aMiGA iLLEGAl--\/--------\/Rr!----------.
                    |        IBrowse 2.00 FINAL 68030+         |

 Don't start this program.....

      __           Jan Andersen         E-Mail..:
 __  ///          --------------           FidoNet.:  2:237/38.100
 \\\///       Virus Help Team Denmark         AmyNet..: 39:140/127.100
  \XX/              VirNet..: 9:451/247.0

Virus Help Team
Denmark & Canada
Copyright © All rights reserved