Contents | < Browse | Browse >


/// SHI News:  Virus Warning!                          Here we go again!
    -------------------------



      ATTENTION: FROM MICHAEL ARENDS @ the SHI Regional Virus center

                 P.O. Box 1531,- Lynnwood, WA  98046-1531
              -----------------------------------------------

      A ANNOUNCEMENT FROM ERIK LOVENDAHL SOERENSEN the founder of SHI



                   SAFE HEX INTERNATIONAL VIRUS WARNING 


Please  take care for the new blased "Descriptor 3.0" trojan bomb, which
is being spread worldwide.   Please spread  this  text  file  to your
favorite  BBS's.   Please  write a letter to all your users at your BBS to
tell,  that this text file is called:  "Warn2793.lha", and ask them to read
this  warning.   Please  place  this  txt.file and all future in your virus
killer area at your BBS.

In the above mentioned way you can maybe help a lot of people to avoid to
get a damaged harddisk or bulletin board.


                          Thank  you  very  much.
  

                              *      *      *


ATTENTION SYSOP's 
---------------
Please delete or change the following:

1. Concerning  Virwarn-1.lha 6186 please delete this old file, if uploaded.

2. Only use the new updated version:  Warn2693.lha length 9277 bytes.

3. If  you have a text file 9277 byte called Virwarn-1b.lha or VirWarn2.lha  
   please rename this file 9277 to Warn2693.lha. 

4. The  above is because I try to update you from time to time with the 
   latest virus news. And I try to release it as Warnxxxx.lha, where the
   xxxx are the week (in the 2 first digits), and year (the next 2 digits).


                              *      *      *


HERE YOU HAVE SOME FACTS ABOUT THIS NEW VERY NASTY TROJAN BOMB:
--------------------------------------------------------------

This virus is original spread as descr4.0.lha or -z-speed.lha = 3484 
bytes, from some pirate BBS'es:


  descr4.0.lha  3484 bytes     The  new  DescriptorV4.0  with new POWER 
                               Snap... Run  without  Snap in background 
                               and you will see the new Powersnap 120 % 
                               faster in copy Descriptions.


    -z-speed.lha   3484 bytes    ZENITH MODEM SPEEDER

 
When  unpacked  you  got  a  file:  descr4.0.exe 7016 bytes (When spread
as descr4.0.lha file.  I dont't know anything about the -z-speed.lha yet)


HERE YOU HAVE SOME FACTS:
------------------------

1. There  is  no  docs with this file, but the program looks like a kind of 
   scene-utility or like.

2. The unpacked "Descriptor 3.0" bomb is 7016 bytes. Please remark IT ISN'T 
   ......the 4.0 version, but a 3.0 version!  

3. The "Discriptor 3.0" needs a file named "descriptions.txt" placed in the
   S/Dir, if not the descriptor guru.

4. In this pack you can see how the Discriptor bomb looks, if you run the 2
   files named: DescriptorDump1.IFF and  DescriptorDump2.IFF. 

5. If  executed  the  "Discriptor  bomb"  will  tell,  that it need  a file 
   called "Snap" in memory or tries to load it from the C/Dir., Don't trust 
   this...

6. Infact you Amiga will get the following command: Delete :#? all

7. And OH, NO...your whole harddisk or disk will be deleted!
 
8. This trojan can't infect and be spreaden. It can ONLY DAMAGE IF EXECUTED!



                            *    *    *    *    *



HERE YOU HAVE A LITTLE ASCII SHOT-CUT OF THE DESCRIPTOR BOMB:
------------------------------------------------------------
Descriptor V3.0 User Interface
Search for Group Name
Reload Descriptions
About
Quit
List all Names
View next Logo
Pop Screen back
Window backpop
raw:0/11/640/102/Descriptor V3.0 by Colorboy of Submission 
on 29-JUN-1993/nosize
raw:0/11/640/186/Descriptor V3.0 by Colorboy of Submission 
on 29-JUN-1993/nosize
S:Descriptions.TXT
Cannot find the Text file called 'S:Descriptions.TXT
Press Return to Exit!
Enter new Name! 
Descriptions displayed !! 
HI Cannot allocate Memory!Press Return to Exit!
Sure that File format us correct Press Return to Exit!
There is a further Description 4 diz Group
END OF LIST
Press any key to continue - Q or X to exit
Error opening 'gadtools.library'.
Error opening gadget.
Error opening window.
Hey yo lame bastard! What about kick 2.0?
Either I couldn't open a reply port or find the 'clipboard.device'.
HSnap is not in memory. I try to load it from C-Dir.          
Use underlined characters as hotkeys and follow the directions.
COULDN'T COPY TO CLIPBOARD!        Update by  MCI         
Submission 93
topaz.font
FORM
FTXTCHRS
    ../......./....../..................            Credits
    :/  ¯¯¯¯¯|/  ¯¯¯¯|/  ¯¯¯¯¯|SUBMISSION`:    
    /    |___|   |  _|    |___|:..........:       CODING       BY COLORBOY
    /__           /__    :THE:SIGN`::        DEZIGN &IDEA BY MCI
    /    |   /   |   /    |   /::..OF....::              
      _____/______/_____  /:::STYLE`::::       TYPE IN A GROUP NAME NOW!
    `/      DESCRIPTOR    /B-S::.....:(C)OPYRIGHT SUBMISSION 93

