Contents | < Browse | Browse >
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
%% SHI Hack Report                                  By: Erik Loevendahl %%
%% Scams and trojans and the like...                hlau@dou.dk         %%
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%

                                      ||
         The Hack Report              ||    Written by Erik Loevendahl
       for September, 1994            ||
                                      ||          Fidonet : 2:236/116.17
  BBS Hack Report Support             ||          Amiganet: 39:141/127.17
  SysOp Jan Andersen:                 ||          Telefax : +45 5599 3498
                                      ||
  Safe Hex International BBS          || Henrik Lauridsen Internet support:
  phone (+45) 3672 6867,              ||                       hlau@dou.dk
  14.400 v32b, 24 hour.               ||
                                      ||
  Lars Stockholm Packet Radio support:|| Benny Petersen Cbmnet support:
         OZ1GYQ@OZ4BOX.SAX.LOL.DNK.EU ||       bennyp@bennyp.adsp.sub.org
                                      ||
                                      ||  Number 1
  Released by Safe Hex International  ||  Report Date: Sep 15, 1994
                                      ||
  =========================================================================

  Welcome to the first issue of The Amiga Hack Report.  This is a series of
  reports that aim to help all users of files found on BBSs avoid
  fraudulent programs, and is presented as a public service by the
  FidoNet, Internet and Amiganet International E-mail echos.

  Thanks  to everyone who has helped put this report together, and to those
  that have sent in comments and suggestions.


  NOTE TO SYSOPS: The Hack Report may be freely posted as a bulletin on
  your BBS, subject to these conditions:


             1) the latest version is used,
             2) it is posted in its entirety, and
             3) it is not altered in any way.


  NOTE TO OTHER READERS: The Hack Report (file version) may be freely
  uploaded to any BBS, subject to the above conditions, and only if you do
  not change the filename.


  The author is not responsible for any loss of data nor is he responsible
  for any information if it isn't correct. This list is made as a help and
  a lot of work is done to validate all the below mentioned informations to
  be so correct as possible, but who knows? .....


  The idea is to make this information available freely.  However, please
  don't cut out the disclaimers and other information if you use it, or
  confuse the issue by spreading the file under different names.  Thanks!


  If you see other fake or trojan versions NOT listed here, please contact
  one of the above supporters or myself so that we can keep this listing up
  to date.

                                                      Erik Loevendahl

  =========================================================================


                           HACKED AMIGA PROGRAMS

  Here are the latest known versions of some programs known to have hacked
  fake or trojan copies floating around.  Archive names are listed when
  known, along with the person who reported the fraud. (thanks from us
  all!).


   02-02-94  VirusZ II 1.05, 68544 bytes is a fake. The original is VirusZ
             II 1.05 is 66116 bytes long. Reported by Georg Hörmann.

   20-03-94  X-Copy 8.5 66424 bytes is a trojan. Installs the  Fmfoj Xjsvt
             v2.2 (Eleni) boot virus, which can damage your harddisk.

   17-05-94  Decompiler (Autoboot Disc Creator), 53.992 bytes is a trojan,
             Renames your harddisk directories. Reported by W. Gorzkowski.

   25-05-95  Hacker 20.980 bytes unpacked is said to optimize your modem
             settings, but in fact it is a trojan

   04-06-94  DOSTrace 2.18, 10.636 bytes is a fake version. Reported by
             Peter Stuer.

   05-06-94  DMS 2.13 92.440 bytes packed in a file named "Dms213ur.lha"
             will format your harddisk. Reported by Kim B. Jensen.

 * 15-06-94  NoCare27.lha 28.848 bytes unpacked delete your HD files.


   18-06-94  DMS2.12 lha, Device-Masher System, DMS/FMS-Masher 2.12 Extra
             Turbo 92.208 bytes is a fake.

   20-06-94  Ua62.lha,  Ua-dialer v6.2 26828 bytes PPacked, 51.956 bytes
             unpacked is said to damage your S/Dir.

 * 02-07-94  NCOmm 3.09 221.056 bytes is said to be a trojan, which
             installs the eleni virus, that can damage your harddisk.

   07-07-94  Hd_speedup.exe, 6252 bytes unpacked found in "HD_Speedup.lha"
             will damage your harddisk. Reported by Steen Brusgaard.

   15-07-94  Clx_doom.lha, Doom 32020 bytes is a nasty trojan, which change
             your assign and setpatch command. Reported by Edwin Leenders.

   23-07-94  Elien_virus_checker 0.1 is  nasty  trojan. Found in a file
             called "elien.exe". 1016 bytes PPacked, 596 bytes unpacked.

 * 02-08-94  Esp-dmpd.lha (DiskMaster 2 PAL Fix) is said to contain a
             linkvirus.

   16-08-94  Amix43.lha, AmiExpress 4.3 173.764 bytes unpacked is a fake
             and is said to have 2 backdoors.

   23-08-94  God-j12.lha, JiZaNSi 1.2 - IFF 2 ANSI converter 22.008 bytes
             unpacked is a trojan. Reported by Peter Hansen.

 * 24-08-94  Viewtek22.lha 93.844 bytes contains a link virus. Reported by
             Betasoft.

   01-09-94  Dskslv3.DMS. Disksalv 3.01 106584 bytes unpacked is said
             to be a trojan. Reported by Dave Haynie.

   08-09-94  Vmk30.lha, Virus Memory Kill V3.00 2620 bytes is a trojan
             which will damage your harddisk. Reported by Chris Hames

   11-09-94  Vzii110.LHA, VirusZ II 1.10 70452 bytes is said to be a fake
             this is not true. Reported by Teddy Petersen.


  =========================================================================

  The above marked * trojans or fake versions isn't implementet in the
  SHI virus killers yet, so please take care and send these trojans for
  new update to the above mentioned !!.


  A little trick for SysOp's: Print this little list and use it to check
  your new uploads!!


  Please use this form below if you find some fake versions or trojans and
  send it to Safe Hex Internalional by E-mail or by post.



  --> cut here

  ========================================================================

                              HACK REPORT FORM:

  ------------------------------------------------------------------------
  YOUR NAME:
  ------------------------------------------------------------------------
  ADDRESS:                                   ZIP CODE:
  ------------------------------------------------------------------------
  COUNTRY:                                   PHONE:
  ------------------------------------------------------------------------
  WHICH PROGRAM IS A FAKE OR A TROJAN :                    VERSION:
  ------------------------------------------------------------------------
  A LITTLE DESCRIPTION
  (Why do you think this is a fake or a trojan)










-------------------------------------------------------------------------

  ATTENTION IF..

  Possible please send the actual fake or trojan to Safe Hex International!


            THANK YOU VERY MUCH FOR YOUR  HELP! WITHOUT YOUR
            VALUABLE HELP WE COULDN'T HAVE MADE THIS LIST!!!


========================================================================

  --> cut here

            SAFE HEX INTERNATIONAL MAIN
            Erik Loevendahl                  Fidonet:  2:236/116.17
            Snaphanevej 10                   Amiganet: 39:141/127.17
            DK-4720 Praestoe                 Telefax:  +45 5599 3498
            Denmark


      __    SHI BULLETIN BOARD TEAM DK
 __  ///    SysOp: Jan Andersen              FidoNet: 2:236/116.1
 \///     CoSysOp: Erik Loevendahl         AmyNet : 39:141/127:1
  XX/

            tlf: (+45) 3672 6867, 24 hours anti-virus support

                               "THE AMIGA LIVE"

==========================================================================


This message has also been posted in bit.listserv.i-amiga, sorry for any
inconvenience
Enter <RETURN> to continue.