30.Apr.2020
|
Aminet: Beware of new virus
On Aminet a new virus crept in which obviously cannot be detetcted by antivirus software. The file util/virus/vprot.lha contained a Trojaner which writes a bootblock virus on a disk. Those ones who downloaded the archive this morning, should immediately delete it and do not use the disks that were inserted.
The Aminet team is very grateful for the warning which 'Crashdisk' as well as the Virus Help Team have given only few hours after the archive was uploaded. A first analysis was done but still it is not clear how to deal with the virus.
'Crashdisk' has published a dump of the bootblock which includes the pseudonym of the author as well as the name of the virus:
----------------------------------------------------------------------
| Bootblock |
----------------------------------------------------------------------
|$0000|DOS.ê¢+R...p,y....Cú.¸p.N®þh,@"z.äN®ÿ: z.àp."<...@t.N®þz z.Ê"z.Ê|
|$0040|!I.. |..ï.#H..0<.PB~QÈÿü"z.ªp.r.N®ÿ."z.¸Aú.tp.N®ÿÄ |..î¤$HCú..p.|
|$0080| ÙQÈÿüAù.ßð.!J.¤Bh.ˆ1|ƒ..–r.NqQÈÿüQÉÿø!n.&.¤Bh.ˆa..¨,y....Cú.;N®|
|$00C0|ÿ @ h..p.Nugraphics.library.ÿNO VIRUS ON BOOTBLOCK! ÿdos.libra|
|$0100|ry.®..î...îP.à...âï...ÿþ.¤.ù.‚.ù¤.ÿþ.¤..¼.ÿþ....”.ÿþ.... .ÿþ.¤.ù|
|$0140|¡.ÿþ.¤..ÿÿÿþAúþ²Cù..ð.&<...ÿ.ØQËÿü,y....B.N®ÿ(äˆB.N®ÿ:Cù..ð.Óü..|
|$0180|.ø,y....#îþ:..óà-Iþ:Nu.J.E.R.E.M.Y./.C.O.R.O.N.A.!BY!THE!JACKAL!|
|$01C0|2020....f.nb.ej}jbv.v`z}.i}fjak.a`.yf}z|.`a.m``{mc`ld....¤....f.|
|$0200|.P.i....f..F.©.....,f..:a..ÄHç..Iù..ð.*i.(&<...K.ÜQËÿü&<...³B.QË|
|$0240|ÿüLß0.3|....a....©.....,f...a..¤.©.....,f...a..p.©..à..,f..dHçÿþ|
|$0280|3é...À.Î#é.$.À.Ð#é.(.À.Ô#é.,.À.Ø,y....3|....a..0J©. f...,y....3||
|$02C0|....a...J©. f..ì.¹......óòe..:Hç..IúþäKúýö&<.....ƒ.....½.../QËÿø|
|$0300|#ü......óòLß0.a..>Nú.tHç..IúþÄKúý¾&<.....ƒ.....½.../QËÿø.¹......|
|$0340|óòLß0.a...Nú.<.¹......óòHçÿþAù..ð."HB¨..2<.ÿp.Ð~d...R¤QÉÿöF¤#À..|
|$0380|ð.Lß.ÿNu,y....3|....#|..ð..(#|.....$#|.....,a..03|....a..&3y.À.Î|
|$03C0|..#y.À.Ð.$#y.À.Ô.(#y.À.Ø.,Lß.ÿNù.ü......................XCOPY!..|
----------------------------------------------------------------------
(cg) (Translation: dr)
[News message: 30. Apr. 2020, 15:43] [Comments: 0]
[Send via e-mail] [Print version] [ASCII version]
|