-÷!÷-  Your HD is deleted ... Happy Birthday -MCI-/DCS AHHAHAHAHAHAHA  -÷!÷- 

                              *      *      *

SHI VIRUS KILLER UPDATES
You  can  do  a valuable help to send new viruses to Safe Hex International
for  update  this  new SnapShot killer (SnapShot20.lha), and a lot of other
killers  eg.:   Virus  Checker,  BootX, VT and VirusZ.  Did you for exampel
know,  that  SHI  have  made  the  virus test programming in D-Copy 3.1 and
in the commercial X-Copy program version april 93?


NEW BULLETIN BOARD KILLER
Look  out  for  our  new SHI special BBS Killer "Supervisor", which will be
released within a few months and please help us to get more viruses for the
update of this quite new kind of virus killer. 

Please ..help us with the later mentioned wanted viruses and of course help
yourself  and  your  Amiga  friends  too.  Safe Hex International need your
help to combat against all these nasty viruses.


                             THANK YOU VERY MUCH! 



                          *     *     *     *     *
   


SHI REWARD NOW $5000 - VIRUS PROGRAMMER WANTED!
----------------------------------------------
Do  you know a virus programmer? You can get a reward of $1000 for his name
and  address. The fact is that the law punishes data crime very, very hard.
Please note that your name will be confidential, known only to me.



                    Several  people  have asked me  about our 
                    reward  $  1000  for  the name of a virus
                    programmer,  and  a few have phoned to me
                    or have written to me to get the reward. 

                    One  of  the  askings  was about if other 
                    than Amiga viruses was inclued the reward
                    ?......Of cause we pay the reward for ALL
                    different  kinds  of viruses both PC, MAC 
                    and like.

                    To-day  I  don't  have  got a valid virus
                    announcement. If you know a virus program
                    -mer, therefore please state:

                    1. The  virus  name  (must be wellknown).
                    2. The address and name of the virus pro-
                       grammer.
                    3. The  name  and  the  address  of other 
                       people,  who maybe know that the virus 
                       programmer have spread this virus.
                    4. If  you  know, which way the virus was
                       spread please state this, (spread e.g. 
                       by modem) 
 
                    I can ensure, that your name will be held
                    100 %  confidential,  when we contact the 
                    police, if you want that!

                    Please  contact  me, and  I will send you 
                    more info:

                            SAFE HEX INTERNATIONAL
                            Erik Loevendahl Soerensen
                            Snaphanevej 10
                            4720    Praestoe
                            Denmark

                            Ph.   + 45  55 99 25 12
                            Fax   + 45  55 99 34 98




                          *     *     *     *     *



    N E W   V I R U S   U P D A T E S   F O R   M O D E M   U S E R S:

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

If  you have modem.  Send new viruses direct to the "Safe Hex International
special restricted virus area  J 7  at:



BITS'N'CHIPS BBS: +45 31 31 87 42             Sysop: Henning Larsen
                                              (24 hours - HST 14.4)

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


Or please use our new excellent SHI bulletin board:

SAFE HEX INTERNATIONAL BBS: 

      ISDN    : + 45 87 25 00 03                      Sysop: Benny Petersen
                                                      24 hours support
      DUAL/STD: + 45 86 62 72 16


:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


                             GOOD VIRUS HUNTING


      *   *   *   THANK YOU VERY, VERY.. MUCH FOR YOUR HELP   *   *   *




                                       KIND REGARDS YOUR AMIGA FRIEND

      
                                          ERIK LØVENDAHL SØRENSEN
                                           SAFE HEX INTERNATIONAL